Link to this headingPrograming
Link to this headingWhiteboxing
No AES key is stored in code instead the inputs and outputs are in lookup tables.
Link to this headingUnboxing
Link to this headingSecure Random
Linux:
- /dev/random
- /dev/urandom
Windows:
- BCryptGenRandom function from the Cryptography API
C#:
- System.Security.Cryptography.RandomNumberGenerator.Create()
Python:
- os.urandom()
- secrets.token_bytes().
Java:
- java.security.SecureRandom
JavaScript Browser:
- window.crypto.getRandomValues(Uint8Array)
JavaScript (NodeJS):
- crypto.randomBytes()
Link to this headingOther Ciphers
Link to this headingLibSodium
https://paragonie.com/blog/2017/06/libsodium-quick-reference-quick-comparison-similar-functions-and-which-one-use
Link to this headingAWS
Key Management Service (KMS): allows creating and managing keys to control the encryption across a wide range of services and in your applications. Is backed by hardware crypto using AWS
SSM Parameter Store: For encrypting secrets like API tokens.
Systems Manager Parameter Store hierarchical storage for configuration data and secrets. Storing passwords, database strings, and license codes as parameter values and reference them by the unique names.
Link to this headingPost Quantum Crypto
https://soatok.blog/2020/07/24/a-brief-opinionated-of-nists-post-quantum-cryptography-round-3-candidates/