Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
47 views

securely storing passwords that can be retrieved

I'm trying to build a web application that can store passwords of other services like Facebook, Gmail ...etc. These passwords can be later retrieved and shown to the user. This has to be a web ...
0
votes
0answers
12 views

Proving an encrypted message contains (but does not 100% consist of) a plain-text message? [migrated]

I have keypair (u,r), and two pieces of data, X and Y. I reveal X publicly but keep Y secret. Y has high entropy. I then combine X and Y, into c(X,Y) = Z. I encrypt Z, into "encrypt(Z,u) = Q". r ...
-1
votes
0answers
37 views

Is it possible to create multiple hidden volumes within an encrypted volume?

You can create an encrypted hidden volume from an outer encrypted volume within Truecrypt or it's fork, Veracrypt... but is it possible to create more than one hidden volume within an outer encrypted ...
0
votes
0answers
55 views

PHP crypted or hashed string to decode

I have a problem for captcha solve in 3 days. This is crypted or hashed captcha cookie 55debbcf069c81440660431 23 characters long. I found last 10 character is 1440660431 timestamp. I think first 13 ...
0
votes
1answer
49 views

Should I make my api calls to update users contain a password or hashed auth key?

So Im creating an API for an app that in the backend involves updating users, deleting users, and some other user related stuff. Im using the slim framework and I was wondering when the user wants to ...
3
votes
1answer
76 views

Exchange encrypted messages on public chatroom

Not so long ago, I was chatting with a friend on our university's accounts, and the discussion went to an interesting subject: what if the administrators have access to our messages? So we had the ...
4
votes
2answers
81 views

Is encryption possible for simplex (one-directional) TCP/IP, and if so, how?

As explained in the TCP/IP Guide, it is possible to configure TCP/IP to operate in simplex mode and this mode is utilized, among other things, in communication from satellites. One consideration with ...
0
votes
1answer
75 views

“If encryption has not been implemented, a comparable alternative has been implemented” [on hold]

What constitutes as a comparable alternative to encryption? I know that password keepers and other services are not comparable and are not considered encryption. If the context is authorized access ...
0
votes
1answer
38 views

Locking down Amazon RDS table data

We are using MySQL Amazon RDS. The instance is encrypted, and also only available via SSH from the production server EC2 instance. One of the things we are trying to do is give access to some ...
1
vote
1answer
24 views

Envelope Encryption with asymmetric keys vs KMS

In Envelope encryption a symmetric secret key is used to sign the data and then another key is used to encrypt the secret to produce an encrypted secret key. The encrypted messages is packaged with ...
-3
votes
1answer
63 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
0
votes
1answer
56 views

Impact of sharing the private key with a third party for snooping SSL traffic

I am trying to understand the impact of sharing the private key with a third party for snooping SSL traffic. Below are my thoughts, please correct and add if some more impacts are there: One clear ...
1
vote
2answers
72 views

Building an anonymous network

Imagine you're building Facebook, except you don't want to reveal user identity for posts and comments. You still want to verify each user's organization. For example, if the user signs up with ...
1
vote
1answer
72 views

What will happen to decrypt a tampered message encrypted by a symmetric key

There is a message M, it's encrypted by a symmetric key like Y=E(K,M). The message is sent to B from A. During the transportation of message M, if the message is tampered by C, then when B received ...
1
vote
2answers
66 views

Are ServerHello, ClientHello, ServerKeyExchange messages encrypted

In process of SSL handshake, several message like ServerHello, ClientHello, ServerKeyExchange messages are exchange before the actual encryption starts. Are these messages encrypted? If not then ...
0
votes
3answers
203 views

Is there any way to securely hide data on physical media?

In the recent years I've gotten more paranoid of spying and hacking, so I've encrypted most of my important files just in case. Tax information, some company confidential information, account logins, ...
2
votes
1answer
68 views

OpenVPN username and password authentication only - unsafe?

Is it safe to only use username and password (and server certificate) for OpenVPN connection authentication? Are username or password ever transmitted in plaintext to the OpenVPN server? I found a ...
2
votes
1answer
74 views

Communicate through gpg

I need to frequently communicate with a server in the manner do stuff related to x or send me info of x My thoughts are to directly put the task I want to be executed into the package I want to send, ...
-2
votes
0answers
26 views

Any idea what type of encryption this is? [duplicate]

I can't seem to find out what this is, I am a newbie at this stuff. 81n5q574po4p977srqo89960000sp14n
0
votes
0answers
38 views

Why isn't a table used to solve the large number factoring problem? [migrated]

Lots of modern encryption (RSA comes to mind) are based on the fact that factoring large numbers is hard. However, multiplying large numbers is much easier, and table lookups are very easy. Since ...
1
vote
1answer
61 views

Determining whether a local area network is encrypting information in transit

My computer is connected to a switch. Numerous other network devices are also connected to the (local) switch. Is there a simple way of determining whether the connection between my desktop and ...
-2
votes
1answer
87 views

How would I encrypt something like this; [closed]

I want to encrypt some very important passwords in a text document or something like it. What would I use to ensure maximum security.
3
votes
0answers
41 views

GPG subkey layout. Separate keys for C, S and E?

I've been reading up a lot on GPG recently. This page describes how to setup so-called "laptop keys". The idea being that if you lose your laptop, or have it stolen, your primary certification key, ...
0
votes
0answers
26 views

Triple-DES DUKPT CBC PIN variant vs Data variant

Does any know the difference between triple des dukpt decryption algorithm with PIN variant and Data variant? I have done Triple DES DUKPT PIN variant, which generate session key from KSN and BDK. ...
0
votes
2answers
72 views

Encryption in case of distributed architecture

I have application infrastructure as follows - web client -> load balancer -> Apache (web server) -> Weblogic (application server). I could understand that in case of HTTPS request, SSL handshake ...
-4
votes
1answer
40 views

How to find an encryption algorithm between two hexadecimal numbers? [closed]

I have several numbers that are generated by a server. They are 16 digits long and are hexadecimal. I have no idea whether or not any salting or hashing techniques were used. Can I find the encryption ...
0
votes
0answers
34 views

Performances of dm-crypt vs. ecryptfs

The only information I found about the difference of performance between dm-crypt (LUKS mode) and ecryptfs is that given that ecryptfs operates at filesystem-level, it may be slower when doing ...
-1
votes
0answers
44 views

How to ensure message integrity for ciphers created via RSA algorithm [migrated]

In order to send a message over an unsecured channel I have to first encrypt the data using the RSA algorithm. The implementation I use is the javax.crypto.Cipher in Java 7. I'm aware of chosen ...
0
votes
1answer
114 views

Does CryptoWall needs a internet connection to encrypt my files?

Does CryptoWall 3.0 use some resource on the internet to encrypt my files? I watched this video on YouTube - in this video a tool is used to sniff network traffic and find information about ...
1
vote
2answers
154 views

Encrypt data stored in a database

I recently talked to a potential customer who wants to build up a database which contains fairly sensitive data. One of her key requirements is, that the data storeed will be encrypted in a way that ...
0
votes
1answer
120 views

How safe is it if encrypted text is exposed?

I know that it is considered safe if both encryption algorithm and password are safely hidden. However, what if the attacker knows that there can only be a number of algorithms used. So how safe is it ...
5
votes
2answers
155 views

Are the GET values also encrypted/secured by SSL?

For example we submit a form on the following site: https://example.com (SSL Encrypted) Then the form is submitted as GET method, so it becomes like this: ...
2
votes
1answer
108 views

Is it safe to use a 4-digit PIN for Android system encryption?

I just encrypted my Android phone using the default menu. I was asked for a PIN code (4 digits). Do you think this is a good practice? Is there a limited number of attempts at decrypting the ...
0
votes
0answers
21 views

How to do secure file transfer on windows with AD?

I have a requirement to serve files from a windows 2008 (and up) server that will be part of an AD domain to client machines that will also be members of that same domain. The requirements are as ...
0
votes
0answers
11 views

Secret Sharing Encryption [migrated]

Suppose Alice shares a secret block cipher key , KAB with Bob, and a diff erent secret block cipher key , KAC with Charlie. Describe a method for Alice to encrypt an mblock message such that it can ...
4
votes
4answers
260 views

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?

I have seen other TrueCrypt questions as well "Windows encryption with BitLocker" and "Mac OSX encryption with FileVault". Does the FBI/NSA or other government agencies have access to my data or can ...
-1
votes
1answer
58 views

How can I secure encryption keys in the code? [duplicate]

I have files on the server that is encrypted with AES. I am developing iOS and Android apps to decrypt and process those files in the phone or tablet. To decrypt files on the client apps, I have to ...
2
votes
1answer
65 views

Encrypt part of users' data in web application vs. password recovery

I'm developing a web-application that stores sensitive user data. Although the data is sensitive we want it stored permanently because the users might want to come back later and reuse it. The user ...
1
vote
2answers
43 views

Should Android apps for communication encryption and security require permissions like identity, device ID, contacts, etc.?

There is a Android application Threema for communication encryption and that says it does not collect user data, but it requires the following permissions: identity, contacts and device ID. Can ...
2
votes
2answers
161 views

Is it possible to encode some data in a image and decode the data from hard copy?

I am working on a project which can encode some data in an Image and share it with other people by printing it out as hard copy. Now, other people can take a picture of the hard copy they got and ...
1
vote
1answer
32 views

How can Key Compromise Impersonation be mitigated?

This paper describes a successful attack on TLS called Key Compromise Impersonation. It states that the attack can be mitigated thus: Disable non-ephemeral (EC)DH handshakes Set appropriate X509 ...
2
votes
0answers
26 views

How to safely decrypt user data in scheduled script

I have a web application with a lot of stored db data, some of which is encrypted. The data is encrypted with a surrogate key, which itself is encrypted with a hash of a user password. Upon request ...
2
votes
0answers
55 views

How to share an encrypted storage on Windows, Mac OS X and Linux in a secure way [migrated]

I got a 2 TB drive that I have to use with both Windows 8.1 / Windows 10 and Yosemite to OS X / OS X El Capitan and maybe even on Linux. I need to encrypt the volume. Or rather, I want to create two ...
1
vote
1answer
56 views

Should I worry about padding oracle?

I have a PHP webapp which encrypts (by AES192-CBC) messages with a random key and a random IV. Everywhere people are saying how amazing are GCM, EAX and authenticated modes (does currently exist safe ...
-3
votes
2answers
64 views

Encrypted Passwords in Databases

Every day the technology around us is getting better and better, and so does security. Almost every-day newspapers headlines are: hackers hacked database of a big company and stole passwords and ...
0
votes
0answers
20 views

Is there a combination program that will generate a dictionary from a predefined list of words and numbers in specific order?

I'm sorry if this question has been asked, but I've already wasted 6 precious hours trying to find a program that will accomplish the task I'm requesting. (Perhaps I'm asking the wrong question?) ...
2
votes
1answer
55 views

Do password derived encryption keys need to be salted?

If I have a database where I store users' sensitive information, and encrypt that information, do I need to do something like PBKDF2(password,salt,10^5) for the encryption key as well as the hash?
1
vote
1answer
116 views

What is the most secure way to digitally communicate between the U.S. and China?

What is the most secure way for two people to communicate digitally when one person is in the U.S. and the other is in China (likely being monitored)? Updated: Here's some additional info: The ...
2
votes
1answer
92 views

Is a large encrypted file more secure than a small one?

Does encrypting a large file and subsequently having to decrypt a large file make it more secure than a small one when attempting to brute force it? If you have to brute force a 25GB file and a 250MB ...
6
votes
6answers
2k views

Ransom attacks - can I protect myself by encrypting all my files?

If I encrypt all my files can I get "attacked" by ransom attacks? Because my files are already encrypted, they cannot access them, so I should be safe or am I wrong? Also, if someone could tell me ...