Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
1answer
29 views

Use RSA Encryption With ASP.NET

My goal is to implement asymmetric encryption in an ASP.NET website to secure user-entered Social Security Numbers. I want to encrypt the SSNs with a public key, and only display a masked version, to ...
0
votes
2answers
64 views

Safety of Encryption Keys

I'm trying to figure out the best way to encrypt passwords for a forums site I'm working on. I've decided I'm going to use an encryption such as blowfish. From my understanding, you have a key, and ...
3
votes
0answers
38 views

How to really treat security between peers in WebRTC

Recently I've been implementing WebRTC in my project and would like to add security and privacy to the couple. I then decided to search on and found something if it is really necessary to impose ...
2
votes
1answer
81 views

how do we encrypt 100bits of plain text to get 100bits cypher text using DES?

We have a scenario like that we need to encrypt 100 bits of plain text using encryption algorithm like DES (algorithm takes 64bits plain text block and generate 64 bits of cypher text block, key using ...
2
votes
1answer
50 views

Are TLS session keys cached in a browser?

For example, when authenticating to a TLS protected service, and then closing the tab, you can sometimes reconnect to the service afterwards without re-authenticating. In preservation of perfect ...
2
votes
2answers
207 views

Is it okay if passphrases to KDFs are “predictable”

I'm looking to do file encryption for small amounts of text (8-100 characters for each item being encrypted). Here's what I have: A secret passphrase and a salt. I Use Rijndael to generate a key and ...
-1
votes
0answers
16 views

is there a signature scheme for cramer-shoup cryptosystem? [migrated]

I have a project that I have to use cryptosystem and signature scheme for it, so I've read about cramer-shoup cryptosystem and I want to use it since it is more secure the elgamal cryptosystem, but, I ...
11
votes
4answers
782 views

How can I decrypt my files from “Cryptowall” encryption? [duplicate]

I just got infected with "Crypt0L0cker" malware,virus or whatever that might be. They gave me a link (http://bica3zjnvl6fxkqf.tor-area.org/jrrk14.php?%20user_code=94aya99&user_pass=2616, the ...
1
vote
0answers
40 views

Can high network usage be detected and prevented in Tor? [on hold]

I've already asked this question here but as of yet it has no views/answers. I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using ...
1
vote
0answers
38 views

Biometric device instead of password - signature security

Lets assume that there is a biometric algorithm for user authentication which compares fingerprints with an user's signature saved in database (comparing function is not important here). Next there is ...
0
votes
2answers
65 views

Random characters and letters form obsfuscation

I know that this question has been asked many times, but would JavaScript encryption work if I just added 100 random numbers and letters to the password? That would be hard to reverse engineer, ...
0
votes
2answers
74 views

Do modern cryptographers / cryptoanalytics need the knowledge of historical cryptography

It makes a lot of sense for people to know the history of their profession from various points of view and I suppose especially in cryptography because people can still use old ciphers and no one ...
-2
votes
1answer
29 views

Attack on Androids Encryption called FROST

http://www.extremetech.com/computing/150536-how-to-bypass-an-android-smartphones-encryption-and-security-put-it-in-the-freezer I read this article about FROST and in the comments someone was stating ...
-1
votes
1answer
29 views

Best way to store client side Encryption keys

I have different client applications running on different OS (iOS, Android, Windows Desktop, Windows Phone, Mac, Windows Store -All Native Apps-) I have to decrypt (AES-128) some files (thousands of ...
2
votes
1answer
44 views

Encryption of settings/credentials in mobile apps - what threats does this protect against?

I have been decompiling Android apps recently. In a sample of 37 apps, 12 of these use some form of custom encryption/obfuscation to store settings and credentials on the device. By necessity, the ...
3
votes
3answers
90 views

How do browsers negotiate SSL/TLS connection parameters?

For the purpose of this question, let assume that an SSL/TLS connection has 4 parameters: protocol, symmetric encryption method, asymmetric encryption method, MAC. During the negotiation of SSL ...
4
votes
2answers
149 views

Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite?

When I go to this site, Chrome Version 44.0.2403.89 is connecting to the server with TLS_RSA_WITH_AES_128_CBC_SHA (0x2f), and it states that this is an "obsolete cipher suite". For what reason is it ...
1
vote
1answer
61 views

Secure Software Architecture

I am designing a software architecture and i need some suggestion and clarification on few issues. This will be a server side RESTfull API for accessing data and multiple mobile/desktop client to ...
1
vote
0answers
43 views

Is there anything to worry about — worth putting security on a simple test site?

So I want to make a site, this site won't have users (so no one but me will be able to post to the site) or anything it will just echo out items from Mysql like title and text-body I was wondering if ...
2
votes
2answers
49 views

Authenticated encryption (Symmetric encryption) for .NET applications [on hold]

Is there an implementation of Authenticated encryption for .NET applications? The AES API from .NET does not include mode such as GCM. In the documentation, I can only see insecure modes (ECB, CBC, ...
0
votes
2answers
60 views

Content on a usb flash drive available for a limited time [closed]

I need to distribute some content on a USB flash drive. This content should be available for a limited time only. I am looking for some approach to achieve above. So far I do not have information ...
-3
votes
0answers
79 views

Ph.D in Netwok Security? [closed]

I'm already Cisco Network Support Engineer and cleared CCNA Exam . I wanna to start my PhD in network security. What kind of programming skills(Java,c++, Erlang) are required to gain before join PhD ...
3
votes
1answer
90 views

Securing administration network

We would like to secure our administration network from advanced persistant threats and also from rogue administrators. I have already read the best practices from SANS Institute, NSA or other guides. ...
-1
votes
0answers
40 views

What software ISPs (or else) use for DPI? [closed]

I am wondering what type of software or what exact product Internet Service Providers (ISP) all around the world can use for Deep Packet Inspection (DPI) purposes? As i understand DPI, this is a ...
1
vote
2answers
102 views

Could I ever be legally required to decrpyt user information? [closed]

Suppose I host some web app which stores information about its users. In the interest of confidentiality, that information is stored in an encrypted format. Under what circumstances could a legal ...
1
vote
1answer
34 views

Key derivation inside secure container of HSM

I have to implement custom key derivation function which basically works as follows: I have encryption key K in secure container of HSM. K can't be exported and the only way how to use it is through ...
0
votes
1answer
74 views

I need to transfer user's private key (RSA) to my App. Is file sharing a good solution?

I've asked a similar question here earlier iOS: Is it ok to store a RSA private key (use to decrypt text) in your application document directory? However, the person recommend me to use keychain ...
3
votes
1answer
47 views

Cipher usage by end users and browsers

How do I check in apache logs as to what cipher end users / browsers are using ? Are there other tools to achieve the same to get a result in percentage ? related link: How can I determine the ...
3
votes
4answers
136 views

How safe is password based key derivation in the case of long password?

I am encrypting files inside a device and store it. So I need to maintain the same key throughout the life cycle of the device. For key derivation I use EVP_bytestokey() of OpenSSL. The problem in ...
12
votes
6answers
4k views

Is (safe) encryption over compromised line impossible?

I realize something like this would be the holy grail of communications security and have never heard anything to suggest it has been done. Am just wondering. A lot of mathematicians and computer ...
-3
votes
1answer
29 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
0
votes
0answers
75 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an ...
3
votes
1answer
91 views

Are there any passwords managers that use a second hidden encryption drive to hide passwords?

I've heard that encyption program, Truecrypt can create a hidden encrypted drive within an encrypted drive; and even if an attacker accesses the first encrypted drive he/she cannot prove the hidden ...
0
votes
0answers
31 views

Finding keys of modified DES encryption [closed]

This is a question I had in my exam today, and I'll be glad if someone can help me to find the answer. A student built an encryption algorithm (something between DES and 3DES), in which the ...
0
votes
1answer
79 views

Is this data encryption process secure?

I have created the following encryption process which I will be using to store CD keys inside my database. Before I use it, however, I need to make sure that this is as secure as possible. From what ...
3
votes
1answer
112 views

Can applying second cipher (including home brew) reduce security

I have asked a question regarding the benefits (if any) of the following scheme: AES(HomeBrew(plaintext)). There are many good answers for that, but many people say that it's theoretically possible ...
10
votes
8answers
1k views

Double encryption with home brew algorithm

Everyone says that home brew encryption is not a good idea because one day the algorithm will be known to attacker which sounds reasonable. So that seems it's main problem, on the other hand known ...
1
vote
1answer
55 views

Are encryption algorithms designed to hinder parallelization?

Are things like large memory requirements and constantly mutable state typically added to encryption alogrithms to hinder the ability of attackers to try multiple candidate keys simultaneously? Also, ...
1
vote
1answer
67 views

Basic XOR cipher for longer messages

How much effective strength is the following adding to a basic 512 bit XOR cipher? Private Key = Key0 consists of 512 randomly generated bits. This key is never used to encrypt or decrypt anything. ...
4
votes
1answer
131 views

Sending Encrypted Messages with Hybrid RSA, AES and HMAC SHA-256

Is this a Secure strategy for sending a large Encrypted Message using Hybrid RSA 2048, AES 256 and authenticated with HMAC SHA-256: Given the Alice already has Bob's RSA Public Key, Alice: ...
9
votes
2answers
151 views

How secure is “Firefox Hello”?

The new "Firefox Hello" feature promises easy and safe video conversation. It is not nescessary to create an account, you simply share a link with your partner to start the conversation. The ...
2
votes
1answer
119 views

if a public key cannot decrypt the cipher text, then how can a private key?

I understand the "public" part of public key cryptography. Not the "private" part. For example, let's say our public key is %7 (modulo 7). And the message to be encrypted is 22. And we know that 22 ...
-1
votes
0answers
49 views

Is it ever acceptable to pluralize the word “encryption” to “encryptions”? [migrated]

I am trying to revise the grammar of someone who insists that the following sentence is correct In Cryptology, encryption is the process of encoding messages or information, and there are ...
3
votes
1answer
44 views

In postgres LDAP authentication, are passwords encrypted?

I am wondering if postgres LDAP login is secure? Would passwords be transmitted in clear text potentially if this is not set up properly?
-1
votes
2answers
44 views

What are the advantages in using LUKS + hardware encryption on SSD?

I can't see what the advantages might be, but I think this would slow data transfer down while providing no extra protection. Am I right or am I overlooking something?
1
vote
1answer
71 views

How to encrypt columns in a database and be able to easily change encryption key

I have several fields in a database table I would like to encrypt, but I would like to do it in a way that would allow me to easily change the encryption key every n months for security reasons. My ...
2
votes
1answer
65 views

multiple encryption layers and removing them in any order?

I was just thinking (through browsing the site) How possible is it to encrypt data, then encrypt it a 2nd time and then after encrypting it with a 2nd layer, remove the first layer leaving the second ...
1
vote
1answer
37 views

On Mac OSX using FileVault 2, are all user's files unencrypted if the current user has rights to login from cold boot up?

I am taking my Macbook into an Authorized Service Provider to run diagnostics on battery performance and my data is encrypted using FileVault 2. I am assuming the technician(s) will want the ability ...
3
votes
1answer
80 views

Decryption using GRUB and TPM

I'm trying to plan security routine for my new Linux install and few questions came up during searching for solution which meet my needs. Is it possible to use private key from TPM in GRUB to ...
2
votes
2answers
61 views

Clarification about IV in PBKDF2 to generate encryption key

I've realized that the following implementation isn't truly safe: $pb = pbkdf2('sha256', $_POST['pass'], "enc_salt", 100, 100); $d = openssl_decrypt ($data['container'],'aes-192-cbc', $pb, true, ...