Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

2
votes
0answers
7 views

What are the strenghts and weaknesses of Whirlpool Hashing Algorithm

I want to find out if the Whirlpool hashing algorithm have any weaknesses. There are quite a bit of articles explaining the strengths of this algorithm, but for some reason I cannot find any on its ...
0
votes
0answers
42 views

Cellular encryption algorithms currently in use globally

I have been doing research on the available encryption algorithms used by commercial mobile providers worldwide, and would like to know if the following list is complete: A5/1: the "original" ...
7
votes
5answers
1k views

Why is being able to login with capslock bad?

I recently discovered a service where the password was not case sensitive. I understand basic principles of encryption and hashing so I am a bit worried, is this service storing my password in plain ...
2
votes
2answers
102 views

MD5 brute force on a faulty hash?

MD5 for passwords is considered insecure due to the ability to brute force and pick up the result. But what if I change some characters of an MD5 hash and I keep a record of that change so that ...
-1
votes
1answer
27 views

Unknown encrypted hash [on hold]

Does anyone know what kind of algorithm was used to encrypt these 2 strings? iKyJRiOfJcFUGP9n1OrC1Q== DdgItpIgpYw= Is there any way to decrypt them?
0
votes
0answers
57 views

Is TrueCrpyt still safe, or is VeraCrypt the better option now? [duplicate]

I know that TrueCrpyt stopped updating a while back and it has a warning saying that it may not be safe due to unpatched security issues. I have a version of windows with Bitlocker, but the fact that ...
2
votes
1answer
43 views

Does the server certificate control the cipher suites available to secure the communications?

If a CA signs a certificate with a SHA1 signature hash algorithm, does that mean a client would be unable to communicate with the server if TLS 1.0 and below is disabled? I think what I'm asking is ...
0
votes
2answers
355 views

What current algorithms are considered (un)secure? [on hold]

With the new release of Windows 10, Microsoft has given .NET, Javascript and C++ developers a whole new bunch of options for cryptographic algorithms. Where as the old .NET code only allowed AES and ...
0
votes
0answers
31 views

Vecracrypt Outer Layer shows incorrect free space thus giving away the hidden layer? [on hold]

I just tried the veracrypt hidden volume for fun today, I was interested in how it works. I used the encryption on an old 2TB HDD, copied some files on the outer layer and then mounted both volumes. ...
0
votes
0answers
83 views

CryptWall virus attack [on hold]

Is there something new about any solution to decrypt all my files that are infected with the CryptWall virus? All my files have extension *.abc.
0
votes
0answers
36 views

End to end encrypted calendar [on hold]

What end-to-end encryption options exist for calendars? I am looking for a way to efficiently encrypt and store calendar entries myself (so not relying on Google calendar etc). For email there is for ...
4
votes
1answer
78 views

Is encrypted data a good random source?

Given that someone needs my encryption key to predict the output, can I encrypt arbitrary data (zeroes, system logs, personal photos) with AES and a secure passphrase, and use the result as a ...
2
votes
2answers
73 views

SSL stripping in home network

I am trying to monitor the traffic of some "smart devices" in my home (TV, coffee machine, ...) but most of them communicate over SSL. What possibilities are there to look into SSL encrypted ...
4
votes
2answers
62 views

Understanding Digital Certification as as a whole starting from a normal http request

I am very new to security and i do not come from an IT background. Please pardon me if i ask some very simple and questions that don't make sense. I am trying to understand the difference between ...
-1
votes
0answers
17 views

Is 3DES is a weak cipher? [duplicate]

Our application runs on JBoss 6 + jdk 1.7. We use the jdk provided SSL provider. The server.xml file contains SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA in the cipher lists. Is it a weak cipher? Should we ...
4
votes
1answer
81 views

How can I demonstrate that 3 independent root CAs validated my domain?

I am concerned about the hacking of a root CA and want to buy 3 SSL certs from completely different providers who will independently validate my identity. Then at presentation time, I will send all 3 ...
1
vote
3answers
127 views

securely storing passwords that can be retrieved

I'm trying to build a web application that can store passwords of other services like Facebook, Gmail ...etc. These passwords can be later retrieved and shown to the user. This has to be a web ...
0
votes
0answers
12 views

Proving an encrypted message contains (but does not 100% consist of) a plain-text message? [migrated]

I have keypair (u,r), and two pieces of data, X and Y. I reveal X publicly but keep Y secret. Y has high entropy. I then combine X and Y, into c(X,Y) = Z. I encrypt Z, into "encrypt(Z,u) = Q". r ...
-1
votes
0answers
38 views

Is it possible to create multiple hidden volumes within an encrypted volume? [migrated]

You can create an encrypted hidden volume from an outer encrypted volume within Truecrypt or it's fork, Veracrypt... but is it possible to create more than one hidden volume within an outer encrypted ...
-1
votes
0answers
75 views

PHP crypted or hashed string to decode

I have a problem for captcha solve in 3 days. This is crypted or hashed captcha cookie 55debbcf069c81440660431 23 characters long. I found last 10 character is 1440660431 timestamp. I think first 13 ...
0
votes
1answer
53 views

Should I make my api calls to update users contain a password or hashed auth key?

So Im creating an API for an app that in the backend involves updating users, deleting users, and some other user related stuff. Im using the slim framework and I was wondering when the user wants to ...
3
votes
1answer
92 views

Exchange encrypted messages on public chatroom

Not so long ago, I was chatting with a friend on our university's accounts, and the discussion went to an interesting subject: what if the administrators have access to our messages? So we had the ...
4
votes
2answers
87 views

Is encryption possible for simplex (one-directional) TCP/IP, and if so, how?

As explained in the TCP/IP Guide, it is possible to configure TCP/IP to operate in simplex mode and this mode is utilized, among other things, in communication from satellites. One consideration with ...
0
votes
1answer
77 views

“If encryption has not been implemented, a comparable alternative has been implemented” [closed]

What constitutes as a comparable alternative to encryption? I know that password keepers and other services are not comparable and are not considered encryption. If the context is authorized access ...
0
votes
1answer
41 views

Locking down Amazon RDS table data

We are using MySQL Amazon RDS. The instance is encrypted, and also only available via SSH from the production server EC2 instance. One of the things we are trying to do is give access to some ...
1
vote
1answer
27 views

Envelope Encryption with asymmetric keys vs KMS

In Envelope encryption a symmetric secret key is used to sign the data and then another key is used to encrypt the secret to produce an encrypted secret key. The encrypted messages is packaged with ...
-3
votes
1answer
67 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...
0
votes
1answer
58 views

Impact of sharing the private key with a third party for snooping SSL traffic

I am trying to understand the impact of sharing the private key with a third party for snooping SSL traffic. Below are my thoughts, please correct and add if some more impacts are there: One clear ...
1
vote
2answers
74 views

Building an anonymous network

Imagine you're building Facebook, except you don't want to reveal user identity for posts and comments. You still want to verify each user's organization. For example, if the user signs up with ...
1
vote
1answer
73 views

What will happen to decrypt a tampered message encrypted by a symmetric key

There is a message M, it's encrypted by a symmetric key like Y=E(K,M). The message is sent to B from A. During the transportation of message M, if the message is tampered by C, then when B received ...
1
vote
2answers
70 views

Are ServerHello, ClientHello, ServerKeyExchange messages encrypted

In process of SSL handshake, several message like ServerHello, ClientHello, ServerKeyExchange messages are exchange before the actual encryption starts. Are these messages encrypted? If not then ...
0
votes
3answers
205 views

Is there any way to securely hide data on physical media?

In the recent years I've gotten more paranoid of spying and hacking, so I've encrypted most of my important files just in case. Tax information, some company confidential information, account logins, ...
2
votes
1answer
88 views

OpenVPN username and password authentication only - unsafe?

Is it safe to only use username and password (and server certificate) for OpenVPN connection authentication? Are username or password ever transmitted in plaintext to the OpenVPN server? I found a ...
2
votes
1answer
75 views

Communicate through gpg

I need to frequently communicate with a server in the manner do stuff related to x or send me info of x My thoughts are to directly put the task I want to be executed into the package I want to send, ...
-2
votes
0answers
26 views

Any idea what type of encryption this is? [duplicate]

I can't seem to find out what this is, I am a newbie at this stuff. 81n5q574po4p977srqo89960000sp14n
0
votes
0answers
38 views

Why isn't a table used to solve the large number factoring problem? [migrated]

Lots of modern encryption (RSA comes to mind) are based on the fact that factoring large numbers is hard. However, multiplying large numbers is much easier, and table lookups are very easy. Since ...
1
vote
1answer
65 views

Determining whether a local area network is encrypting information in transit

My computer is connected to a switch. Numerous other network devices are also connected to the (local) switch. Is there a simple way of determining whether the connection between my desktop and ...
-2
votes
1answer
88 views

How would I encrypt something like this; [closed]

I want to encrypt some very important passwords in a text document or something like it. What would I use to ensure maximum security.
3
votes
0answers
43 views

GPG subkey layout. Separate keys for C, S and E?

I've been reading up a lot on GPG recently. This page describes how to setup so-called "laptop keys". The idea being that if you lose your laptop, or have it stolen, your primary certification key, ...
0
votes
0answers
32 views

Triple-DES DUKPT CBC PIN variant vs Data variant

Does any know the difference between triple des dukpt decryption algorithm with PIN variant and Data variant? I have done Triple DES DUKPT PIN variant, which generate session key from KSN and BDK. ...
0
votes
2answers
75 views

Encryption in case of distributed architecture

I have application infrastructure as follows - web client -> load balancer -> Apache (web server) -> Weblogic (application server). I could understand that in case of HTTPS request, SSL handshake ...
-4
votes
1answer
41 views

How to find an encryption algorithm between two hexadecimal numbers? [closed]

I have several numbers that are generated by a server. They are 16 digits long and are hexadecimal. I have no idea whether or not any salting or hashing techniques were used. Can I find the encryption ...
0
votes
0answers
35 views

Performances of dm-crypt vs. ecryptfs

The only information I found about the difference of performance between dm-crypt (LUKS mode) and ecryptfs is that given that ecryptfs operates at filesystem-level, it may be slower when doing ...
-1
votes
0answers
44 views

How to ensure message integrity for ciphers created via RSA algorithm [migrated]

In order to send a message over an unsecured channel I have to first encrypt the data using the RSA algorithm. The implementation I use is the javax.crypto.Cipher in Java 7. I'm aware of chosen ...
0
votes
1answer
121 views

Does CryptoWall needs a internet connection to encrypt my files?

Does CryptoWall 3.0 use some resource on the internet to encrypt my files? I watched this video on YouTube - in this video a tool is used to sniff network traffic and find information about ...
1
vote
2answers
178 views

Encrypt data stored in a database

I recently talked to a potential customer who wants to build up a database which contains fairly sensitive data. One of her key requirements is, that the data storeed will be encrypted in a way that ...
0
votes
1answer
120 views

How safe is it if encrypted text is exposed?

I know that it is considered safe if both encryption algorithm and password are safely hidden. However, what if the attacker knows that there can only be a number of algorithms used. So how safe is it ...
5
votes
2answers
155 views

Are the GET values also encrypted/secured by SSL?

For example we submit a form on the following site: https://example.com (SSL Encrypted) Then the form is submitted as GET method, so it becomes like this: ...
2
votes
1answer
115 views

Is it safe to use a 4-digit PIN for Android system encryption?

I just encrypted my Android phone using the default menu. I was asked for a PIN code (4 digits). Do you think this is a good practice? Is there a limited number of attempts at decrypting the ...
0
votes
0answers
22 views

How to do secure file transfer on windows with AD?

I have a requirement to serve files from a windows 2008 (and up) server that will be part of an AD domain to client machines that will also be members of that same domain. The requirements are as ...