Blog | Nimeshika Ranasinghe

Introduction With the fast growth of information technology, networks have become a significant part of everyone’s lives. In the network confidentiality and authenticity of information must be secured against unauthorized access, interruption and modification. Encryption and Decryption, Digital Signature are some of the effective techniques that is used to secure the information of the user and confirm his/her authenticity. Yet, the overheads related with communication and its security must be minimal. In 1985, Neil Koblitz and Victor Miller independently proposed the Elliptic Curve Cryptosystem (ECC). It is a kind of public key cryptosystem which is based on the Elliptic Curve Discrete Logarithm Problem (ECDLP) for its security. ECC is being accepted  as an alternative to other cryptosystems like  RSA and ElGamal as ECC provides much more security with its  highest strength-per-bit of any other cryptosystem known today and the creation faster, smaller, and more eff...

The main difference between stream cipher and block cipher A typical stream cipher encrypts plain text one byte at a time, although a stream cipher may be designed to operate on one bit at a time or on units larger than a byte at a time. That means we can also encrypt a block of one byte by help of a stream cipher as a stream. A stream cipher encrypts plaintext messages by applying an encryption algorithm with a pseudorandom cipher digit stream (keystream). Each bit of the message is encrypted one by one with the corresponding keystream digit. Stream ciphers are typically used in cases where speed and simplicity are both requirements. If a 128 bit block cipher such as AES were to be used in place of a stream cipher where it was encrypting messages of 32 bit blocks, 96 bits of padding would remain. This is an inefficient approach and one reason why a stream cipher would be preferred, since they operate on the smallest possible unit. Some common stream ciphers include RC4 (which has be...

·          Vulnerable System: Windows 2000 ·          Penetration testing system: Kali Linux     Key Tools Used:         ·          nmap ·          Nessus ·          Exploit-DB ·          Metasploits 1)       First open the Kali Linux and windows 2000 in virtual box and run it.  Get the ip addresses of kali linux and windows 2000. Both should be in same ip range in order to ping Figure 1 : Kali Linux IP address Figure 2 : Windows 2000 machine IP address            In here both IP addresses are in class C.   Ping the windows in kali and vice versa. Figure ...

Wargame in hacking is a security challenge in which one must exploit a vulnerability in a system or application or gain access to a computer system. These wargames are intended to increase your knowledge about security measures and counter measures. One of the most famous wargaming site is called overthewire.org . In this site " Bandit " is the recommended game to start if you are new to site. In this game, password for the next level is hidden in the previous level. You goal is to find that hidden password. You should already be familiar with basic Linux commands before attempting this wargame. It doesn't matter you don't know much more on Linux, by doing this wargame you can gain fair knowledge on Linux commands. And most importantly you have to use a bit of your own intuition to figure out how to make it from one level to the next. If you are using Linux/Unix platform; Open a Terminal. type ssh levelNumber@bandit.labs.overthewire.org -p 2220 ...