crypto concepts hardening
AES
NIST block cipher. 128-bit blocks, keys of 128, 192, or 256 bits. The algorithm is solved. Mode and key handling are the work.
Knowledge
AllIRacsc-glossaryau-compliancecloudconceptscryptodetectiondnsframeworkshardeningidentityloggingmalwarenetworkpractitionerprivacythreat-intelvulnerability
6 entries
crypto concepts hardening
AES-GCM
AES in Galois/Counter Mode. Confidentiality plus an integrity tag. This is the AES you actually want.
crypto concepts network
ChaCha20-Poly1305
The other modern AEAD. A stream cipher plus a tag. First-class in TLS 1.3, especially where AES hardware is missing.
crypto concepts privacy cloud
Homomorphic encryption
Compute on ciphertext and get an encrypted result. The processor never sees the plaintext. Specialised, not a swap for AES.
crypto network identity hardening
Mutual TLS (mTLS)
TLS where both sides present a certificate. The server is not the only one who has to prove who they are.
network concepts crypto acsc-glossary
Transport Layer Security (TLS)
The S in HTTPS. Stops eavesdropping, tampering, and forgery on the wire. TLS 1.3 is the current protocol.
Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary