Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
25 views

Secure connection between two clients with shared secret

I am creating a system where there are multiple clients, each of which has a secure connection to a central server which could pass out shared secrets to each of them. I could be wrong, but I am ...
-1
votes
0answers
20 views

Can't encrypt email

My friend has a problem described here: https://gpgtools.tenderapp.com/discussions/problems/18790-cannot-encrypt-an-email But the solution provided by this link did not work. What else can he try? ...
1
vote
1answer
44 views

Cloud-based IM protocols / services saving messages encrypted on server which is decryptable only by user?

I am looking for a cloud-based (i.e. not end-to-end) secure IM protocol or service. The first one comes to my mind is telegram. Here is a quote from telegram's privacy policy: Cloud Chats ...
0
votes
1answer
41 views

VPN and authorization [on hold]

I wonder, if one should implement two factor authorization and encryption in a client-server solution, how is it done? Of course there can be many ways but some examples would be great. I imagine the ...
1
vote
1answer
23 views

Is it possible to assign different UIDs to subkeys for the purpose of having multiple identities?

Many people advocate generating new primary keys for each identity they wish to have. For example, creating one primary key and associated subkeys for workplace use, and a completely different ...
0
votes
1answer
43 views

How to securely derive a second password specific to an user

I'm giving each of my users an unique Blocktrail wallet that is protected by two API keys (which the server knows) and one passphrase (unique to each wallet). I want the wallet's passphrase to be ...
1
vote
1answer
23 views

Machine readable, user non-readable - XML file

I need some advice as I have been unable to find anything useful via the web - (Google search). I have used the application EventGhost so as to create a custom shell, that I run using the Windows 7 ...
2
votes
1answer
38 views

Can you use ssh for secure inter app communication on the same device?

I use ssh to get an encrypted connection between servers and local machines all the time. It's fast, it's secure, and there's a way to do it in nearly every system programming language that I've used ...
0
votes
0answers
21 views

Create Incremental/complete backups from a disk encrypted using TrueCrypt? [migrated]

I have a tricky question about whole disk encryption and its backups particularly TrueCrypt for which I have never found a great answer What method do you recommend/use for create automatic backups ...
0
votes
1answer
21 views

Evaluating encryption/promised anonymity of message service [on hold]

This is a question that in my opinion should be able to be generally answered, and not just discussed. I therefore hope some discussion will lead up to a straight answer. Scenario: A website X ...
-7
votes
0answers
26 views

i need guidence please help me [closed]

I would like to create an app which connects two persons through internet and the conversation should be secured by an unique style.can someone please help me on this.
1
vote
1answer
75 views

Check HMAC after completing decryption or before?

I have written a piece of software that symmetrically encrypts big files (multi-megabyte). Plaintext is encrypted, after the encryption the HMAC is calculated and written into the header of the file. ...
1
vote
1answer
69 views

How to determine if mail was encrypted during transport using the header information?

First things first: I know about the difference between end-to-end-encryption and transport encryption. Back to topic: I already read some things about how mail server handle transport encryption, ...
2
votes
0answers
27 views

Security implications of providing an encryption/decryption oracle

I need to provide a service that acts as a symetric encryption/decryption blackbox : the box get a secret key k users send datas d, and get ciphertext c = Encrypt(d,k) users send ciphertext c, and ...
-4
votes
1answer
98 views

What encryption is used in this email? [closed]

bobnick1998sw@yopmail.com 96Xx7Tfrf+2zLvKiSXLAoY+W4dh6h+r4ML3JlmXrkyQ= bobnick1998sw1@gmail.com 888IK6Jz5tLP11RcEfWB/CcSbq4x7FIX2BtRi15o7dc= Here are the emails and the encrypted emails, now can ...
1
vote
0answers
17 views

SSLException: Unsupported record version Unknown-84.84 [migrated]

I'm facing a weird issue on our server that happens intermittently not quite often (once a month) and can't figure it out. I've searched for this and found this thread which is pretty similar to my ...
0
votes
1answer
26 views

Getting multiple key matches on plaintext/ciphertext pairs in double DES

I'm trying to implement a Meet-in-the-Middle attack and just to test it out I've done some hardcoding of values, which is simply this block of simple code: byte[] key1 = new byte[] { 0x20, 0x00, ...
1
vote
2answers
149 views

Is there a way to securely store unsalted passwords?

So, obviously I'm not talking about username/password pairs here, I plan to store passwords with two salts and three hashes, but what occurred to me is that if I had a table where I kept pairs: ...
2
votes
2answers
198 views

My Virgin Media account password is visible in plaintext to call center staff. What do I do?

Whilst on the phone to support staff (about billing) to Virgin Media, perhaps the largest ISP and telecoms company in the UK, I was asked to confirm my password over the phone. I asked the advisor ...
1
vote
0answers
31 views

Is there a solution for On-the-fly-encryption with active directory rules & policies?

I am looking at having our servers' sql databases for a few program and documents to be always encrypted on the HDD, but available to AD users. So one or multiple users with the right AD privileges ...
1
vote
0answers
32 views

How to mount a truecrypt container with noatime? [migrated]

I'm using the TrueCrypt GUI on Ubuntu and I don't think there's an option for specifying mount options in the interface. I want to use noatime, because it reduces writes to the disc. I have seen the ...
2
votes
1answer
63 views

How to send an encrypted mail only knowing the PGP fingerprint?

How does one send an encrypted email with PGP, when he only has the recipient's fingerprint? I am already sending emails using PGP, but I've just pulled a contact's PGP fingerprint who I need to ...
0
votes
2answers
134 views

Is it safe to auto-fill credit card numbers using Chrome?

Is it safe to auto fill credit card numbers using Chrome? Does it safely store the credit card information? As far as my understanding goes, it just shows asterisk values but on click it reveals the ...
0
votes
0answers
46 views

Truecrypt system encryption in legacy mode and UEFI [migrated]

I just recently got my first UEFI board and installed Windows 7 in legacy mode. This new system is encrypted with Truecrypt's system encryption feature but UEFI kind of startles me anyway. First of ...
2
votes
0answers
60 views

Is it possible to do Public Private Key Encryption on a chip (hardware)?

Does a chip exist which will take input data and output encrypted data in a public private key scheme, where the public key is on the chip and the private key is located remotely? The ultimate goal ...
-3
votes
2answers
40 views

AES algorithm encryption time

What is the time taken by an AES Encryption algorithm, with a key of 128 bits, operating on a normal computer (say with Intel i7) and what will be the impact be on the time if I wish to use a 256 bit ...
2
votes
1answer
70 views

UEFI and security implications for encryption

After my old PC kicked the bucket I now own my first UEFI board and I am already having trust issues. I utilized Truecrypt's system encryption for years now and really got used to it. My new board has ...
0
votes
0answers
20 views

2DES vs. two-key triple encryption, with no decryption step [migrated]

So studying double encryption (double DES) and understanding why it is subject to a Meet-in-the-middle attack, I tried to see if the same attack could be applied to a triple encryption with only two ...
1
vote
1answer
31 views

CryptoAPI to CommonCrypto with RC4

I have cryptographic code used in the Windows platform, which uses the Crypto API functions and need to convert this to using Common Crypto on OS X. Essentially the original code is this, with error ...
0
votes
0answers
32 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
-1
votes
1answer
57 views

what is the best security application to check if someone has copied my files with a usb and how to stop that [closed]

I need an encryption application that will detect who has accessed my files from my laptop via a usb and also to help me block memory sticks to access my files and laptop without my permission.
0
votes
0answers
46 views

Encrypted Drive. Forgot password. Remember parts of it. Less than 15 characters [duplicate]

So I forgot my password to an encrypted drive (encrypted via Truecrypt 7.1a) and I remember parts of it. I know that there's "12345" in it and the entire password starts with J. how do I restore it ...
0
votes
1answer
86 views

Is it secure to not expire keys in symmetric encryption?

Note that this question describe hypothetical case, that is never meant to be used in real world. Server communicates with clients with message structure: client_id, initialization_vector, encrypted ...
-1
votes
1answer
75 views

Is this process a secure way for users to login? If so, is there a name for it already?

I thought of this process specifically to stop "man in the middle" attacks and replay attacks: User types their username into the client application. Client application sends the username to the ...
0
votes
0answers
40 views

Is there an encryption scheme that allows an auditor to view some, not all data?

I want to create an online chat room allows for privacy, freedom of speech, and for law enforcement to protect citizens from violent behavior. I think the best approach is to use Shamir secret ...
2
votes
1answer
31 views

Saving Authentication Tokens to Third-Party Websites

So Flickr allows you to authenticate users to your app via app_key and secret and returns an authentication token. I want to securely save that authentication token in my database, but also be able to ...
1
vote
1answer
82 views

Reversing encryption by analysing executable

I have a program that reads data from a file, parses/organizes it, and spits it out as an encrypted XML. The application can also take an encrypted XML and spit out the original file. My objective at ...
2
votes
2answers
107 views

Is it possible to encrypt a download twice, once with a different encryption method?

So without giving too much away, the basics are that I have a board that needs an operating system, so I go to an IPL server to supply that operating system. I have a verifier in the middle and my ...
1
vote
0answers
48 views

JSEncrypt encrypt on client and decrypt on server [migrated]

I am using JSEncrypt to encrypt user's password on the client and send to server to decrypt. I get the public key from the server which I build the RSA Key on the client with Javascript: var leafCert ...
2
votes
1answer
78 views

Security of online storage of KeePass-like files

A common advice for storing passwords is to store them into an encrypted file, for example by using a dedicated software such as KeePass2. To keep this file in sync between several computers, the ...
0
votes
1answer
35 views

How to encrypt or store data so that only a pool of processes can share it on Windows?

I am writing an application T1 which is using SQLite database to store some sensitive data and i am trying to encrypt it securely. The issue i am facing is that i don't want my symmetric key to be ...
1
vote
2answers
163 views

Storing encrypted information in database vs partition encryption

Trying to search for answers like Database encryption or filesystem encryption? but did not found what I need. My database contains confidential information. What is better? To store encrypted ...
1
vote
0answers
9 views

Need Help: How to do XML Element Encryption using JAVA? [migrated]

I have a question regarding Java programing. I have this .PFX file that contain public key and private key public key algorithm = RSA public key format = X.509 Public Key = Sun RSA public key, 2048 ...
0
votes
1answer
21 views

Size of initialisation vector and plaintext in CBC mode

If I have a 16-number sequence (7,7,7,....7), and I need to encrypt this using a simple 4-bit substitution cipher, do I have to "chop" the plaintext in blocks which are of same size as the IV? In my ...
5
votes
4answers
249 views

Which strategy to encrypt data accessed by multiple users?

I need suggestions to design my database architecture (in the context of a web application) on the particular point of its encryption ; knowing that the following elements must be respected: 1- Data ...
3
votes
2answers
263 views

IPhone iOS 8.3 encryption security against physical access

Excerpt from Apple's Whitepaper "iOS Security" on Effaceable Storage: A dedicated area of NAND storage, used to store cryptographic keys, that can be addressed directly and wiped securely. ...
1
vote
0answers
25 views

Possible vulnerabilities in private chat application implemented using web broadcasting

I have never used web-sockets but I am working in a PHP framework which has builtin broadcasting facility. This broadcasting use web-sockets technologies named Redis and Pusher. The workflow of this ...
-2
votes
0answers
18 views

Having a bit of trouble to determine the encryption of a file I'm playing around with

Basically I'm playing around with this file (http://pastebin.com/qJAU3mXD) I encountered a problem. My guess was first a base64 encrypted file, obviously because of the string in between the . and the ...
2
votes
1answer
27 views

Personal cipher/digest preferences ignored when generating a new key pair in GnuPG

I have specified personal digest preferences in my ~/.gnupg/gpg.conf: personal-digest-preferences SHA512 SHA256 SHA384 SHA224 SHA1 then, I have generated a new key pair. But when I check the ...
1
vote
2answers
81 views

I forgot my 7z password [closed]

I used 7zip to encrypt a 200mb archive of my code used a combination of some of 7 possible words and no numbers or caps. So 823543 possible passwords. What is the best free program I can use to ...