Encryption
Rietta's encryption posts cover OpenSSL key generation, password hashing, OpenPGP, TLS certificate lifetimes, and encryption policy fights.
Subscribe to Encryption posts via RSS
08/18/2026
Generate OpenSSL Elliptic Curve Key Pair from the Command Line
by Frank Rietta
How to generate an OpenSSL elliptic curve (P-256) key pair from the command line, and why NIST-backed ECC beats scaling RSA past 3072-bit.
Read More: Generate OpenSSL Elliptic Curve Key Pair from the Command Line
04/22/2025
Shorter SSL/TLS Lifetimes: Business Impact of Monthly Certificate Renewals
by Frank Rietta
New SSL/TLS rules mean monthly renewals by 2029. Understand the downtime risk and how to prepare your business.
Read More: Shorter SSL/TLS Lifetimes: Business Impact of Monthly Certificate Renewals
05/03/2017
Americans' Access to Strong Encryption is at Risk, an Open Letter to Congress
by Frank Rietta
When sophisticated adversaries want to hack a network, they ultimately win. A government mandated encryption backdoor would make Americans less safe.
Read More: Americans' Access to Strong Encryption is at Risk, an Open Letter to Congress
04/22/2016
Calls to Ban Effective Encryption Continue Despite Data Breach Crisis
by Frank Rietta
Calls for the U.S. Congress to ban effective encryption are repeated despite the current information security crisis in which data breaches are regular news.
Read More: Calls to Ban Effective Encryption Continue Despite Data Breach Crisis
04/08/2016
U.S. Senate Bill Seeks to Ban Effective Encryption, Making Security Illegal
by Frank Rietta
Senators Feinstein and Burr published a bill that would ban effective encryption: no conversation or data exchange the government can't access if it wants to.
Read More: U.S. Senate Bill Seeks to Ban Effective Encryption, Making Security Illegal
03/16/2016
It is not just one iPhone, the FBI wants a future where it is impractical to deploy strong encryption without key escrow
by Frank Rietta
The FBI wants strong encryption without key escrow, which is insecure at scale, to be illegal or impractical. Data breach risks rise as devices get less secure.
10/16/2014
How To Protect Against the POODLE SSLv3 Vulnerability
by Frank Rietta
Read More: How To Protect Against the POODLE SSLv3 Vulnerability
10/02/2014
Raspberry Pi crypto key management project!
by Frank Rietta
A dedicated offline crypto key management system OpenPGP and an SSL Certificate Authority set up for air-gapped operations using a Raspberry Pi B.
07/07/2014
Introduction to OpenPGP: Decrypt this Message
by Frank Rietta
In part one of Introduction to OpenPGP, learn to password protect a file with GnuPG, which supports symmetric encryption and its stronger asymmetric mode.