Glossary

7 entries

crypto concepts hardening

AES

NIST block cipher. 128-bit blocks, keys of 128, 192, or 256 bits. The algorithm is solved. Mode and key handling are the work.

crypto concepts hardening

AES-GCM

AES in Galois/Counter Mode. Confidentiality plus an integrity tag. This is the AES you actually want.

crypto concepts network

ChaCha20-Poly1305

The other modern AEAD. A stream cipher plus a tag. First-class in TLS 1.3, especially where AES hardware is missing.

crypto concepts privacy cloud

Homomorphic encryption

Compute on ciphertext and get an encrypted result. The processor never sees the plaintext. Specialised, not a swap for AES.

crypto network identity hardening

Mutual TLS (mTLS)

TLS where both sides present a certificate. The server is not the only one who has to prove who they are.

network concepts crypto acsc-glossary

Transport Layer Security (TLS)

The S in HTTPS. Stops eavesdropping, tampering, and forgery on the wire. TLS 1.3 is the current protocol.

practitioner network crypto hardening supply-chain IR

When a certificate authority is distrusted: trust-store response runbook

What to do when a certificate authority's keys are compromised or a root program stops trusting it. Browsers fix themselves within hours; the long tail is everything else that carries its own copy of the trust store, plus any of your own certificates that chain to the distrusted CA.

Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary