Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
23 views

Python implementation of AES and SHA256/512 that are FIPS-140-2 validated?

For security purposes I need to use AES encryption and SHA256/512 in my Django/Python project. I know there are various libraries out there that provide different encryption methods but I can't seem ...
0
votes
2answers
95 views

What is actually the purpose of encrypting the values in a cookie?

I was researching on internet security. When I reached at section Cookies, I happened to read that the values inside a cookie are generally stored only after encrypting them. But an encryption can be ...
-1
votes
0answers
24 views

Voice chat servers [on hold]

Hello security people. I have configured a xmpp server for chat(just text). I am planning on having a voice version. I am using ejabberd and i have heard about jingle but the only implementation i ...
0
votes
1answer
52 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
21
votes
3answers
2k views

Tell people that I can encrypt emails

I know that it is still not very easy to use PGP for an average user. However, the situation is improving (there are some easy plugins that can even nicely integrate into your GMail webmail). In ...
1
vote
0answers
29 views

Android support for TLS 1.1

Do anybody know from what version of Android did TLS 1.1 started to be supported directly by the OpenSSL version preinstalled in the system?
0
votes
0answers
27 views

Which Application is best for Data Encryption + Cloud (OneDrive + Google Drive) Encryption [on hold]

A client of mine needs an application that can work primarily as data security + encryption. Most of their files are stored on cloud platforms like Google Drive and Microsoft OneDrive and they also ...
2
votes
1answer
60 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPSec. Is that more secure or these types of encryption have nothing ...
0
votes
0answers
28 views

Pull email encryption solutions (portal) [on hold]

I hope I am in the right place... I am trying to understand whether two particular features are typically available when using a portal email encryption solution. I appreciate that not all providers ...
0
votes
2answers
96 views

How do I know that my connection is really encrypted?

I am using a VPN to ensure to encrypt my browsing. I wonder though if I could check somehow if the datastream really is encrypted?
1
vote
2answers
138 views

Opinions on my “Encryption at rest” implementation idea

Ok so basic overview of the environment I'm envisioning: Webapp w/ db backend storing sensitive data, possibly phi; standard user:pass auth due to unteachable users. My idea was to encrypt row data ...
0
votes
0answers
30 views

Self-signed certs /keys stopped working with Thunderbird upgrade [migrated]

A recent Thunderbird release (somewhere between 27 and 31) broke my self-signed CA's which were used to vouch for my self-signed keys. I use self-signed certificates for communicating with family. ...
1
vote
1answer
70 views

What network protocol is Crashplan using?

I have been using CrashPlan for a while internally (i.e. local backup server). I would also like to setup off-site backup but my experience is that I have to forward a port from the router sitting at ...
12
votes
2answers
546 views

How Does A Random Salt Work? [duplicate]

I don't understand how using a random salt for hashing passwords can work. Perhaps random salt refers to something other than hashing passwords? Here is my thought process: The salt is used to add ...
3
votes
2answers
65 views

Link Layer authenticated encryption vs authentication

Many security articles discuss about adding an extra layer of security at the link layer by either authenticating the data at the link layer authenticating and encrypting it. If we have ...
0
votes
0answers
13 views

gpg2 - no option to select aes block cipher and outdated use agent? [migrated]

With OpenSSL, I can select a what type of block cipher to use for encrypting a file. For example, if I want to encrypt a file with AES256 CBC block cipher mode: openssl aes-256-cbc -a -salt -pass ...
2
votes
1answer
89 views

Storing a user's password in a retrievable manner

I currently store my users passwords as PBKDF2 hashes, for the authentication part of my web application. Each user also has their own private key and public key (also stored in their user profile in ...
0
votes
0answers
65 views

Cloud security? Boxcryptor? [closed]

so far I was using TrueCrypt to encrypt important private files which are stored in my Clouds, e.g. in my Dropbox. This solution works but its usability is...well...not the best ;) You have to unmount ...
0
votes
1answer
277 views

Can eavesdropping be facilitated by injecting content that will be transmitted?

I was asked during a job interview the following question, to which I couldn't find an answer then, and this thing is still bothering me. I was hoping someone might know the answer here: Consider ...
-1
votes
0answers
163 views

Question I was asked during a job interview [duplicate]

I was asked during a job interview the following question, to which I couldn't find an answer then, and this thing is still bothering me. I was hoping someone might know the answer here: Consider ...
1
vote
2answers
49 views

If TLS compression is not supported is a site still vulnerable to attacks such as BREACH?

I have read that BREACH was a side channel compression attack against TLS however focuses on HTTP response compression. If a site has disabled support for TLS compression does that still mean it can ...
5
votes
1answer
249 views

BitLocker Password Change

My team at work was recently working on encrypting some hard drives using Microsoft's BitLocker on Windows 7 hosts. The initial encryption for the 2TB drives took several hours to complete. This is ...
0
votes
2answers
87 views

mac adress encryption

I am a student of information technology and I am doing a project on avoiding MAC spoofing by using MAC encryption. My goal is to encrypt the MAC address inside the packet and send that packet to the ...
2
votes
1answer
84 views

How effective is Opera Mini's encryption? Can it hide activity on a WiFi network?

I'm curious since I discovered the nature of how browsing works in Opera Mini. A URL request is sent to Opera's servers, they download the page then compress it to lower bandwidth. They use a file ...
0
votes
0answers
35 views

SFTP without tunneling? [migrated]

I am using WinSCP 5.5.5, which gives the user the choice of FTP, SFTP, SCP protocols for remote access to website files. I chose to use SFTP. My questions (indicated in bold numbers): 1. My ...
0
votes
1answer
39 views

Secure communication End-to-end with android and Server

I´m building a enterprise application and I need to create a secure communication between android and a server. What is the most secure way to do End-to-End communication? Should I use HTTPS or VPN? ...
-1
votes
1answer
100 views

Is there a benefit to encrypting a file multiple times? [duplicate]

If I had to store a text file with some confidential information on the cloud, would encrypting the file multiple times (say, 3) with different passwords using WinRAR (AES with a 256 bit key) provide ...
13
votes
3answers
5k views

Can Cryptolocker (Or Other Ransomware) Encrypt Files That Are Already Encrypted?

If you have already encrypted files, are they still vulnerable to being encrypted a second time by a program like Cryptolocker, or would this protect them?
17
votes
5answers
1k views

Why is security through obscurity not a good option for encryption? [duplicate]

I feel like there must be a simple explanation, but I've been looking around haven't found any wholesome answers. Take for example my name is Alice and my best friend Bob and we want to communicate ...
1
vote
3answers
97 views

Encrypting a huffman encoded file

I wrote a huffman encoding program that can compress and decompress files. The file contains a header which contains information that allows me to retrieve the huffman tree. I wanted to add a simple ...
2
votes
1answer
123 views

Is it possible to design a system where the client doesn't have to trust the server?

When you are using services like chat, file sending, exchanging etc., you always have to trust server providing these services. The only way to use services without having to trust third party is to ...
-3
votes
1answer
33 views

Which encryption technique should be used for users name and passwords in my notebook [duplicate]

i writing all my passwords and users names on my notebook emails,amazons,facebook. and i have really Nosy little's brothers that will probably look at my notebook when i am not around, which ...
1
vote
2answers
92 views

Which encryption technique should be used for cloud computing data transfer?

I want to setup my application for cloud computing for Software as a Service. There is going to be a lot of data transfer between my server and client, to and fro. The technique I have envisaged is: ...
6
votes
1answer
203 views

How could a system be zero-knowledge?

I'm actually interested about zero-knowledge storage system. Those system where the storage provider claims he can't have any access to the data stored. As far I know, the data are encrypted using a ...
0
votes
1answer
34 views

Forward Secrecy not supported with referenced browsers?

I am running a scan against one of our servers from the Qualys SSL tester site and it says that my server "does not support forward secrecy with the referenced browsers". What exactly does that mean? ...
2
votes
2answers
138 views

How can I secure the secret key?

I am a bit confused about securing the secret encyption key. Here is the scenario: I need to encrypt some data (file) This data will be read by a program (say written in C/C++). Both the program ...
2
votes
1answer
77 views

How does Mylar ensure encrypted data remains secure even if the live app code is compromised

Because Mylar does the decryption in the browser, the key is never stored on the server. Nice. This moves the threat to the browser, where, if the attacker is able to get a malicious script to be ...
1
vote
1answer
23 views

updatedb and encrypted home folders: Does it store unencrypted file and folder names somewhere?

When you encrypt your home folder in Ubuntu and Debian, it protects not only the file contents but also the file and folder names. Yet I see that updatedb and locate works in Debian. When I run ...
0
votes
0answers
22 views

Possible CPA or CCA attack when using AES-CBC mode under the following situation?

Both client and server know a shared key in advance. Both sides us EVP_BytesToKey() derive a pair of same key and same IV. Then, client and server start transferring data encrypted by AES-CBC mode ...
0
votes
1answer
32 views

encrypted lookup-keys for key-value store

I'd like to use a key-value store (cassandra, redis, ...), but I don't trust the server. The clients have a shared secret, and I'm using that to encrypt the stored values. But what is the proper way ...
1
vote
3answers
376 views

Protect database data from everyone, including sys admins, etc

One of the things that has always bothered me about simple database data encryption: If the server is compromised, the database is effectively compromised. The attacker can use the same code as the ...
0
votes
1answer
61 views

Encrypting folders with flash drive key?

Is there any way to have a flash drive encrypted and it will only open with one computer that has the key in it?
2
votes
2answers
119 views

How can I secure my api to avoid copying?

Im building an app which should receive data from my server. The Api should be a PHP based script which provides the data as JSON. However I want to keep the data private and it should only be ...
0
votes
0answers
49 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
0
votes
1answer
57 views

How are TLSv1.0 ciphers negotiated as TLSv1.2?

I'm a little confused about something I am reading in Bulletproof SSL. "TLS 1.2 is the only protocol that allows suites to define their PRFs. This means that for the suites defined before TLS 1.2 ...
0
votes
0answers
21 views

Encryption test failed [migrated]

I am facing a problem when attempting to send an encrypted email via Enigmail (Thunderbird) in Ubuntu 14.04. I was following the Email Self-Defense guide https://emailselfdefense.fsf.org/en/ ...
1
vote
2answers
69 views

Are digital signature algorithms subject to the same types of attack as public-key encryption algorithms?

I understand that digital signatures are usually implemented by encrypting a message digest with a private key, decrypting the resulting signature with a public key, and verifying that the message ...
0
votes
2answers
56 views

ECDSA ciphers and forward secrecy question about key exchange

I have heard that with forward secrecy that the ECDSA ciphers generate different keys for "each session" because they are not dependent on the private key of the server. My question is how is "each ...
48
votes
6answers
13k views

Can my IT department read my Google Hangouts chats while at work?

Is Google hangouts encrypted? Would my work's IT guys be able see pictures and text I send while on a work computer? Yes I know I shouldn't be sending stuff I don't want them to see while at work, but ...
2
votes
1answer
40 views

Possibility of using CA as an attack point by governmental organizations under their pressure

I was always concerned about the model of trust behind CA stuff we use . Well, for most of us, it is OK to trust them, since they are reliable organizations with a bunch of solid experience. ...