Mewbyte - InfoSec Blog

PKI:  Public key infrastructure is something that establishes and manages public key encryption and digital signature services.  For public key encryption to work, digital keys and certificates need to be created, stored, distributed, managed, revoked, used and so on. PKI allows for encryption to do all of these things with software, hardware, protocols, policies, processes and services. PKI enables what we call public key encryption (aka asymmetric encryption) to be able to use two keys. One key encrypts while the other decrypts. The two keys used are the public key and the private key. The keys are aptly named as one key is available to the public and the other one is private. Who Are the Key Players Involved in PKI? There are three main elements to PKI: The key pair , which we just covered is one of them. Certificate authorities (CAs)  are another. CAs are trusted third-party bodies that develop and manage digital certificates. Trusted is the key word there a...

  AES vs DES encryption algorithm What Is a Symmetric Block Cipher? An example of some of the components of a symmetric block cipher (symmetric encryption). To know what DES vs AES actually means, you first need to understand what a symmetric block cipher is. Also known as symmetric encryption algorithm, a block cipher is a cryptographic algorithm that turns plaintext data into encrypted text (also known as ciphertext). To give you an example, a block cipher might turn “Apple” into something like “2e$5kv7fg*=v#.” The transformation from plaintext to ciphertext is carried out using what’s known as a symmetric encryption key, which is a mathematical function. Basically, upon applying this key, the plaintext is turned into blocks of a certain size that are then encrypted. Because it’s a symmetric key, it can also decrypt the encrypted text, which reverts it to its original form. Modern block ciphers: Are fast and can process vast amounts of data.  Because they’re able to han...

BACnet x Modbus x LonWorks There was no standard industry network protocol for building automation. Building automation  is the automatic centralized control of a building's  HVAC (heating, ventilation and air conditioning) , electrical,  lighting , shading,  Access Control ,  Security Systems , and other interrelated systems through a  Building Management System (BMS) or Building Automation System (BAS) . The objectives of building automation are improved occupant comfort, efficient operation of building systems, reduction in energy consumption, reduced operating and maintaining costs, increased security, historical performance documentation, remote access/control/operation, and improved life cycle of equipment and related utilities. Building automation is an example of a  distributed control system  – the  computer networking  of electronic devices designed to monitor and control the systems in a building. Today there are three inter-o...

What are rainbow tables? A powerful tool for decrypting passwords. A relatively large group of people on both sides of the law pour lots of energy into  cracking passwords  – either because they stand to profit from the criminal process or because they’re experts who regularly check security standards for effectiveness. Rainbow tables make it possible under certain circumstances to find out passwords within seconds. Even if you’re not up to any criminal activity, it’s worth understanding the process. With this knowledge in the back of your mind, you can better understand as a user why complex passwords are necessary, and as a provider of a web offer what must be considered to  secure your passwords . Why do you need rainbow tables? Passwords these days are (hopefully) no longer stored online without encryption. When users set a password for their account on an online platform, the string  doesn’t appear in plaintext  on any database or server. This method would ...