In this lab we connect protection of private keys to public-key authentication. You will use a Java keystore, recover a weak key password with hashcat, and explore passkeys through a local web application.
NOTE: The last task contains a simple challenge that will give you extra score once you solve it and submit a concise, clear and correct write-up (more detail in the task).
No hurry! You don’t need to complete the challenge during class. Take your time: the deadline for submitting your write-up is October 29, 2026
- Prerequisites
- Task 1: Using a keystore
- Task 2: Weak key passwords
- Task 3: Passkeys
- Task 4: Identity mismatch