CipherMode

A block cipher mode of operation, usually just called a "mode" in context, specifies how a block cipher should be used to encrypt or decrypt messages that are longer than the block size.

Glossary of Security Terms: Block Cipher Mode of Operation

Learn how the PBKDF2 algorithm strengthens the security of passwords by creating cryptographic keys for cryptographic operations like encryption.

Understanding the PBKDF2 Аlgorithm With a Java Service Example

Transport Layer Security (TLS), formerly known as Secure Sockets Layer (SSL), is a protocol used by applications to communicate securely across a network, preventing tampering with and eavesdropping on email, web browsing, messaging, and other protocols. Both SSL and TLS are client / server protocols that ensure communication privacy by using cryptographic protocols to provide security over a network. When a server and client communicate using TLS, it ensures that no third party can eavesdrop or tamper with any message.

Glossary of Security Terms: Transport Layer Security

Trust On First Use (TOFU) is a security model in which a client needs to create a trust relationship with an unknown server. To do that, clients will look for identifiers (for example public keys) stored locally. If an identifier 
is found, the client can establish the connection. If no identifier is found, the client can prompt the user to determine if the client should trust the identifier.

Glossary of Security Terms: TOFU

Symmetric-key cryptography is a term used for cryptographic algorithms that use the same key for encryption and for decryption. The key is usually called a "symmetric key" or a "secret key".

Glossary of Security Terms: Symmetric-Key Cryptography

SQL injection takes advantage of Web apps that fail to validate user input. Hackers can maliciously pass SQL commands through the Web app for execution by a backend database.

Glossary of Security Terms: SQL Injection

Session hijacking occurs when an attacker takes over a valid session between two computers. The attacker steals a valid session ID in order to break into the system and snoop data.

Glossary of Security Terms: Session Hijacking

The same-origin policy is a critical security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin. It helps isolate potentially malicious documents, reducing possible attack vectors.

Glossary of Security Terms: Same-Origin Policy

Robots.txt is a file which is usually placed in the root of any website. It decides whether crawlers are permitted or forbidden access to the web site.

Glossary of Security Terms: Robots.txt

CSP reporting directives are used in a Content-Security-Policy header and control the reporting process of CSP violations.

Glossary of Security Terms: Reporting Directive

Public-key cryptography — or asymmetric cryptography — is a cryptographic system in which keys come in pairs. The transformation performed by one of the keys can only be undone with the other key. One key (the private key) is kept secret while the other is made public.

Glossary of Security Terms: Public-key Cryptography

A CORS preflight request is a CORS request that checks to see if the CORS protocol is understood and a server is aware using specific methods and headers.

Glossary of Security Terms: Preflight Request

OWASP (Open Web Application Security Project) is a non-profit organization and worldwide network that works for security in Free Software, especially on the Web.

Glossary of Security Terms: OWASP

A Man-in-the-middle attack (MitM) intercepts a communication between two systems. For example, a Wi-Fi router can be compromised.

Glossary of Security Terms: MitM

A key is a piece of information used by a cipher for encryption and/or decryption. Encrypted messages should remain secure even if everything about the cryptosystem, except for the key, is public knowledge.

Glossary of Security Terms: Key

HTTPS (HyperText Transfer Protocol Secure) is an encrypted version of the HTTP protocol. It uses SSL or TLS to encrypt all communication between a client and a server. This secure connection allows clients to safely exchange sensitive data with a server, such as when performing banking activities or online shopping.

Glossary of Security Terms: HTTPS

HTTP Strict Transport Security lets a web site inform the browser that it should never load the site using HTTP and should automatically convert all attempts to access the site using HTTP to HTTPS requests instead. It consists in one HTTP header, Strict-Transport-Security, sent by the server with the resource.

Glossary of Security Terms: HSTS

HTTP Public Key Pinning (HPKP) is a security feature that tells a web client to associate a specific cryptographic public key with a certain web server to decrease the risk of MITM attacks with forged certificates.

Glossary of Security Terms: HPKP

HMAC is a protocol used for cryptographically authenticating messages. It can use any kind of cryptographic functions, and its strengh depends on the underlying function (SHA1 or MD5 for instance), and the chosen secret key. With such a combination, the HMAC verification algorithm is then known with a compound name such as HMAC-SHA1.

Glossary of Security Terms: HMAC

The hash function takes a variable length message input and produces a fixed-length hash output. It is commonly in the form of a 128-bit "fingerprint" or "message digest". Hashes are very useful for cryptography — they insure the integrity of transmitted data. This provides the basis for HMAC's, which provide message authentication.

Glossary of Security Terms: Hash

 A forbidden response header name is an HTTP header name (either `Set-Cookie` or `Set-Cookie2`) that cannot be modified programmatically.

Glossary of Security Terms: Forbidden Response Header Name

A forbidden header name is the name of any HTTP header that cannot be modified programmatically; specifically, an HTTP request header name (in contrast with a Forbidden response header name).

Glossary of Security Terms: Forbidden Header Name

In cryptography, encryption is the conversion of cleartext into a coded text or ciphertext. A ciphertext is intended to be unreadable by unauthorized readers.

Glossary of Security Terms: Encryption

Datagram Transport Layer Security (DTLS) is a protocol used to secure datagram-based communications. It's based on the stream-focused Transport Layer Security (TLS), providing a similar level of security. As a datagram protocol, DTLS doesn't guarantee the order of message delivery, or even that messages will be delivered at all. However, DTLS gains the benefits of datagram protocols, too; in particular, the lower overhead and reduced latency.

Glossary of Security Terms: Datagram Transport Layer Security

CipherModeis in the Cybersecurity Industry

CIPHERMODE

ciphermode.com

Since 2022

Worth 67M

CipherMode's stories on HackerNoon

Glossary of Security Terms: Block Cipher Mode of Operation

Understanding the PBKDF2 Аlgorithm With a Java Service Example

Glossary of Security Terms: Transport Layer Security

Glossary of Security Terms: TOFU

Glossary of Security Terms: Symmetric-Key Cryptography

Glossary of Security Terms: SQL Injection

Glossary of Security Terms: Session Hijacking

Glossary of Security Terms: Same-Origin Policy

Glossary of Security Terms: Robots.txt

Glossary of Security Terms: Reporting Directive

Glossary of Security Terms: Public-key Cryptography

Glossary of Security Terms: Preflight Request

Glossary of Security Terms: OWASP

Glossary of Security Terms: MitM

Glossary of Security Terms: Key

Glossary of Security Terms: HTTPS

Glossary of Security Terms: HSTS

Glossary of Security Terms: HPKP

Glossary of Security Terms: HMAC

Glossary of Security Terms: Hash

Glossary of Security Terms: Forbidden Response Header Name

Glossary of Security Terms: Forbidden Header Name

Glossary of Security Terms: Encryption

Glossary of Security Terms: Datagram Transport Layer Security

Representing this company? Click here to claim and customize this page!

Reviews About CipherMode

CipherMode WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

Light-Mode

Classic

Newspaper

Minty

Dark-Mode

Neon Noir

Minty

HN StartUps