Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

-9
votes
0answers
52 views

how to decrypt password which i find from a website? [on hold]

I tried http://md5hashing.net/hash_type_checker all of the hash checker but it shows page not found 404 error. So I am not able to decrypt this. Can anyone tell which type of hash it is ...
0
votes
0answers
14 views

Certificate Validation [migrated]

I need to encrypt some data using the public key certificate available from one of my client's website. My question is aroung certificate validation? How can I validate this online certificate? I ...
0
votes
2answers
37 views

Encrypt database records to be accessed by multiple users

I want to encrypt serialised customer details and store in a database to protect against attacks where the attacker has access to the raw database records. The records then need to be accessible by ...
1
vote
1answer
21 views

Any way to revoke old key pair?

There is a many-year-old 1024 DSA key in the public keyservers under my name. There is a 2048 ELG-E subkey for it. I didn't create these keys, they were created for me by a former employer without my ...
1
vote
2answers
35 views

Does using a MAC for encryption remove the need for PKCS7 padding with this class?

I am working with this PHP encryption class using MCRYPT_RIJNDAEL_256 and MCRYPT_MODE_CBC with a fixed 32-byte (64 character) HMAC key, as my basis. The class is a result of previous discussions and ...
-2
votes
0answers
45 views

Crypted Virus | Extension spoofing [on hold]

We all know what a virus is. We all know what an anti-virus is. Most of us know what a crypted virus is. I am referring to the encryption of a virus which is used solely for bypassing anti-virus ...
0
votes
0answers
22 views

What speed should I expect to get from an rc4 file encryption program [on hold]

I've made an encryption program for my a-level computing project, it uses the rc4 stream cipher to encrypt files, what sort of speed should I expect from the program I have written in c#? I currently ...
-3
votes
0answers
54 views

How can I demonstrate data encryption? [on hold]

i am asking that in WPA-2 they used aes-ccm algorithm in that data encryption with ctr mode before that for data integrity cbc-mac algorithm used for mic tag then with that we encrypt data and send to ...
1
vote
1answer
24 views

Can a PKCS12 file be distributed over insecure channel?

Is the PKCS12 only as secure as the password protecting private keys ? Can I distribute the p12 file over an insecure channel ?
0
votes
1answer
20 views

How does LSARPC protocol work?

I'm trying to understand how does the LSARPC protocol work internally. In particular, I would like to know how secured is it. I couldn't find anything in the internet or in different books.
0
votes
0answers
15 views

JCE Unlimited Strength Jurisdiction Policy Files 8 [on hold]

What I know is that, this jar file is needed regarding some issue with the encryption key while encryption or decryption. Can some one tell what are the countries where we can't use this jar file? ...
-1
votes
1answer
99 views

Gmail disclosing your account name to recipients? [on hold]

My Gmail setting has forever been set to send emails with just my Gmail address as the identifier, so it should not send out my account name (first or last name)... or so I thought! Recently I got a ...
0
votes
1answer
72 views

Using AES in CTR for TCP/IP based network connections - need to encrypt the IVs?

For AES based encryption on TCP/IP connections, I am guessing I have to do the following: Have the 2 parties share a common key, assuming I am doing AES-128 then a sequence of 16 bytes. Ideally the ...
0
votes
0answers
60 views

Will current encryption always remain secure? [on hold]

Current encryption algorithms, such as AES, RSA, elliptic curve, etc. work based on known mathematical problems. I am specifically interested in the RSA. Will such security always remain secure? One ...
0
votes
0answers
23 views

Synchronizing secret codes on two different devices? [duplicate]

I was reading an article about how keyless entry systems for automobiles prevent people from recoding the signal and replaying it to open someone's car. In the article they describe the process as ...
1
vote
1answer
50 views

Encrypting files securely using user supplied password

I'm currently trying to build a (sort of) secure, desktop based RTF text editor written for node-webkit using node.js. Based on some answers that I read here, such as How can I securely convert a ...
-1
votes
1answer
26 views

DNS leaks using tor with instant messanger [closed]

What does it mean for me? When i use Jabber with tor will my ISP see to which jabber server i am connecting ? In that case only DNS crypt would help or VPN, right? I got the impression using DNS ...
-2
votes
0answers
32 views

Assignment on two factor key authentication in cloud system [closed]

I am doing a assignment on two factor key authentication in cloud system. but I could not find any white papers related to this. Its grateful if you can provide some notes or sources related to this ...
1
vote
1answer
103 views

Encrypted quiz data in PHP and JS

I'm developing a quiz with which you can win a few cool prizes. Therefore I'm afraid, that someone might try to hack/manipulate it. All participants have to be logged in and the website takes 15 ...
2
votes
2answers
97 views

High level design for secure web application

I'm looking for some advise on designing a secure web app for storing passwords. Why reinvent the wheel? Because I don't trust a 3rd party with all of my passwords. Here are my thoughts: There are ...
2
votes
1answer
37 views

poodle attack/padding oracle attack

According to wikipedia or https://www.us-cert.gov/ncas/alerts/TA14-290A this is an issue with the SSL v3.0 non deterministic padding used in CBC. Is AES in CBC mode itself is un-secure or it is an ...
1
vote
2answers
74 views

Storing lots of passwords that different levels of employees need access to

I am wondering what other people do for storing passwords. Our current model at my employer is fundamentally flawed in my opinion, so I am trying to see what other people do so I can select the best ...
0
votes
1answer
45 views

PGP Key publishing on MIT PGP Public Key Server [duplicate]

I have a public pgp key, so that users can send me an encrypted message. Ofcourse, any user that wants to send me a message, wants to verify that the public key (s)he has, really belongs to me. From ...
0
votes
1answer
71 views

Two-factor encryption model [closed]

Please some on help me to understand this "Are you ready for this? With the two-factor encryption model your data is protected two-fold. First, a unique key is generated, encrypted, and turned into ...
0
votes
0answers
26 views

Android FIPS capable project [closed]

I want to create an Android FIPS Capable app (140-2 level 1). In the app I use network communications (Android SDK, HttpClient), encryption (bouncy-castle) and GCM (GooglePlayServices). How can I do ...
0
votes
0answers
31 views

I forgot my ZIP file password. How do I bypass the encryption? Which software would work? [duplicate]

Should I use brute-force attacks? Do they even work? What options do I have? I only remember short fragments of the password and it's definitely more than 7 characters long.
2
votes
3answers
1k views

Store password locally. Where? How to pass it securely?

I'm developing an application. The user must enter his credentials which will be sent to the server. If the user opens the application a second time he shouldn't need to enter them again - credentials ...
6
votes
4answers
205 views

How to communicate securely

What is the proper way for two parties, say A and B, to communicate securely where: Communication between A and B must be secure so that only they know the content of the communication. A isn't ...
0
votes
2answers
70 views

Is it safe to store encrypted volumes on cloud syncing services?

A recent discussion on another website prompted a proclamation that storing (TrueCrypt, LUKS, DMG, etc) on cloud sync services like Dropbox is unsafe, since a version history is kept of each file, and ...
0
votes
3answers
218 views

How to trace the owner of a computer by mac address

I was given the mac address of a computer that was on my wifi . It was not my computer. There were 2 computers, mine plugged to the modem and a 2nd computer with different mac address than mine. So I ...
0
votes
1answer
37 views

Looking for a way to encrypt/decrypt data using a generated key that works in Windows and Linux

I am looking for a way to encrypt/decrypt data on windows and linux platforms. The data gets encrypted in windows and the same data needs to be decrypted on linux/windows and vice versa. I understand ...
-1
votes
1answer
50 views

Is it really worth to spend time on Telegram Crypto Contest? [closed]

Telegram is running this crypto contents. But what I heard from some people on the web is that they designed the contest in such a way that they made it practically impossible to crack. Is it really ...
1
vote
1answer
65 views

Is it safe to combine AES with TLS?

Given that two clients want to sync data through a server, is it safe to use AES to encrypt the data and TLS to communicate with the server? Assumptions: Server has never access to unencrypted data ...
0
votes
2answers
162 views

Is an >=2048bit key with Asymmetric encryption secure enough to negotiate a Symmetric encryption key?

Let's say that a client app already knows the public key of the server to which it needs to communicate with and the client app needs to connect to the server using a normal non-secured internet ...
0
votes
1answer
32 views

Encryption and unique id [closed]

Why not encrypt all confidential, sensitive and borderline data? Why not use a fingerprint ID system as the private encryption key? Why not use a fingerprint and/or other unique identifier such as ...
4
votes
4answers
603 views

Effects Of Encryption On Computer Systems

I am currently writing an essay and one part is a discussion about the effects of encryption on an Operating System/Computer/Infrastructure in general. However, I am struggling to see how a computer ...
3
votes
1answer
121 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
0
votes
0answers
23 views

Has Stackfield been security audited and is the metadata safe?

It appears that Stackfield is one of the only functioning applications that combines end to end encryption, messaging services and file sharing. Peerio has just been launched (literally a day or two ...
6
votes
3answers
701 views

How to encrypt all existing customer passwords [closed]

I work for an online shop and since I worked here we have stored customer passwords in plaintext. I joined the company as a data inputter and when I discovered that we did this I flagged it up with ...
1
vote
0answers
40 views

For use with RC4 how do I combine a reused key and an initialization vector

I am an a-level student writing an encryption program using an rc4 implementation I have written myself. I have the basic algorithm coded correctly (and I have checked that some ciphertext for a given ...
1
vote
0answers
49 views

Hashcat, finding out the Hash

I've been searching but I can't seem to find the much information on how to extract hash's from say PDF files or Lotus Notes files that I can then use in Hashcat? I know how to get them for Office ...
31
votes
3answers
4k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
2
votes
0answers
42 views

How to securely store application data on mobile device

How can security be enhanced to the maximum in a messaging app storing messaging history on the device (like whatsapp)? I am specifically referring to methods to minimize the risk of the data being ...
2
votes
0answers
96 views

Has the POODLE SSL vulnerability ever actually been used?

Is there any evidence that the the POODLE SSL or TLS has actually been proven to be a risk for file transfer like SecureFTP etc...? ...or is it just a theoretical exposure?
23
votes
4answers
3k views

How do I verify that WhatsApp is using end-to-end encryption?

Slightly old news: Whatsapp Just Switched on End-to-End Encryption for Hundreds of Millions of Users Is there any test that I can perform to verify that WhatsApp is indeed using end-to-end encryption ...
5
votes
2answers
487 views

Security of Linux Full Disk Encryption (Ubuntu / Mint) -insecure?

I'm wondering, why is Ubuntu and Mint using SHA1 for Full Disk Encryption? I heard several times that SHA1 shouldn't be used anymore because it is weak and it could be cracked. Could you guys ...
1
vote
1answer
88 views

Microsoft Bitlocker - Using my own encryption/decryption key

Is it possible for me to use my own encryption or decryption key and update it whenever is possible?
-1
votes
0answers
41 views

Verify the security, encryption of VPN

We build the network as below The VPN server was built on CentOS and two PCs use windows 7. All three were built on VMWares. We want to check the encryption of the data so we use Wireshark to ...
1
vote
2answers
146 views

Overkill or appropriate?

I have come across a web application that a company has asked me to rebuild. After all the implementation is said and done I will deploy on a private server, and the database will be on its own ...
1
vote
1answer
43 views

How do you practically manage your never-use-personal-accounts-on-a-work-machine-ever double life, when your personal machine is a limited iOS device? [closed]

This is follow-up to Starting a new job after working at home for years. How to best protect data, secrets, and privacy in the workplace? The answer to that question is Follow company security ...