Your 4-Digit PIN Is Fine: Device-Bound Keys on ESP32-S3
Why PBKDF2 iterations can't protect a 4-digit PIN on a microcontroller, and how an eFuse-HMAC device secret plus HKDF stops offline brute force.
Notes
#cryptography
Applied cryptography as it shows up in real systems: certificate-based authentication, CSP nonces, and key derivation and authenticated encryption on embedded hardware.
4 posts about this topic
A Vault File That Fails Closed: Encrypt-then-MAC on an MCU
How a hardware password manager authenticates every vault file before it decrypts: encrypt-then-MAC, verify-before-decrypt, and fail-closed reads.
Content Security Policy (CSP) with Nginx: The Complete Guide
Master Content Security Policy from zero to A+ — nonces, hashes, strict-dynamic, Trusted Types, bypass prevention, and production Nginx configs.
Mastering Mutual TLS (mTLS) with Nginx: A Deep Dive
Implement Mutual TLS (mTLS) with Nginx — create a CA, generate client certificates, configure CRL and OCSP revocation, and enable Zero Trust.
No posts match your filters.