
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
www.github.com/freignat91/cipher.git
Advanced tools
cipher v0.0.1
A project to learn basic of RSA encryption.
Generate big RSA keys (8192, 16384, 32768, ...) and encrypt file with them using RSA encryption directly and not using a faster (but less secured) symmetric key.
This project has only one external dependency, the cobra project to manage command line. It uses math/big library, but compute it-self the needed primes numbers and RSA key various numbers. It's possible to update the code to raise the prime probability to be true until the point you want. it'll be just slower.
For Ubuntu, you have a pre-build cipher.ubuntu file you can use without cloning and building the projet.
This commande generates [keyPath].pub and [keyPath].key keys (public and private) having [keysize] bits long
This command encrypt the file [sourceFilePath] and save the result in [targetFilePath] using the public key [publicKeyPath]
This command decrypt the file [sourceFilePath] and save the result in [targetFilePath] using the private key [privateKeyPath]
Using key size from 8192 to 32768 take time:
on a Latitude E6540 under ubuntu 16.10:
average key creation time:
it's possible to use intermediate size, all 64 bits multiple are accepted.
encryption time:
decryption time:
ok, it's pretty slow, that's why RSA is more used to encrypt symetric key which is used to encrypt/decrypt file, but it's far more secured.
For security reason, don't share your public and private keys. They should stay secret in this context, (encrypt/decrypt your own files). The encrypt/decryption algorithm of this project don't use any padding scheme. It's not a security issue if the keys stay secret and especially are not used to authenticate.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.