Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
41 views

How secure is Wire?

I have stumbled upon this replacement for Skype, which claims to take privacy seriously. They recently open-sourced their client-side code. Is Wire secure? What data can be intersected and read by a ...
0
votes
2answers
55 views

Encryption - RSA vs. AES

I have a question regarding encryption and whether to use symmetric or asymmetric encryption. The idea is to implement a form of data encryption in a variety of software. This data will be exchanged ...
0
votes
2answers
97 views

As a user, is using MD5-encrypted passwords on websites a good practice? [duplicate]

Disclaimer: This is from a user standpoint. We'll thus assume the target website (say, Paypal or Netflix) already uses a strong hashing algorithm with salts (bcrypt of pbkdf2, for example) and accepts ...
1
vote
1answer
29 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
0
votes
0answers
19 views

Level of security TPM2.0

How secure is it to seal only to PCRs 0 and PCRs 2-7 with fTPM 2.0? My device does not support Intel TXT, so I am unable to extend the chain of trust to implement DRTM, and thus cannot use PCRs 17-22....
0
votes
0answers
10 views

How can I decrypt data stored using the android KeyChain API? [migrated]

I have an android application that stores secrets using the KeyChain API. I have root access, and I know all of the credentials for the device. I should theoretically be able to decrypt the files ...
3
votes
1answer
35 views

Security of “secure messaging” services

There are multiple vendors that offer so-called "secure messaging" services, designed to allow secure e-mail without the need for technology such as PGP, S/MIME or strict TLS between mail servers. The ...
-3
votes
0answers
30 views

How to achieve end-to-end security in a Browser-Server architecture?

Let's assume a typical web application with a back-end and a front-end(e.g. a MVC framework using PHP or Python). As far as I have studied and please correct me if I am wrong, it is not a typical ...
-4
votes
0answers
248 views

Reverse the encryption (part of the Labyrnith ctf challenge) [closed]

So my friend and I were trying to do this ctf challenge here http://labyrenth.com/ and when we were trying to solve the first part of the "Threat" challenges we stumbled upon a challenge we have no ...
0
votes
0answers
22 views

Which symmetric encryption method does PGP use for its hybrid-method?

I'm doing some research on PGP for a class-assignment. I've tried to find out which exact implementation PGP uses for its symmetric encryption part. Finding out about RSA as the asymmetric one was ...
7
votes
2answers
164 views

How can I encrypt my print jobs?

I often print confidential documents over a large intranet to various printers based on where I am in the building. However, since the building is so large, it is highly likely there is a malicious ...
2
votes
0answers
18 views

Mixing Off-The-Record and classic SSL

I am developing some pubsub system on top of Node.js and Socket.io. I decided to implement Off-The-Record (OTR) encryption by default for all of data transfers between clients and server(s). Question ...
0
votes
0answers
22 views

Does the CASB protect cloud applications and its data end-to-end? [closed]

CASB definition from Gartner site is here. From its definition, one can see the CASB covers most of enterprise security requirements which are mandatory on any deployments (cloud or on-premise). ...
0
votes
0answers
12 views

Advantages and disadvantages of two-party ECDSA [closed]

I have to study two-party ECDSA and evaluate it. I understand how it works, it uses paillier crypto system and that affects its performance. I need to evaluate it more precisely, so can you explain ...
0
votes
0answers
18 views

Reuse key to encrypt signed content

I am developing an application which generates JWT tokens which are signed using HMAC-SHA256 algorithm during their generation and later on encrypted using Fernet library. Since the signing and the ...
0
votes
1answer
80 views

Should the password be stored in a variable before encryption?

I am currently writing an App using CodenameOne, and there is a login screen, where the user needs to insert their account and password. Now I was wondering, what would be the best way to access the ...
2
votes
2answers
79 views

Is there such a thing as application-specific encryption?

I am looking for a way to encrypt certain files (.jpg, .pdf, standard file extensions) such that they can only be opened by a certain application (assuming this application will have the relevant file ...
0
votes
0answers
36 views

Encrypt input data file

I have a program in C which reads data from several text files. I want to "obfuscate" its content to the user : I don't have a strong constraint in terms of security, I just want the user not to be ...
82
votes
9answers
16k views

Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?

I don't have any experience or scientific knowledge in security, I just wanted to ask if this is possible because I am interested in it. What if I encrypt data and every password decrypts it, but ...
0
votes
1answer
156 views

How to securely send bank details to someone?

I have completed my internship and my employer wants me send him my bank account details so that he can transfer me my stipend. How can I securely do this? I have Ubuntu MATE 16.04. My employer is not ...
1
vote
1answer
45 views

How can we serve sensitive encryped data without storing the key? Should I use user-defined passwords for keys?

System Background Sensitive data must be stored (i.e. Credit Card number or SSN) in the system for a notable period of time, to serve ongoing operation of the company. Anyone can insert sensitive ...
1
vote
4answers
107 views

What exactly is a key in cryptography?

After researching and reading I am not sure if I completely understand it. To my knowledge, a key is a password used to decrypt a message. However, the confusion comes in when it comes to the public ...
3
votes
1answer
85 views

How to securely communicate with radio controlled device?

Let's say I have a drone that is controlled through radio and I would like to make sure that nobody else can control and gain data from it except for me. I could encrypt the data with a cipher and ...
1
vote
1answer
156 views

Do my router and OS “know” which URLs I visit, if SSL is used?

Is it possible for a router or an operating system to get access to URLs I visit in my browser, if SSL-encryption is used between a browser and a webserver?
1
vote
0answers
50 views

Create reduction functions in rainbow tables

I have been trying to understand rainbow tables lately and one part is giving me trouble to understand here. Let's say I want to generate a table where the chains are 100 000 hash/plaintext long. I ...
-6
votes
0answers
34 views

which type of encryption is RWJKeLBJTBfDc? [duplicate]

which type of encryption is RWJKeLBJTBfDc ? and how can you detect it
3
votes
2answers
76 views

Is it secure to overwrite unencrypted files with encrypted ones?

If I have a text file on my desktop and I encrypt it (as in replace it with an encrypted version, not create a secondary file) will the old file still be recoverable? In other words if you replace the ...
4
votes
1answer
109 views

ProtonMail: Would it not be much better if each user had their own private key?

ProtonMail keeps the encrypted private keys of all their users in their servers. The mailbox password for each user decrypts this private key, which is known only to that user. Would it not actually ...
1
vote
1answer
91 views

Effect of “decrypting” clear-text then “re-encrypting” it

I have a (unique) situation where I receive data that is a combination of encrypted (with AES-CBC) and clear-text blocks and I cannot tell which blocks are encrypted. I plan to decrypt all of the data,...
-7
votes
1answer
198 views

Whats encryption is use there [duplicate]

Please help me and give me this decrypted, or tell me what sort of encryption or hash is used here. aHR0cHM6Ly9tZWdhLm56LyMhZmt3UTJESlQhd21qYkNDZXZHbDNrS1ZqWGRGWnpmRDBwbjlyb2tWNUdf​YmxwQzlUbTRVUQ==
1
vote
0answers
43 views

Long-term cloud backup encryption

I have a few TiB of data on machines that I control. For georedundant backup purposes I want to also have the data in the cloud. Obviously I don't want to give the provider (or any intelligence ...
1
vote
0answers
33 views

What information can be seen when I'm using SRTP via XMPP?

Just as the title goes, basically what data/information can be tracked when using SRTP via XMPP? As client I'm using Jitsi. If things works in some aspects similar to HTTPS, I guess that maybe it ...
0
votes
0answers
43 views

How does an attacker compromise a soft switch?

Speaking of soft switches (e.g soft switch in data plane of software defined networking). I've been trying to find a good research paper or article that explains how an attacker can compromise a soft ...
3
votes
1answer
133 views

The NSA circumvents encryption and how would I protect myself from these type of attacks? [closed]

For the sake of this question, assume that I am security conscious to the point of paranoid. I am concerned that older versions of GnuPG may be compromised due to RSA encryption keys because of known ...
9
votes
3answers
110 views

Where to find current information on cipher suite strength?

I am hardening the configuration for my /etc/ssh/sshd_config and have a few choices for Ciphers: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,...
0
votes
1answer
42 views

Stolen Remote Desktop Protocol (RDP) credentials

I would like to know how to guard against RDP-renting services such as dedicateexpress.com which rents out stolen corporate laptops credentials. Are there IDS for such events?
1
vote
2answers
97 views

Bruteforcing hardware-encrypted SSD

Can you bruteforce a hardware-encrypted SSD drive? I mean recovering the password needed to unlock the drive. Is there any software could do this? Here the focus is the software that could do the job....
1
vote
0answers
32 views

Diagnose encryption problem in Microsoft Outlook? [migrated]

I am unable to send an encrypted email to a party for whom I have a certificate. How can I diagnose the problem? Microsoft's error message does not explain what the problem is: Notes: The party's ...
0
votes
1answer
61 views

What happens when attacker disrupts the ssl handshake?

I have recently understood how SSL handshake works.I understand that once the handshake is done, everything is shared by secret key between server and client. I want to know what happens if Man in the ...
0
votes
0answers
26 views

How does Whatsapp implement end to end encryption? [duplicate]

I see in my phone that messages are end to end encrypted and no third person can see the message. Let's say A has B in his contacts. To send a message to B, A and B should use the same secret key. How ...
-1
votes
1answer
58 views

Secure PIN verification if HTTPS is decryptable by third party

I'm developing a system where mobile applications communicate with server through HTTPS. The communication consists of two phases: at first, app "registers" at server: among other stuff, user chooses ...
-1
votes
3answers
323 views

Virus using input from victims mic to generate encryption keys [closed]

I am a software engineer from Bucharest and I've created an audio based encryption and authentication application called WaveCrypt. It basically allows users to encrypt (AES) their files with an ...
0
votes
0answers
20 views

Enigmail: Issue about sending to old key

So I have set up a new GPG key for myself. I previously had one under the same email, but it has since been revoked. I installed enigmail on my new system with this new key and It seems that it is ...
3
votes
1answer
85 views

How safe is this “Multidimensional-Encryption method” (includes xAES, familiar from Unseen.is)?

I would like to ask about this encryption method that I found: USPTO patent and it is related to this question here: A service that claims beyond army level encryption Didn't see any updates on this ...
0
votes
0answers
59 views

Securing data with three USB drives problem

Here is a problem. There is a single piece of sensitive data, which is subject to update and invalidate previous non-updated copies (think of password-protected Bitcoin Core wallet.dat). There are ...
8
votes
4answers
2k views

How to store data that the computer can read but not the user?

In the TV series The Office, Dwight says he uses a diary to keep secrets from his computer. I'm wondering if the opposite is possible: can my computer create a file that it can read but I can't? I ...
0
votes
1answer
91 views

How to crack encrypted disk (crypto-LUKS) in an efficient way?

I had a disk encrypted by crypto-LUKS but forgotten password. I read a question posted here. LUKS HDD Encryption crack But before that I want to know if there's some free software I can use to ...
3
votes
0answers
32 views

Does Oracle's GuardedString protect sensitive data against heap or memory dumps?

Oracle's org.identityconnectors.common.security.GuardedString states this in its documentation: The GuardedString class alleviates [the problem that string data is kept in memory as clear text] by ...
-6
votes
0answers
48 views

How do I decrypt this unknown cipher text? [duplicate]

I got this unknow cipher text. Can you solve this? This looks like encoded PHP with base64/str_rot13/gzinflate eval. nI31RZG+Rxb1RZGzRMfsOdNql2K9RsesRLDVOdNqnLWtOdNqRtJtRtm1RZG8OdNrmxb1R/...
-2
votes
1answer
47 views

Decrypting keys at the software application level [closed]

Does anyone know what the most common method of decrypting data is? I.e., if something is hashed and not decrypted at the firewall, how is it usually decrypted within a system? Is it integrated into ...