• Breaking News

    Thursday, December 13, 2018

    Cryptography How does the fingerprint encryption work?

    Cryptography How does the fingerprint encryption work?


    How does the fingerprint encryption work?

    Posted: 13 Dec 2018 01:50 AM PST

    Hi all, I've had this question in my mind for a while and I couldn't figure out how a fingerprint encryption system works. In particular, I'm referring to the one used in Android, that stores your passwords and protects them with the fingerprint. I don't know much about cryptography, but I know that if you want to encrypt some data you need a key. So, in theory, the fingerprint features could be used as a key to encrypt data. However, the data coming from a fingerprint is likely to be noisy and I don't think it's possible to use it as an encryption key itself. Instead, it makes much more sense to use it as an ON/OFF lock based on similarity. Whenever the fingerprint scanned is close enough to the fingerprint stored, "open the lock". But then, how is the data really encrypted? Is the fingerprint itself used at all in the actual encryption? Or what key is it used, and how do they make sure that no one can access to it?

    Thanks in advance for your answers!

    submitted by /u/ale152
    [link] [comments]

    E-Voting Crypto Protocols - JP Aumasson

    Posted: 12 Dec 2018 02:10 PM PST

    AES padded encryption vulnerability

    Posted: 12 Dec 2018 09:31 AM PST

    Own a wallet.dat file from 2010-2011 Bitcoin core client. Yesterday I saw there was a vulnerability which is makes attacking somewhat easier if your wallet is generated by old client and I'm pretty sure my wallet is affected that vulnerability because my last transaction is made 2010.

    So my problem is I don't have any idea about wallet passphrase. Maybe the vulnerability helps to open my wallet. It is about AES padded encryption. But i don't have enough cryptographic knowledge to handle it. I'm aware it is brute force task but the vulnerability decreases time of task.

    I hope that someone can create a brute force tool for me which is using the vulnerability, so that I can recover my wallet. Also I'm offering 25 BTC reward for tool maker. Thank you!

    There is already brute force tool for wallet.dat file. My passphrase is max 12 char. a-Z and numbers. I'm aware about how big is the search space but I'm not looking any random passphrase up to infinite length. It is max 12 char.

    Example brute force tool : https://github.com/gurnec/btcrecover

    Github Report about vulnerability : https://github.com/bitcoin/bitcoin/commit/c682cdf3eda0f55297eb0e72a04508b7b9c2f5df

    VulDB report : https://vuldb.com/?id.4883

    submitted by /u/stellarpay
    [link] [comments]

    No comments:

    Post a Comment