2021年12月13日
RSA Private Key Encryption
摘要： RSA Private Key Encryption RSA Introduction The RSA (Rivest, Shamir, Adleman) encryption algorithm uses two Keys: Private and Public. Scenario A Suppo 阅读全文
posted @ 2021-12-13 19:03 ChuckLu 阅读(286) 评论(0) 推荐(0)
How does a public key verify a signature? 公钥如何验签的
摘要： 核心概念还是， 公钥加密的东西，可以使用私钥解密。 而反过来，私钥加密的东西，也可以用公钥进行解密。 通过hash函数处理文本，得到摘要digest。 然后把摘要digest用私钥进行加密，得到数字签名digital signature。这里加密的目的，是为了防止篡改。(因为如果不把摘要加密，直接发 阅读全文
posted @ 2021-12-13 17:08 ChuckLu 阅读(244) 评论(0) 推荐(0)
Encrypted Handshake Message
摘要： Finished (Encrypted Handshake) The Finished message is complicated as it is a hash of all the messages exchanged previously along with a label (“clien 阅读全文
posted @ 2021-12-13 16:48 ChuckLu 阅读(307) 评论(0) 推荐(0)
What if JWT is stolen?
摘要： What if JWT is stolen? I am trying to implement stateless authentication with JWT for my RESTful APIs. AFAIK, JWT is basically an encrypted string pas 阅读全文
posted @ 2021-12-13 14:22 ChuckLu 阅读(66) 评论(0) 推荐(0)
What's the difference between JWTs and Bearer Token?
摘要： What's the difference between JWTs and Bearer Token? 问题 I'm learning something about Authorization like Basic, Digest, OAuth2.0, JWTs, and Bearer Toke 阅读全文
posted @ 2021-12-13 14:10 ChuckLu 阅读(54) 评论(0) 推荐(0)