new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

key_management/key_usage

2 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Perfect Forward Secrecy and ephemeral keys

Ephemeral keys provide perfect forward secrecy protection, meaning a compromise of the server's long term signing key does not compromise the confidentiality of past sessions. Refer to the TLS cheat sheet for additional guidance.

Single-purpose key usage principle

According to NIST, in general, a single key should be used for only one purpose (e.g., encryption, authentication, key wrapping, random number generation, or digital signatures). Reasons include: (1) Using the same key for two different cryptographic processes may weaken the security provided by one or both processes, (2) Limiting key use limits damage if the key is compromised, (3) Some uses of keys interfere with each other such as retention requirements differing for different data types and time periods needed.

Give your agent this brain