BestHub
Sign in
Tagged articles

encryption

459 articles · Page 5 of 5
Java Captain
Java Captain
Oct 16, 2018 · Backend Development

Practical SpringBoot Tips: Mocking External Dependencies and Encrypting Configuration

This article shares practical SpringBoot techniques for locally mocking external service dependencies and encrypting configuration properties, detailing step-by-step bean replacement using PowerMockito, configuration encryption with Jasypt, and accompanying code examples for seamless development without starting full distributed services.

@BeanJavaMocking
0 likes · 8 min read
Practical SpringBoot Tips: Mocking External Dependencies and Encrypting Configuration
Manbang Technology Team
Manbang Technology Team
Sep 13, 2018 · Mobile Development

Design and Implementation of a High‑Performance, High‑Availability Logging System for iOS Apps

This article describes the motivation, design choices, memory‑mapped implementation, performance evaluation, and practical lessons learned while building a lightweight, crash‑resilient logging framework for the 运满满 iOS client, highlighting its superiority over traditional file‑write approaches.

Mobile DevelopmentencryptioniOS
0 likes · 8 min read
Design and Implementation of a High‑Performance, High‑Availability Logging System for iOS Apps
Alibaba Cloud Developer
Alibaba Cloud Developer
Aug 30, 2018 · Information Security

How Alice & Bob Outsmart Eavesdroppers: A Fun Guide to Encryption, MACs, and Digital Signatures

This article uses a playful story of Alice, Bob, Eve, Mallory, and Trent to explain the fundamentals of symmetric and asymmetric encryption, message authentication codes, digital signatures, and public‑key certificates, showing how each technique protects confidentiality, integrity, and authenticity in communications.

Macasymmetric keycertificate
0 likes · 14 min read
How Alice & Bob Outsmart Eavesdroppers: A Fun Guide to Encryption, MACs, and Digital Signatures
Architects' Tech Alliance
Architects' Tech Alliance
Jun 13, 2018 · Information Security

Why HTTPS Matters: Understanding HTTP, SSL/TLS, and Encryption Basics

This article explains the fundamentals of HTTPS by clarifying key terms such as HTTP, SSL/TLS, and encryption, describing how HTTP works over TCP, the differences between symmetric and asymmetric cryptography, and the core security requirements of confidentiality, integrity, authenticity, and performance.

HTTPHTTPSTLS
0 likes · 14 min read
Why HTTPS Matters: Understanding HTTP, SSL/TLS, and Encryption Basics
Java Backend Technology
Java Backend Technology
Jun 7, 2018 · Information Security

How to Secure API Calls with End-to-End Encryption Using Spring Boot

This article explains why API security is crucial in front‑end/back‑end separated systems and provides practical measures—including HTTPS, request signing, SSL pinning, and full request/response AES encryption—along with a Spring Boot starter and JavaScript Axios interceptor to protect data in transit.

AESAPI SecurityRSA
0 likes · 8 min read
How to Secure API Calls with End-to-End Encryption Using Spring Boot
Java Architect Essentials
Java Architect Essentials
May 28, 2018 · Information Security

How to Secure RESTful APIs: Authentication, Encryption, and Authorization Strategies

This guide explains the three core pillars of RESTful API security—client authentication, data encryption, and post‑authentication authorization—detailing practical methods such as signature keys, HTTP Basic/Digest, OAuth, SSL, selective encryption with salts, and role‑based access control.

AuthenticationAuthorizationHTTP Digest
0 likes · 4 min read
How to Secure RESTful APIs: Authentication, Encryption, and Authorization Strategies
Architect's Tech Stack
Architect's Tech Stack
May 11, 2018 · Information Security

Understanding Password Encryption, Transmission, and Secure Storage

This article explains how passwords should be encrypted during transmission using symmetric and asymmetric methods such as RSA, why HTTPS is essential, how services like GitHub and Baidu handle login security, and best practices for securely storing passwords with hashing, salting, and strong algorithms like BCrypt and PBKDF2.

HTTPSPBKDF2RSA
0 likes · 11 min read
Understanding Password Encryption, Transmission, and Secure Storage
Programmer DD
Programmer DD
May 3, 2018 · Backend Development

Why Your Encrypted Config Loses ‘+’ and ‘=’ with curl – and How to Fix It

When using Spring Cloud Config's encryption/decryption endpoints via curl, special characters such as '+' and '=' can disappear because curl's default -d option does not URL‑encode the payload, but using --data-urlencode or setting the proper Content-Type header preserves these characters and ensures correct encryption and decryption.

Config ServerJavaSpring Cloud
0 likes · 4 min read
Why Your Encrypted Config Loses ‘+’ and ‘=’ with curl – and How to Fix It
21CTO
21CTO
Apr 2, 2018 · Information Security

Why HTTPS Needs Both Symmetric and Asymmetric Encryption Explained

This article walks through a step‑by‑step reconstruction of HTTPS design, showing why secure communication requires per‑client symmetric keys negotiated via asymmetric encryption, digital certificates from trusted CAs, and how signatures and random numbers protect against man‑in‑the‑middle attacks.

Digital CertificateHTTPSTLS
0 likes · 13 min read
Why HTTPS Needs Both Symmetric and Asymmetric Encryption Explained
MaGe Linux Operations
MaGe Linux Operations
Mar 26, 2018 · Information Security

Understanding HTTPS: Why Encryption Matters and How It Works

This article explains what HTTPS is, why encrypting HTTP traffic is essential, how symmetric and asymmetric encryption protect data, the role of certificates and public‑key infrastructure, and the performance impact of the HTTPS handshake, providing a concise Q&A guide for beginners.

HTTPSTLSWeb protocol
0 likes · 11 min read
Understanding HTTPS: Why Encryption Matters and How It Works
Architects' Tech Alliance
Architects' Tech Alliance
Jan 3, 2018 · Information Security

Data Security and Encryption Technologies: Standards, Solutions, and Best Practices

Data breaches have surged, affecting governments, enterprises, and security vendors, prompting the need for robust encryption across storage, application, and gateway layers, with standards such as FIPS 140‑2 and solutions from Vormetric and SafeNet offering transparent, compatible, and managed encryption for on‑premises and cloud environments.

FIPS140-2Key Managementcloud encryption
0 likes · 9 min read
Data Security and Encryption Technologies: Standards, Solutions, and Best Practices
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Dec 28, 2017 · Information Security

How HTTPS Uses Zero‑Knowledge Proofs to Secure Your Web Traffic

This article demystifies HTTPS by explaining its underlying encryption, signing, and certificate mechanisms, illustrating how zero‑knowledge proof concepts secure identity verification, and providing practical guidance on upgrading from HTTP, configuring certificates, capturing traffic with Fiddler, and understanding session recovery and performance considerations.

FiddlerHTTPSTLS
0 likes · 11 min read
How HTTPS Uses Zero‑Knowledge Proofs to Secure Your Web Traffic
21CTO
21CTO
Nov 10, 2017 · Information Security

Symmetric vs Asymmetric Encryption: MACs, Signatures & Certificates Explained

This article explains the fundamentals of symmetric and asymmetric encryption, the key distribution challenges they face, how hybrid cryptosystems combine their strengths, and introduces essential cryptographic tools such as hash functions, message authentication codes, digital signatures, and public‑key certificates, comparing their capabilities.

Maccertificatedigital-signature
0 likes · 15 min read
Symmetric vs Asymmetric Encryption: MACs, Signatures & Certificates Explained
dbaplus Community
dbaplus Community
Oct 9, 2017 · Information Security

How MongoDB Enables GDPR Compliance: Practical Data‑Protection Strategies

This article explains how MongoDB’s security features—including access control, authentication, encryption, data discovery, retention policies, zone sharding, backup, monitoring, and audit logging—help organizations meet GDPR requirements while minimizing operational overhead and ensuring data sovereignty.

Access ControlGDPRMongoDB
0 likes · 18 min read
How MongoDB Enables GDPR Compliance: Practical Data‑Protection Strategies
dbaplus Community
dbaplus Community
Sep 25, 2017 · Information Security

How GDPR Shapes Data Management Practices and Database Security

This article explains GDPR's key principles, the Discover‑Defend‑Detect framework, and concrete database controls such as data identification, retention, pseudonymisation, encryption, access control, disaster recovery, and audit logging needed to achieve compliance.

Access ControlAudit LoggingGDPR
0 likes · 12 min read
How GDPR Shapes Data Management Practices and Database Security
dbaplus Community
dbaplus Community
Sep 9, 2017 · Information Security

Why MongoDB Nodes Are Getting Hijacked and How to Secure Them

The article examines the widespread exposure of MongoDB instances on default ports, outlines how attackers hijack them, and provides concrete steps—including enabling authentication, configuring role‑based access, encrypting traffic, and limiting network exposure—to secure MongoDB deployments.

AuthenticationAuthorizationMongoDB
0 likes · 7 min read
Why MongoDB Nodes Are Getting Hijacked and How to Secure Them
21CTO
21CTO
Aug 27, 2017 · Information Security

How to Secure User Passwords: From Weak Hashes to PBKDF2, bcrypt, and scrypt

This article examines common password‑storage techniques, explains why plain‑text, symmetric encryption, and simple hashes are insecure, and demonstrates how modern algorithms like PBKDF2, bcrypt, and scrypt, together with proper salting and iteration, can effectively protect user credentials against large‑scale cracking attacks.

PBKDF2bcryptencryption
0 likes · 8 min read
How to Secure User Passwords: From Weak Hashes to PBKDF2, bcrypt, and scrypt
Architecture Digest
Architecture Digest
Aug 11, 2017 · Information Security

Common Web Attacks and Their Mitigation Techniques

The article introduces major web security threats such as XSS, injection, CSRF, explains their mechanisms with examples, and presents defensive measures including input sanitization, HttpOnly cookies, web application firewalls, and encryption methods like hashing, symmetric and asymmetric cryptography.

CSRFSQL injectionWAF
0 likes · 10 min read
Common Web Attacks and Their Mitigation Techniques
Architects' Tech Alliance
Architects' Tech Alliance
Aug 6, 2017 · Industry Insights

Inside a Generic SSD Controller: Key Components and Their Roles

This article provides a detailed overview of the main building blocks of a generic SSD controller, explaining how each part—from host interfaces and SMART monitoring to wear leveling, encryption engines, and defect management—interacts with NAND flash to deliver performance, reliability, and security.

ControllerHardwareNAND
0 likes · 7 min read
Inside a Generic SSD Controller: Key Components and Their Roles
21CTO
21CTO
Jul 20, 2017 · Backend Development

How Ctrip Built a Real-Time User Data Collection System with Netty and Kafka

This article details Ctrip's design and implementation of a high‑throughput, low‑latency user data collection platform that leverages Java NIO, Netty, and a custom Kafka‑based messaging layer, covering architecture, encryption, compression, disaster‑recovery, performance testing, and downstream analytics products.

Data StreamingKafkaavro
0 likes · 17 min read
How Ctrip Built a Real-Time User Data Collection System with Netty and Kafka
dbaplus Community
dbaplus Community
Jul 19, 2017 · Information Security

How HTTPS Secures Web Traffic: From SSL Basics to Nginx Deployment

This guide explains why plain HTTP is insecure, introduces SSL/TLS fundamentals, compares certificate types, and provides step‑by‑step instructions for configuring HTTPS on a web server (including Nginx redirects), while highlighting performance impacts and testing considerations.

HTTPSNginxSSL
0 likes · 9 min read
How HTTPS Secures Web Traffic: From SSL Basics to Nginx Deployment
21CTO
21CTO
Jul 18, 2017 · Information Security

Why ECC Is Outpacing RSA: History, Algorithms, and Performance Benchmarks

This article traces the evolution of cryptography from ancient substitution ciphers to modern standards like DES, RSA, and ECC, explains symmetric and asymmetric encryption, compares ECC and RSA in security and efficiency, and presents cloud‑server performance tests showing ECC‑256’s superiority in speed and resource usage.

ECCRSAencryption
0 likes · 9 min read
Why ECC Is Outpacing RSA: History, Algorithms, and Performance Benchmarks
WeChat Client Technology Team
WeChat Client Technology Team
Jun 27, 2017 · Mobile Development

Unlock WCDB Android: Encryption, Migration, FTS, and Performance Tips

This article explains how WCDB for Android simplifies encryption with SQLiteCipherSpec, enables seamless data migration, provides a custom FTS3/4 tokenizer with dynamic ICU loading, and offers log redirection and performance monitoring tools, plus an optimized cursor implementation for high‑performance mobile apps.

AndroidFTSPerformance
0 likes · 8 min read
Unlock WCDB Android: Encryption, Migration, FTS, and Performance Tips
21CTO
21CTO
Jun 6, 2017 · Information Security

How to Search Encrypted Database Fields Securely with Blind Indexes

This article explains why deterministic encryption like ECB is unsafe for sensitive data, introduces nondeterministic authenticated encryption, and provides a practical blind‑index technique with PHP and SQL examples for searchable encryption of fields such as Social Security numbers.

Database SecurityPHPSQL
0 likes · 14 min read
How to Search Encrypted Database Fields Securely with Blind Indexes
ITPUB
ITPUB
May 25, 2017 · Information Security

How HTTPS Defends Against Man‑in‑the‑Middle Attacks: A Deep Dive

This article explains why HTTPS is considered secure, how it prevents man‑in‑the‑middle attacks through certificate verification, details the TLS handshake captured with Wireshark, and shows the cryptographic primitives behind RSA, ECDHE and AES, including practical code snippets and the cost of using HTTPS.

HTTPSMan-in-the-MiddleRSA
0 likes · 19 min read
How HTTPS Defends Against Man‑in‑the‑Middle Attacks: A Deep Dive
dbaplus Community
dbaplus Community
Mar 23, 2017 · Databases

Secure MariaDB Connections with SSL: A Complete Step‑by‑Step Guide

This article explains why internet‑financial companies need encrypted MariaDB connections, shows how to verify SSL support, and provides a detailed eight‑step procedure—including OpenSSL upgrade, CA creation, server and client certificates, MySQL configuration, and verification—to enable secure client‑server communication.

MariaDBMySQLSSL
0 likes · 11 min read
Secure MariaDB Connections with SSL: A Complete Step‑by‑Step Guide
WeChat Backend Team
WeChat Backend Team
Dec 9, 2016 · Information Security

Understanding TLS Record Protocol: Encryption, MAC, and Key Management

This article explains how the TLS record layer encrypts and authenticates application data by fragmenting, sequencing, optionally compressing, encrypting, computing HMAC, and transmitting over TCP/IP, while detailing the security parameters, key derivation, and the evolution from MAC‑then‑Encrypt to AEAD modes.

AEADKey ExpansionMac
0 likes · 15 min read
Understanding TLS Record Protocol: Encryption, MAC, and Key Management
Baidu Intelligent Testing
Baidu Intelligent Testing
Nov 24, 2016 · Information Security

Analysis of Common Android App Vulnerabilities and Mitigation Strategies

This article analyzes recent Android app security scan data, detailing prevalent vulnerabilities such as log leakage, weak encryption, WebView password storage, unsafe PendingIntent usage, and dynamic broadcast receiver exposure, and provides concrete code examples and remediation recommendations for developers.

BroadcastPendingIntentVulnerabilities
0 likes · 10 min read
Analysis of Common Android App Vulnerabilities and Mitigation Strategies
Ctrip Technology
Ctrip Technology
Oct 24, 2016 · Information Security

User Password Encryption and Cracking Techniques

This article explains common user password storage methods, compares their security characteristics, and details various cracking approaches—including hash collisions, rainbow tables, and advanced algorithms like PBKDF2, bcrypt, and scrypt—while emphasizing the importance of strong encryption to mitigate data breach risks.

PBKDF2bcryptencryption
0 likes · 8 min read
User Password Encryption and Cracking Techniques
ITPUB
ITPUB
Aug 14, 2016 · Databases

14 Essential MySQL Security Practices to Protect Your Data

This guide outlines essential MySQL security measures—including removing default accounts, disabling unsafe LOCAL INFILE commands, enforcing strict user role permissions, encrypting sensitive data, ensuring data integrity through replication and backups, and standardizing operational practices—to protect database assets from irreversible breaches.

Access ControlDatabase SecurityMySQL
0 likes · 6 min read
14 Essential MySQL Security Practices to Protect Your Data
Tencent IMWeb Frontend Team
Tencent IMWeb Frontend Team
Jul 21, 2016 · Information Security

How DNS Hijacking Exploits HTTP Weaknesses and Why HTTPS Is Essential

This article explains how DNS hijacking injects unwanted ads by exploiting HTTP's lack of encryption, identity verification, and integrity checks, and demonstrates how HTTPS, with SSL/TLS encryption, certificates, and integrity validation, protects users from such attacks while also discussing performance impacts.

DNS hijackingHTTPSSSL/TLS
0 likes · 15 min read
How DNS Hijacking Exploits HTTP Weaknesses and Why HTTPS Is Essential
MaGe Linux Operations
MaGe Linux Operations
Apr 21, 2016 · Information Security

Understanding SSL/TLS: From Handshake Basics to Secret Keys Explained

This article provides a comprehensive overview of SSL/TLS, covering its architecture, differences between SSL and TLS, detailed handshake steps, key exchange processes, secret generation, security considerations, proxy handling, and references, aiming to clarify the complex concepts for readers.

SSLTLSencryption
0 likes · 22 min read
Understanding SSL/TLS: From Handshake Basics to Secret Keys Explained
21CTO
21CTO
Apr 13, 2016 · Information Security

Why HTTPS Slows You Down and How It Secures Your Data

The article explains that HTTPS combines HTTP with TLS to provide encryption, authentication, and data integrity, describes TLS versions, key‑exchange algorithms such as RSA and ECDHE, and analyzes the network round‑trip and CPU overhead that HTTPS introduces, while also discussing deployment costs and optimization considerations.

HTTPSTLSWeb protocol
0 likes · 29 min read
Why HTTPS Slows You Down and How It Secures Your Data
Architecture Digest
Architecture Digest
Apr 10, 2016 · Information Security

Introduction to HTTPS, SSL/TLS, and Related Encryption Technologies

This article provides a comprehensive overview of HTTPS, explaining its purpose, advantages, and drawbacks, and delves into the underlying cryptographic concepts such as symmetric and asymmetric encryption, hash algorithms, digital signatures, digital certificates, and the detailed SSL/TLS handshake process.

Digital CertificateHTTPSSSL
0 likes · 19 min read
Introduction to HTTPS, SSL/TLS, and Related Encryption Technologies
21CTO
21CTO
Apr 1, 2016 · Information Security

Understanding HTTPS: How SSL/TLS Secures Web Communication

This article explains HTTPS fundamentals, its encryption mechanisms, differences from HTTP, the roles of symmetric and asymmetric cryptography, hash functions, digital signatures, certificate issuance and validation, as well as SSL/TLS protocols, handshake steps, and session resumption techniques that secure web communications.

Digital CertificateHTTPSSSL
0 likes · 18 min read
Understanding HTTPS: How SSL/TLS Secures Web Communication
dbaplus Community
dbaplus Community
Dec 7, 2015 · Information Security

How to Build Robust Database Security: Logical and Physical Protection Strategies

This article explains why protecting database‑stored sensitive data is critical, analyzes common attack vectors and breach statistics, and provides detailed logical and physical security measures—including user and permission management, auditing, encryption, disaster‑recovery planning, and Oracle replication technologies—to help organizations achieve comprehensive database protection.

Access ControlAuditDatabase Security
0 likes · 20 min read
How to Build Robust Database Security: Logical and Physical Protection Strategies
21CTO
21CTO
Nov 4, 2015 · Information Security

Master PHP Encryption: From MD5 to OpenSSL Asymmetric Techniques

This article explains PHP's various encryption methods, covering one-way hash functions like MD5 and SHA1, symmetric algorithms, the rarely used crypt() function, and detailed implementations of asymmetric encryption with OpenSSL, including key generation, encryption, decryption, and practical code examples.

PHPasymmetricencryption
0 likes · 15 min read
Master PHP Encryption: From MD5 to OpenSSL Asymmetric Techniques
Architects' Tech Alliance
Architects' Tech Alliance
Sep 7, 2015 · Operations

Managed Data Remote Replication with DD Boost and NetWorker

DD Boost allows backup applications to manage and simplify file replication between multiple Data Domain systems, and using NetWorker as an example, the article details the step‑by‑step replication workflow, optional low‑bandwidth and encryption features, and how remote restores are performed.

DDBoostDataDomainLowBandwidth
0 likes · 4 min read
Managed Data Remote Replication with DD Boost and NetWorker
MaGe Linux Operations
MaGe Linux Operations
Aug 19, 2015 · Information Security

Demystifying SSL/TLS: A Complete Guide to Handshake, Keys, and Security

This article provides a thorough, easy-to-understand overview of SSL/TLS, covering its architecture, differences between SSL and TLS, the handshake process, key derivation (PreMaster, Master, Session secrets), data encryption, security improvements, and practical considerations such as proxy handling and common attacks.

SSLTLSencryption
0 likes · 21 min read
Demystifying SSL/TLS: A Complete Guide to Handshake, Keys, and Security
MaGe Linux Operations
MaGe Linux Operations
Jun 5, 2015 · Information Security

Mastering SSL and OpenSSL: From Encryption Basics to Private CA Setup

This article explains SSL fundamentals, encryption types, PKI components, and provides step‑by‑step Linux OpenSSL commands for symmetric/asymmetric encryption, hashing, password handling, key generation, private CA creation, certificate signing, and revocation, enabling secure data transmission over networks.

LinuxPKISSL
0 likes · 14 min read
Mastering SSL and OpenSSL: From Encryption Basics to Private CA Setup
Qunar Tech Salon
Qunar Tech Salon
May 5, 2015 · Databases

Encrypting Sensitive Data with PostgreSQL pgcrypto

This article explains how to protect user privacy by using PostgreSQL's built-in pgcrypto extension to encrypt and decrypt sensitive fields such as phone numbers and ID numbers, showing practical SQL examples for creating tables, altering columns, storing ciphertext, and querying encrypted data.

Database SecurityPostgreSQLSQL
0 likes · 5 min read
Encrypting Sensitive Data with PostgreSQL pgcrypto
MaGe Linux Operations
MaGe Linux Operations
Apr 30, 2015 · Information Security

How to Build a Private CA with OpenSSL: Step‑by‑Step Guide

This article explains why encrypting network traffic is essential, introduces OpenSSL’s cryptographic components, and provides a detailed, command‑line tutorial for creating a private Certificate Authority, issuing certificates, and handling revocation within a LAN environment.

Private CATLScertificate authority
0 likes · 8 min read
How to Build a Private CA with OpenSSL: Step‑by‑Step Guide