Tagged Questions

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
0answers
7 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
0
votes
1answer
27 views

Bridge mode question [on hold]

İ have an outdoor in my shop and distributing my network to customers using mac filtering opition.. one of my neighboor got a weak signal....so, he bought a wirelss repeater to recieve a better ...
0
votes
1answer
75 views

How do security agencies share their data with each other?

I am trying to develop an application for some hypothetical security agencies for sharing their data with each other for a college project.I have three questions, 1.How do security agencies share ...
0
votes
2answers
70 views

Are there any good tools to test the encryption quality of data?

I am trying to increase my understanding of data encryption, and I was wondering this. It would be really nice if there were any good tools to test how secure my encrypted data is, for example how ...
2
votes
1answer
56 views

Any ways to protect my user data on company computers?

I have a desktop computer at work running Windows 8.1 Pro. For logging in I use a domain account and I have logged in with my Microsoft account to get access to my Onedrive and syncing of email ...
0
votes
2answers
65 views

How safe is it to use older/unknown Encryption methods for plaintext?

When mailing or chatting with people, it had crossed my mind, what if, for simple communication, someone would use an older encryption method (i.e., ENIGMA), to encrypt their message? Would because ...
0
votes
0answers
14 views

Security in MPI implementations

I came across a research paper andproject discussing about the implementation of encryption/decryption in the channel layer of MPICH2 called the ES-MPICH2 library ...
0
votes
2answers
59 views

Trust level of whole disk encryption software

For example, if we take this software into account: Symantec Endpoint Encryption Sophos Safeguard Encryption How can we trust suppliers of whole disk encryption software in the lights of the ...
33
votes
4answers
2k views

Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?

Current setup We have a service that allows users to upload documents through a website and stores the uploaded documents encrypted on disk. The documents on disk are encrypted with a per-user key, ...
-3
votes
0answers
38 views

What encryption or hashing algorithm is likely to be used here? [on hold]

I want to use the USERS table of a proprietary 3-rd party tool for user authentication. The column PASSWORD is of type VARCHAR(35). It holds the following data: 64783641124722847161648230000000000 ...
-2
votes
1answer
96 views

What kind of encryption is this? [on hold]

I'm trying to discover what type of encryption was used to generate this strings: Qo94v0JpPaL59LS6U3xfEB4nVgc= +3ZaEliGZ7DWte+LaviHvOlcg9A= v44x/KnS/JyOVDtbmbkFkJEgkWs= y75nHoG/yXwutlixBX7/jRXsv+o= ...
1
vote
1answer
35 views

Client Hello message suggests cipher suite which is not in the list specified by setEnabledCipherSuites() method

In my code, I use JSSE6 API to specify a list of enabled cipher suites. I aimed to only allow 168 bits or higher encryption cipher suites, below is a part of my code: /** List of 168 bits encryption ...
0
votes
1answer
86 views

Why is not safe to use the same public key in RSA?

In the RSA context, why is not safe to use the same n (public key)for different people?
-2
votes
2answers
53 views

Find DES encryption key having input and encrypted output

Having the source string: kenanfx And the generated encrypted string: csund6XMTudO6 Using this script, it identified the algorithm used to encrypt as DES(Unix) I wonder if it is possible (in ...
1
vote
1answer
61 views

How to cryptoanalyze a one time pad that uses a plain text document as the pad?

I have read that in order for a one time pad to be truly secure, the pad itself must be random data. Given the practical difficulty of sharing a secure random pad, I was wondering what would be the ...
2
votes
1answer
29 views

ecryptfs - relationship between passphrase and sig-cache.txt

I have previously used TrueCrypt for creating encrypted directories on servers. I am now trying ecryptfs due to the end of development announcement in May. I see that when I encrypt a directory and ...
5
votes
2answers
667 views

Can the IV + Salt be the same?

During my encryption app i've got the password creation bit: PBEKeySpec spec = new PBEKeySpec(password.toCharArray(), salt, 10000, keyLength); and later on the actual encryption part: ...
0
votes
2answers
190 views

Difference Between MD4 and MD5 encryption

During coding, I have used both MD4 and MD5 encryption techniques. But there hasn't been any noticeable security difference between either of them. And yet, most of them prefer MD5, in fact specify ...
3
votes
1answer
53 views

Session Management for Private Key Passphrases in a Web Application

Use Case I would like to encrypt data in a database for a Web Application. The following requirements exist: Decryption should only be possible when a user provides a passphrase Encryption should ...
3
votes
1answer
117 views

Using Facebook via Tor

I think about using Tor for nearly everthing, including Facebook, because FB often tags the users even on other sites, for example per Like-Button, Cookies etc. Now I think about using the Tor ...
2
votes
2answers
76 views

Encrypted container on top of a copy-on-write filesystem

The way I understand it, when you write to a copy-on-write filesystem, data never gets overwritten in place, instead new data is written to a new location, and the old data will only be overwritten ...
1
vote
1answer
87 views

All users can write only one can read system

The system I want to implement has the following requirement: All users can insert some sensitive data, but only one, master user, can see it. There is any known, already implemented solution to this ...
-1
votes
2answers
71 views

Is using TrueCrypt in OSX secure? [duplicate]

What would be a more secure way to encrypt files using TrueCrypt 7.1a. The is an airgapped computer (wifi, bluetooth, speakers and mic removed too). The encrypted files will be on an external drive in ...
-1
votes
0answers
27 views

Review of the “Connections Tab” in my browser using secured sites

Can someone help me understand the following information better when looking at a secured site in my browser. For example I'm looking at a site now and it says the following in the connections tab ...
0
votes
1answer
102 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
-4
votes
0answers
38 views

Data protection on DVD's

I would like to encrypt data on a dvd such that one can read but not write the dvd. Ive tried Nero 15 but it requires that I send a public key to the user which I find counter-productive. Any ideas
3
votes
1answer
63 views

Encryption and HMAC with the same password

I need to send authenticated ciphered messages by using a single password. Reusing the same (derived) key for the block cipher and the HMAC is not a good practice, I know. My initial idea is to ...
3
votes
1answer
73 views

How to best to secure data over HTTPS

My aim is to have an (iOS) app in which the user would login, then on sucsessful login, gain access to additional information over an encrypted webservice (undecided). From research, I understanding ...
3
votes
1answer
66 views

Is it a good idea to do double AES encryption with 2 different keys, when one is held by the user and one stored on the server?

I'm building a web app. The app needs to keep certain data within the database very secure. Please assume for the moment that I don't have a HSM or Key-Management facility and can't afford to ...
1
vote
0answers
40 views

SSL Asymmetric encryption newbie [duplicate]

I am relatively new to the world of cryptography and was wanting to develop a webpage which allows credit card payments. Thus, I looked into the digicert ssl service, hoping that it could do what I ...
2
votes
2answers
98 views

Does client side encryption really add security?

A lot of password managers seems to promote client-side encryption as a key feature of their service. For example : LastPass, Firefox Sync, PasswordBox, etc... They all say something like Even we ...
0
votes
0answers
17 views

Infer encoding mechanism from n-grams distance

I have a series of obfuscated strings which across the set of strings have regions of high variance and regions of low variance (implying some encoding mechanism as opposed to an encryption procedure ...
2
votes
2answers
73 views

TLS reliance on System Time

I'm interested to know if there is any reliance on system time (as defined by Linux or windows) when initiating a secure handshake. I'm aware that TCP typically uses a random number (RFC 1323) to ...
2
votes
1answer
69 views

How does Putty derive the encryption key in its .ppk format?

I have been doing some reading on the mechanics of managing RSA key pairs, during which I learned that OpenSSL by default derives the encryption key by using MD5 on the passphrase (bad!) without any ...
0
votes
2answers
82 views

Should I use HMAC in this situation

I need to store a big message encrypted on a server. What I am about to do is: Encrypt the message with a AES key; (Authentication) Hash the message with SHA512 and encrypt the hash with RSA priv ...
1
vote
4answers
143 views

Is 3DES outdated for message authentication code computing?

I am working in IT department of a bank, currently we use 3DES to compute MAC of packet, is that safe enough using 3DES? Should we use any other more modern algorithm?
1
vote
0answers
46 views

Encryption algorithm keySize restriction in JSSE 7

I have an application which uses SSL (JSSE Implementation). Currently from my client side, the "Client Hello" message suggests a list of cipher suites that consists of both 128 & 256 bits key ...
2
votes
2answers
595 views

Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?

Is TLS_FALLBACK_SCSV going to be the fix for servers that wish to keep SSLv3 enabled? If not what actions are being taken, if any, that address the vulnerability besides disabling SSLv3?
-1
votes
1answer
44 views

Exchange of encrypted files through a server

I have a thing to do, that basically bases on a server that is honest but curious. Therefore I want the server to have the public key for encryption and it will encrypt files during the process of ...
0
votes
2answers
137 views

Fake phone call

I have a problem, getting call from known numbers and when he lifts it, no one is speaking from other side! Well, the awkward part is, the call is from known numbers only, but if I ask the person ...
-2
votes
2answers
43 views

2 way encryption of a string into numerical string using random number

I have a random number like 0.323978544752212. I want to encrypt a string using this random number into to numerical string i.e. final string is like ...
0
votes
1answer
55 views

Understanding Digital Signature

I have just learned Digital Signature and am trying to ensure that I have got my understanding of Digital Signature on the correct track. Assume Alice wants to send a message (M) to Bob where the ...
1
vote
2answers
47 views

What's the benefit of hybrid cryptosystem vs asymmetric for small data blocks?

It's a common belief hybrid cryptosystems are better than asymmetric only. Is that allways like that? What's the benefit of using symmetric and asymmetric encryption for small data blocks (< 100 ...
3
votes
4answers
116 views

How do I encrypt external drive with Password which is compatible with both Linux and Windows? [closed]

I wanted to encrypt my external drive with password, which is compatible in both Linux and Windows. Truecrypt is an option. But the development of it is stopped few months back. I came across ...
0
votes
0answers
18 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN [migrated]

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
0
votes
1answer
37 views

Can the aproximated date on which a given Encryption Algorithm will become prone to brute force be predicted?

I have a very elementary understanding about encryption so this question may have false assumptions, Lets take an encryption algorithm that is impractical to break through bruteforce with today's ...
0
votes
1answer
72 views

How will Gmail be able to detect SPAM and display ads when emails are encrypted end-to-end?

Context Google is making end-to-end encryption easier to use. SPAM How will they be able to perform SPAM detection when the email is transmitted and stored encryptedly? I suppose that if the SPAM ...
4
votes
3answers
250 views

Security Implications of using Base64 Encoding with Encryption

Are there any security implications of converting a byte-array encryption key into a Base64 string before use? I am creating a generic encryption helper for a project, and for the sake of consistency ...
2
votes
3answers
39 views

Encryption while logged in

If I'm using full disk encryption on my home computer, and it's online, are the hard drive contents encrypted when I'm logged in and using the machine (from the perspective of an online attacker - no ...
-1
votes
0answers
38 views

How to determine possible encryption type of a given data [duplicate]

I have a encrypted data which consist of 2 numbers: A random number of form 0.110134486415522 This number is always less than 1 and is generated at start of every session encrypted numerical ...