InfoSecMonkey: No fluff. Just the config that works.

Category Archives: Crypto

Blockchain Explained for Beginners: How It Works, Minus the Hype

Blockchain Explained for Beginners: How It Works, Minus the Hype

Blockchain explained in plain English: hashes, blocks, consensus, and keys, plus the myths to ignore and a tiny chain you can build yourself.

Read More
How HTTPS Works: From ClientHello to Encrypted GET

How HTTPS Works: From ClientHello to Encrypted GET

Walk through TLS 1.3 handshake steps from ClientHello to encrypted GET. Use OpenSSL and Wireshark to verify keys, certificates, and FortiGate SSL inspection.

Read More
Hashing Files on macOS with Built-In Commands

Hashing Files on macOS with Built-In Commands

Hash files on macOS using built-in md5 and shasum commands. Generate SHA-256 checksums and verify file integrity without installing third-party tools.

Read More
Cisco ASA and FTD Encryption Schemes. What is supported on what version : The Complete Reference

Cisco ASA and FTD Encryption Schemes. What is supported on what version : The Complete Reference

Compare Cisco ASA FTD encryption schemes across versions. See which IKEv1, IKEv2, and NGE ciphers are supported on each release to fix tunnel failures.

Read More
FIPS 140 Explained: Levels, Lifecycle, and Fortinet Support

FIPS 140 Explained: Levels, Lifecycle, and Fortinet Support

Understand FIPS 140 Fortinet support, security levels, and the 2026 sunset deadline. Learn how to maintain compliance for government and defense contracts.

Read More
Quantum-Safe FortiGate: A Practical Guide to Post-Quantum Cryptography in FortiOS

Quantum-Safe FortiGate: A Practical Guide to Post-Quantum Cryptography in FortiOS

Configure FortiGate post-quantum cryptography for IPsec and SSL VPN. Learn to deploy hybrid key exchange with ML-KEM to defend against harvest now, decrypt later...

Read More
No compatible key-exchange method – SecureCRT and FortiGate

No compatible key-exchange method – SecureCRT and FortiGate

Resolve the no compatible key-exchange method error between SecureCRT and FortiGate. Configure FortiOS 7.6 SSH settings and SecureCRT Ed25519 keys for successful login.

Read More
IPsec VPNs Deep Dive

IPsec VPNs Deep Dive

Learn to configure IPsec VPN phases and choose the right Diffie-Hellman group. Understand ISAKMP, IKE, and cipher suites for secure tunnel setup.

Read More
Extracting Private Key from FortiGate Firewall

Extracting Private Key from FortiGate Firewall

Export the FortiGate private key using the CLI show full command. Learn to generate a CSR and retrieve the key for wildcard certificate imports.

Read More
Extracting Your Private Key from a .pfx certificate

Extracting Your Private Key from a .pfx certificate

Extract private key from pfx files using OpenSSL commands. Learn how to export, decrypt, and validate keys for server or firewall deployment.

Read More
What Diffie-Hellman (DH) Group Should I Use

What Diffie-Hellman (DH) Group Should I Use

Learn Diffie-Hellman group selection for secure VPNs. Choose the right DH group for AES 128 or 256-bit keys and avoid weak groups like 24.

Read More
Encrypting a USB Thumb-Drive on macOS from CLI and GUI

Encrypting a USB Thumb-Drive on macOS from CLI and GUI

Encrypt a USB thumb drive on macOS using diskutil CLI commands or Disk Utility GUI. Secure your data with full volume encryption in minutes.

Read More
Troubleshooting IPSec VPNs on Fortigate Firewalls

Troubleshooting IPSec VPNs on Fortigate Firewalls

Master Fortigate IPSec VPN troubleshooting with diagnose commands. Fix Phase I mismatches, PFS errors, and selector issues using real debug output examples.

Read More
IPv6 VPNs in Fortigate Firewalls

IPv6 VPNs in Fortigate Firewalls

Configure FortiGate IPv6 VPN tunnels with Phase I and II settings. Learn to set up address objects, policies, and static routes for secure IPv6...

Read More
Setting Up Tor On macOS

Setting Up Tor On macOS

Install Tor Browser on macOS by downloading the package and launching the app. Verify your exit node IP address for anonymous browsing.

Read More
Disabling Weak Ciphers on Fortigate Firewalls

Disabling Weak Ciphers on Fortigate Firewalls

Learn how to disable weak ciphers on FortiGate SSL VPN using the banned-cipher command. Fix Qualys SSL test scores and enforce strong crypto settings.

Read More
Using OpenSSL to Provision Wildcard Certificate

Using OpenSSL to Provision Wildcard Certificate

Generate a wildcard certificate using OpenSSL and import it into FortiGate. Learn to create CSRs, handle private keys, and install certs for lab testing.

Read More