Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
3 views

Is it OK to seal data to TPM SRK directly?

In reviewing various TPM programs and libraries, I have noticed that when sealing data to the TPM, a new key is always created (wrapped by the SRK), and that new key is loaded and used in the seal ...
2
votes
0answers
27 views

Why one must use encryption, and not a cryptographic hash, to store biometric information? [duplicate]

Why one must use encryption, and not a cryptographic hash, to store biometric information? I am not sure why encryption must be used to store biometric information.
0
votes
1answer
23 views

Is there a 'key space' equivalent for encryption keys?

If a key space is the term given to the collection of all possible decryption keys for a given cryptosystem, then what is the collection of all possible encryption keys called?
0
votes
1answer
43 views

Covert, Overt, and side channels

I am really confused between the following three terms: Overt Channel. Covert Channel. Side-Channel. I feel frustrated! I've been searching about them to find a clear explanation but I keep ...
0
votes
1answer
26 views

Deciphering data in cloud by a specific group

I need to encrypt some data and send it to cloud to be seen by a group. I don't know how to include the group characterization to let just group's members decrypt the data. Also, I want to know how ...
0
votes
0answers
4 views

Question about Keeloq [migrated]

I have a question about Keeloq security. I have a original remote (BFT Mitto 2). I know this chip used HCS301 with Keeloq implementation. I would like to clone this remote for my girl friend because ...
7
votes
1answer
68 views

Is a 43 character GPG (symmetric) passphrase as secure as a 256-bit key?

A 43 character securely randomly generated mixed case alphanumeric password (with 2 extra chars to give 64 possibilities per character) would constitute 258 bits of entropy (6 * 43 = 258). Since the ...
4
votes
1answer
50 views

Where should I store OAuth2 access tokens?

I am building a REST API back-end, for a mobile application. In our design choice, we decided to let OAuth2 providers handle the login security. However, I am not sure what the best practice is for ...
0
votes
0answers
33 views

DSS digital signing approach

Under the DSS approach to digital signing, what is the advantage of using two pairs of keys for each signature?
-4
votes
1answer
59 views

How to encrypt/decrypt with only encryption hardware?

Alice and Bob have agreed a symmetric key to be used for encrypting messages to be sent over an insecure (wrt a passive adversary) communication channel. Both of them have hardware devices for ...
3
votes
0answers
90 views

Can I make a digital time capsule? [on hold]

Say I wanted to make a super awesome time capsule of some digital information. How would I encrypt it so that no one would be able to open it until a specified date? (E.g. 100 years from now.) At ...
0
votes
1answer
24 views

Secure Electronic Transaction (SET Protocol)

I've looked into the SET protocol and some of the information are outdated. Therefore, I would like to ask if the SET protocol uses 3DES or AES or just the DES and the RSA?
0
votes
0answers
15 views

Is cryptsetup luksFormat -y --cipher aes-xts-plain --key-size 512 /dev/sdax a insecure setup for luks [duplicate]

Is cryptsetup luksFormat -y --cipher aes-xts-plain --key-size 512 /dev/sdax insecure. If so why and what setup would be good for keeping corporate information safe?
-6
votes
0answers
50 views

how to decrypt it on RSA encrypted message? [on hold]

You must decrypt the following RSA encrypted message, the thing is you only got public key :/ which is as following ...
0
votes
1answer
36 views

Timing side-channel attack example

I understand that timing side-channel attack is a measurement of time taken to execute cryptographic algorithms. I'd like to see a simple example that explains how timing attack takes a place on any ...
1
vote
1answer
23 views

Stateless AEAD (AES-GCM) based tokens

I want to generate secure data tokens which can be shared with the client for uses like password reset, etc. which involves low storage overhead at server end. Ideally I am interested only in managing ...
-1
votes
0answers
87 views

How secure is Veracrypt/Truecrypt with a 60 char password?

I have a 10gb drive encrypted by Veracrypt with a 60 char password. If someone gets their hands on it how will it a skilled attacker to crack my password? The password has around 30 characters of ...
30
votes
4answers
6k views

Is there an encryption algorithm that is fully secure?

Is there an encryption algorithm that is completely secure and isn't based on difficult computational algorithms? If such an algorithm exists, why we don't we use it in SSL/SSH?
4
votes
4answers
197 views

How can using multiple laptops improve security?

My being an admirer of Edward Snowden I've read several books about him. In each book and article there was said that he used four laptops in Hong Kong. Not for storing the documents, but because it ...
1
vote
2answers
57 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
-3
votes
0answers
52 views

Any good phones that are ideal for whistleblowers or hackers? [closed]

I'm looking for a phone that I can use to communicate with a team of hackers or whistleblowers. Would a blackberry be a good option? I preferably want like an android or smartphone.
1
vote
1answer
43 views

What password based key derivation does PKCS #12 use?

I would like to make a note that I have read all of rfc 7292. I am trying to decrypt encrypted private key in a pkcs#12 pfx file. The private key is enveloped within pkcs#8 shrouded key bag. The ...
1
vote
2answers
53 views

plain FTP (no encryption)

Person A want to send important excel files to Person B using plain FTP (no encryption). Person A says the "issue with private key encryption is that its tough to maintain across the company. Sharing ...
-2
votes
1answer
84 views

Turning hex string into readable chars [closed]

I have this blob of hex data which can be found on https://www.reddit.com/r/codes/comments/421xek/can_somebody_help_me_decode_this_blob/ and I am looking to turn it into ...
2
votes
2answers
99 views

Is encrypted cookie without authentication secure enough?

I have some sensitive data in the cookie, e.g. it contains the user id that is later on used to execute the query and we trust the cookie because it is encrypted. All communication happens only on ...
1
vote
2answers
51 views

Banner grabbing OpenSSL versions with OpenSSL

With the recent news about a new OpenSSL vulnerability (affecting 1.0.2 only), I'm looking to conduct some research and I was wondering if there was an way to identify what version of OpenSSL a server ...
0
votes
1answer
24 views

How can I use ECC 163?

I will be working with a Sentinel dongle. In the 3rd tab, it says it supports ECC 163. I will be both encrypting and decrypting with the dongle, as well as on a server. The server uses PHP but I can ...
0
votes
2answers
113 views

Computer Security vs Privacy

Probably this is a redundent post but in fact I have been searching online about a precise clear distinction between computer security and privacy. I'd like to know the difference of between them ...
0
votes
1answer
248 views

Bitwise cipher Cryptography

I'm doing an online cryptography course. There is a question in which it is given that the encrypted text for; OwBPAAQXAE9UC0FVBQxODgZSCUUMAQwCCApYRBJZBR0LDhoAGApPHQAUAQNZRAJPGwQbDQBDDREKQA== Is ...
-5
votes
3answers
74 views

how to know the way in which password was encrypted [closed]

i have a encrypted password basically hashed i don't know what it is some thing like 11dfb34b27f539a5e785b68e529fd470 and i know the password i.e., the plain text but i want to know the way that how ...
1
vote
2answers
72 views

Length of AES “plain text” when decrypted with wrong key

If I encrypt a text X using key A with the AES algorithms, and then decrypt the result using key B, would the obtained plain text Y length be the same as X's? If the answer is no, is there any ...
1
vote
2answers
100 views

Why are application/services still using outdated Blowfish encryption? Is it secure?

For example, CrashPlan, an online backup service, is using 448-bit Blowfish to encrypt its backup files (only enterprise product line has the ability to choose using AES-256). According to Blowfish's ...
-2
votes
1answer
51 views

What reasons for implementing reversibly encrypted data are there? [closed]

Excuse me if I am wrong, as I am very new to the field, but it seems that the only reason one should encrypt something in a reversible way is if the object receiving the encrypted data is a person. ...
0
votes
2answers
84 views

Using a hash to encrypt data

Lately, I've been reading about cryptography and thought of a method of using hashes to encrypt data. From what I know, hashes are unique to each object and are one way functions. Encryption on the ...
0
votes
1answer
33 views

MySQL AES_ENCRYPT Logs Output

Need: I need to be able to store AES encrypted user data (journal entries) in my database and those entries need to be plain-text searchable. Issue: MySQL outputs queries to its logs in plain text. ...
0
votes
1answer
61 views

If my connection to a website is unencrypted while using Tor is my IP visible? [duplicate]

I suppose to those of you with technical expertise in this matter this question might seem obvious, so apologies as I am know nothing of this topic. Also what data would be possibly visible by someone ...
3
votes
1answer
33 views

Should SHA-1 be used with RSA-OAEP

PKCS#1 defines SHA1 as default Hash function and all implementations support this Hash function and the Mask generation functions based on SHA1. In some implementations you can change the Hash ...
-5
votes
1answer
68 views

What to do if meterpreter get Caught? [closed]

Well we all have veil and its great really great But, When i run the payload the AV found that meterpreter is running from memory And then my payload is useless. How can i bypass that ? I tried ...
3
votes
1answer
99 views

What's the point of encrypting /boot or / partition?

I'm not talking about full disk hardware encryption. I'm talking about software encryption. encrypting /home prevents your data after your laptop is stolen. As far as I understand, encrypting / and ...
0
votes
1answer
56 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
-1
votes
1answer
40 views

Plex owns SSL cert correct?

Plex's HTTPS certificate is great to have for the average MITM attack, however it is my understanding that the private key would still be controlled by Plex, correct? They are issuing the certificate, ...
4
votes
2answers
114 views

Can I prevent all employees from accessing customer data without being logged (especially IT)

I am hosting a web application and SQL server database on Azure and I would like to ensure that no individual at the company can access customer data without the access being logged. It seems that ...
3
votes
1answer
37 views

Separate public and private key for EC

Our architects are trying to use non-standard using asymmetric cryptography. They want both the public and private keys kept private. It means we have 2 systems: 1st system working only on encrypting ...
0
votes
0answers
18 views

SpriteKit Level Data Security Handling

I have been reading many different posts, threads, etc. regarding the best practices to store level data to be used throughout a game application (level boundary data, images, characters, time, etc.). ...
6
votes
1answer
196 views

Bank Has Emailed My Social Security Number

I'm in the middle of getting a mortgage. Just now, my bank sent over an e-mail (sent to my Gmail account) with a bunch of .pdf attachments of documents I'm supposed to sign and return. The first ...
3
votes
2answers
150 views

Is there a reason for the assumed ISIS video's OpenPGP encryption key ID being outside base-16?

I was reading an article earlier today about Edward Snowden and ISIS. According to him they faked an encrypted message. He uses the fact that they have an encryption key outside of base-16 as his ...
1
vote
1answer
59 views

How is this OpenPGP key displaying in a non hexedecimal format?

Looking at a GnuPG manual on openskills, I notice that the main key id GEBV933F is in a different format than the usual hexadecimal (G is no hexadecimal digit). How is this done?
3
votes
2answers
51 views

Securing HSM-stored symmetric data encryption keys (AES) in memory on server

My project requires me to encrypt sensitive user data using symmetric data encryption (AES). I will be storing the AES key (DEK) in a HSM-based key management service (ie. Azure Key Vault / AWS KMS) ...
3
votes
2answers
103 views

Secure Android app development [closed]

I'm beginning with Android App development and I want to make sure that I'm taking the proper security precautions since most apps will handle sensitive data. What security precautions should be ...
1
vote
3answers
89 views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...