1. “Password” and “Passphrase” In real life, the term “password” refers to things like the startup “password” for devices, WeChat “passwords”, and bank card payment “passwords”. These “passwords” are actually passphrases. A passphrase is merely a “pass” to access personal computers, mobile phones, email accounts, or personal bank accounts; it is a simple, basic method … Read more
1. AES (Advanced Encryption Standard) Core Principles 128-bit key: 10 rounds 192-bit key: 12 rounds 256-bit key: 14 rounds Block Cipher: The plaintext is divided into fixed-length blocks (blocks) for encryption. The block length of AES is fixed at 128 bits (16 bytes) Key Length: Supports128-bit, 192-bit, and 256-bit key lengths, corresponding toAES-128, AES-192, AES-256. … Read more
In today’s world, where data security threats are increasingly severe, ensuring the confidentiality of static data (data at rest) has become a top priority. Relying solely on software encryption is insufficient; a combination of high-performance hardware acceleration and hardware-level key management is essential to build a truly robust defense. This article will delve into how … Read more
Click on the “Business Card” above to follow our public account You can obtain programming materials from the menu bar Hello, I am Coder-Wen Xiaobai,a post-95 Java backend developer. 1. Introduction In the process of developing business systems, we inevitably use databases. During application development, database connection information is often configured in plain text in … Read more
Last year during the upgrade of the core banking system, I spent three minutes staring at the “Transaction Security Encryption in Progress” message on the mobile banking app—not because the system was stuck, but because our team was debugging the integration of the SM4 algorithm overnight. As a commercially developed encryption algorithm in China, SM4 … Read more
From the previous test (Performance Comparison of Different Encryption Algorithms in OpenVPN), we found that there are differences in forwarding performance when OpenVPN uses different encryption algorithms, as shown below: Comparing the encryption algorithms, we can see that the specific encryption algorithms are divided into three parts: the first part is the algorithm name, which … Read more
Author / Tao Jianfeng, Director of Information Technology Department, CITIC Construction Investment Securities Co., Ltd. Du Guowei, Chen Hongping, CITIC Construction Investment Securities Co., Ltd. Information Technology Department Since the implementation of the “Cryptography Law of the People’s Republic of China”, it has effectively promoted the advancement of cryptographic technology, industry development, and standardized applications. … Read more
National encryption refers to the domestic encryption algorithms recognized by the National Cryptography Administration. The main algorithms include SM1, SM2, SM3, SM4, and the latest SM9. These algorithms are primarily used in domestic environments as recognized by the National Cryptography Administration. SM2 Algorithm: The SM2 elliptic curve public key cryptography algorithm is a public key … Read more
5Typical Symmetric Encryption Algorithms This article introduces AES, SM4, and ZUC as representatives. AES, the Advanced Encryption Standard, is a block cipher algorithm adopted by the United States federal government; SM4 is a commercial block cipher algorithm developed and promoted for use in China; ZUC, the Zu Chongzhi algorithm, is a stream cipher algorithm independently … Read more
General Penetration Testing Approaches for AES+SM4 Encryption Article originally published on: Zgao’s blog In a recent penetration testing project, the website’s traffic utilized the AES+SM4 dual-layer encryption algorithm for secure transmission. When encountering a website with encrypted transmission, it is usually impossible to perform vulnerability scanning. Manual testing is inefficient, hence the exploration of general … Read more