Posted in未分类
JWK Generator & Parser Field Guide: When the Key Shape Holds the Rotation
A field guide to JSON Web Key shapes, kid choices, and the six-step rotation order that keeps the verifier honest until the last cutover.
Posted in未分类
RSA Key Pair Generator Field Guide: Five Decisions That Matter
An RSA key pair is two mathematically linked files. Pick the size, the format, and the storage carefully, and generate locally.
Posted in未分类
OTP Generator Field Guide: How to Generate Codes That Survive Contact With Users
The best OTP is the kind users don't have to think about. When you ask…
Posted in未分类
Secure Random Generator Field Guide: Entropy, Three Encodings, and Why Math.random() Fails
Lead (close-first, ~80 words) If you have ever pasted a Math.random() token into a JWT…
Posted in未分类
RSA-OAEP Has a Payload Ceiling: Why 2048-Bit RSA Fits Only 190 Bytes
A 2048-bit RSA key does not encrypt 256 bytes of useful plaintext. With OAEP-SHA256, the…
Posted in未分类
Entropy, Not Characters: A Field Guide to the Secure Random Generator
The bottom line If you remember one thing from this guide, remember this: a secret…
Posted in未分类
The 256 Bytes That Prove You Wrote It: A Field Guide to Digital Signatures With RSA-PSS, ECDSA, and Ed25519
If you have ever pasted a PEM key into a verify box and got back…
Posted in未分类
The 256 Bytes That Prove You Wrote It: A Field Guide to Digital Signatures With RSA-PSS, ECDSA, and Ed25519
If you have ever pasted a PEM key into a verify box and got back…
Posted in未分类
The Three Words That Decide If Your Login Is Verifying Passwords
The string in the database is not your password. It is the output of a…
Posted in未分类
Stop Giving One Person the Recovery Key: A Practical 3-of-5 Shamir Design
A practical guide to splitting a recovery secret with Shamir Secret Sharing, choosing a 3-of-5 threshold, understanding the GF(256) implementation, and adding the integrity checks the scheme does not provide.