SecurityDriven.Inferno

SecurityDriven.Inferno copied to clipboard

I researched my library for cross-platform compatibility. And since our encryption add-on uses your library, I also checked you out and made a PR based on that. There are also...

HavenDV

Constant-time comparison: which approach is best?

8

## Which approach is best? `AndEq` approach, used by [internal](https://referencesource.microsoft.com/#System.Web/Security/Cryptography/CryptoUtil.cs,de48632ccae97d0b,references) and [public](https://github.com/aspnetwebstack/aspnetwebstack/blob/master/src/System.Web.Helpers/Crypto.cs#L161) Microsoft helpers: ```csharp static bool AndEq(byte[] a, byte[] b) { bool f = a.Length == b.Length; for (int...

sdrapkin

ECDiffieHellman code in NETCOREAPP2_1 is inefficient & complex - can it be improved?

4

[ECDiffieHelman :: GetSharedSecret](https://github.com/sdrapkin/SecurityDriven.Inferno/blob/9eab7896abed4f58577b1c2a6a4895d654c61711/Extensions/CngKeyExtensions.cs#L49) @bartonjs The `NETCOREAPP2_1` code to use `ECDiffieHellman` to derive a shared secret from a private `CngKey` and a public `CngKey` is very messy/complicated, compared to `NET462` code....

sdrapkin

Update from 1.5.3 to the latest version is broken

2

I’ve recently updated from 1.5.3. to the latest version and seeing a breaking issues with EtM_DecryptTransform and EtM_DecryptTransform . Looking at the history I can see there is a breaking...

stevenbeckett

Without seeking the interface behaves identically to before. This is very useful when wanting to read a stream in a non-linear fashion. If block 0 is not read first (required...

philipag

Question about FAQ and use of AES CRT

1

Sorry for the question here, but I am reading the FAQ and get the impression that the current symmetic encryption scheme use AES CRT adding all the safety measures that...

ItSkary