Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
2answers
72 views

Length of AES “plain text” when decrypted with wrong key

If I encrypt a text X using key A with the AES algorithms, and then decrypt the result using key B, would the obtained plain text Y length be the same as X's? If the answer is no, is there any ...
1
vote
2answers
100 views

Why are application/services still using outdated Blowfish encryption? Is it secure?

For example, CrashPlan, an online backup service, is using 448-bit Blowfish to encrypt its backup files (only enterprise product line has the ability to choose using AES-256). According to Blowfish's ...
0
votes
1answer
79 views

Add SSL on top of existing TCP connection

This may sound as basic question for some but I have never done such thing. Imagine I basically have simple TCP client implemented on C# (e.g. TCPClient class) and simple TCP server implemented using ...
3
votes
3answers
5k views

When do I use IPsec tunnel mode or transport mode?

I basically understand how tunnel mode and transport mode works, but I don't know when I should use one instead of another. Among the two parties who want to communicate, if one computer B doesn't ...
-2
votes
1answer
51 views

What reasons for implementing reversibly encrypted data are there? [closed]

Excuse me if I am wrong, as I am very new to the field, but it seems that the only reason one should encrypt something in a reversible way is if the object receiving the encrypted data is a person. ...
0
votes
2answers
84 views

Using a hash to encrypt data

Lately, I've been reading about cryptography and thought of a method of using hashes to encrypt data. From what I know, hashes are unique to each object and are one way functions. Encryption on the ...
0
votes
1answer
33 views

MySQL AES_ENCRYPT Logs Output

Need: I need to be able to store AES encrypted user data (journal entries) in my database and those entries need to be plain-text searchable. Issue: MySQL outputs queries to its logs in plain text. ...
0
votes
1answer
61 views

If my connection to a website is unencrypted while using Tor is my IP visible? [duplicate]

I suppose to those of you with technical expertise in this matter this question might seem obvious, so apologies as I am know nothing of this topic. Also what data would be possibly visible by someone ...
3
votes
1answer
33 views

Should SHA-1 be used with RSA-OAEP

PKCS#1 defines SHA1 as default Hash function and all implementations support this Hash function and the Mask generation functions based on SHA1. In some implementations you can change the Hash ...
6
votes
1answer
196 views

Bank Has Emailed My Social Security Number

I'm in the middle of getting a mortgage. Just now, my bank sent over an e-mail (sent to my Gmail account) with a bunch of .pdf attachments of documents I'm supposed to sign and return. The first ...
3
votes
1answer
99 views

What's the point of encrypting /boot or / partition?

I'm not talking about full disk hardware encryption. I'm talking about software encryption. encrypting /home prevents your data after your laptop is stolen. As far as I understand, encrypting / and ...
4
votes
1answer
66 views

Can I tell Linux not to swap out the data space of a specific process?

I need to be able to write a program that uses a secret value that I want to ensure never gets written to disk during a page swap. The value is securely entered when the program starts, and gets ...
0
votes
1answer
109 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
-5
votes
1answer
67 views

What to do if meterpreter get Caught? [closed]

Well we all have veil and its great really great But, When i run the payload the AV found that meterpreter is running from memory And then my payload is useless. How can i bypass that ? I tried ...
12
votes
2answers
319 views

How difficult it was to crack Navajo's language during WW2?

It is well known that during the WW2 America employed native American, namely Navajo people, to "encrypt" their radio communications. I read some time ago (I don't remember where) that their language ...
0
votes
1answer
56 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
-1
votes
1answer
40 views

Plex owns SSL cert correct?

Plex's HTTPS certificate is great to have for the average MITM attack, however it is my understanding that the private key would still be controlled by Plex, correct? They are issuing the certificate, ...
4
votes
2answers
114 views

Can I prevent all employees from accessing customer data without being logged (especially IT)

I am hosting a web application and SQL server database on Azure and I would like to ensure that no individual at the company can access customer data without the access being logged. It seems that ...
2
votes
1answer
108 views

Strange RSA usage - how secure is it?

Is following communication scheme secure? To my mind, it uses RSA modulus and public key exponent as a cryptographic secret, which is strange usage of RSA, but can it be easily broken because of ...
1
vote
1answer
66 views

Are there any potential complications with these secure baseband ideas?

So I have been working on some ideas for securing cell phones from baseband level exploits and I was wondering if there are any potential complications with these solutions such as practicality or ...
5
votes
3answers
148 views

Public Key Encryption instead of passwords

As an alternative to using passwords, customers could be provided with individual asymmetric-encryption key pairs (i.e. a private key with associated public key), which could be used to validate their ...
3
votes
1answer
37 views

Separate public and private key for EC

Our architects are trying to use non-standard using asymmetric cryptography. They want both the public and private keys kept private. It means we have 2 systems: 1st system working only on encrypting ...
2
votes
1answer
252 views

How do we encrypt a password using another password?

An article on Kerberos goes like this: The problem is, Charon cannot give you the password directly, because then you would know it. [....] So instead of giving you the mail server's ...
0
votes
0answers
18 views

SpriteKit Level Data Security Handling

I have been reading many different posts, threads, etc. regarding the best practices to store level data to be used throughout a game application (level boundary data, images, characters, time, etc.). ...
3
votes
2answers
150 views

Is there a reason for the assumed ISIS video's OpenPGP encryption key ID being outside base-16?

I was reading an article earlier today about Edward Snowden and ISIS. According to him they faked an encrypted message. He uses the fact that they have an encryption key outside of base-16 as his ...
3
votes
2answers
51 views

Securing HSM-stored symmetric data encryption keys (AES) in memory on server

My project requires me to encrypt sensitive user data using symmetric data encryption (AES). I will be storing the AES key (DEK) in a HSM-based key management service (ie. Azure Key Vault / AWS KMS) ...
1
vote
1answer
59 views

How is this OpenPGP key displaying in a non hexedecimal format?

Looking at a GnuPG manual on openskills, I notice that the main key id GEBV933F is in a different format than the usual hexadecimal (G is no hexadecimal digit). How is this done?
3
votes
1answer
300 views

Using MySQL 'encrypt' / crypt() to store passwords?

I've been tasked with deploying a FTP instance with a MySQL backend for storing user logins. Looking online I found Pure-FTPD, which on paper is great. However documentation states it only allows ...
9
votes
3answers
214 views

How Should WiFi Passwords be securely stored on IOT (embedded) devices?

Some devices need to store and (re)use a password (not the hash) like your mobile phone using home wifi, SmartTV, etc; How should they store the password on their flash storage? So that a person who ...
3
votes
2answers
103 views

Secure Android app development [closed]

I'm beginning with Android App development and I want to make sure that I'm taking the proper security precautions since most apps will handle sensitive data. What security precautions should be ...
1
vote
3answers
89 views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...
1
vote
4answers
99 views

About the AES algorithm key and ciphertext

I have the two following questions about the AES algorithm: A- Does the key need to follow any specific pattern apart from length or can it be a completely random string? So, if I select 16 random ...
11
votes
4answers
13k views

How secure is the new Mega-site encryption?

The new Mega site, sucessor of Megaupload, claims that all information is encrypted with a symetric key that only the user has access. The general terms are listed here: All files stored on MEGA ...
3
votes
0answers
218 views

Security for Hospital IT

I'm developing a program in Java intended to be utilized in a hospital. The system uses RMI internally between workstations and the server program. The program would be installed on the hospital's ...
1
vote
1answer
57 views

How to only let end user to access data in a web app

I've been read a lot about common encryption methods used in a django app. However, my requirements are very different. I am looking for a way to encrypt my web app data so only the owner of the data ...
0
votes
0answers
9 views

Encryption that could have multiple decryption key [migrated]

The title looks strange but it is to deal with this situation. The data we have should only be accessible by our end user and data administrators, not anyone else. Ideally, each user should have ...
1
vote
1answer
76 views

number of ciphertext-plaintext pairs needed in double encryption

So I know in single encryption you would simply require at least 1 pair of plaintext-ciphertext, to carry out an exhaustive key search; you continue trying different keys until one is found that ...
3
votes
2answers
170 views

How to protect files from someone who has access to the computer that contains those files?

Basically, I have a Raspberry Pi that is installed in a car. If the car gets stolen, how can I make sure that the files can't be decrypted? The Raspberry Pi contains a Python script that records ...
2
votes
2answers
79 views

What does it mean to have authentication without confidentiality or authentication without encryption?

I came across these functions m+EeA(H(m)) (for authentication without confidentiality) and m+H(m+k) (for authentication without encryption) and I'm having a bit of a difficult time understanding them. ...
7
votes
2answers
68 views

What does “revoking” a key actually do?

I am currently encrypting some personal information using gpg (gpgdir actually). I have a copy of my private key printed onto a sheet of paper in the form of a data matrix lest I lose the digital copy ...
1
vote
1answer
114 views

Saving encrypted username password in session

I have Node.js server which serves an app. In that app you could be asked to login. The login credentials would be authenticated against LDAP. That server could request/post data from other servers ...
1
vote
2answers
88 views

Is it reasonable to make mandatory inside an organization (in the internal network) that all traffic were encrypted?

Is it reasonable to make mandatory that all traffic were encrypted inside an organization (in the internal network)? Usually, in the LAN of an organization some protocols are plain text, for example, ...
0
votes
0answers
7 views

SQL server standard edition encryption [migrated]

I'm trying to look into what kind of encryption I can do with SQL server standard edition from 2008 forth, so far I know that I can't use TDE as that's part of EKM. When I look up this topic I'm ...
2
votes
1answer
67 views

What effect on internet crime did the more recent developments in encryption have? [closed]

I'm doing a presentation on the effect of encryption on internet enabled/based crime, what would people say is the largest development in encryption of say the last 5-10 years what and what kind of ...
1
vote
1answer
63 views

what is the best way to know if the entered decryption key is correct?

I was searching for a way to store the encryption key of AES_ENCRYPT and found a good answer here: where to store a key for encryption However, now I am trying to use "Type in the encryption key when ...
1
vote
1answer
103 views

How does encryption strength make a difference to an attacker

Take for example I have my social security and other personal information stored as a string that I am trying to encrypt on my local drive. My first method of encrypting the string is to use a ...
3
votes
1answer
303 views

Session Management for Private Key Passphrases in a Web Application

Use Case I would like to encrypt data in a database for a Web Application. The following requirements exist: Decryption should only be possible when a user provides a passphrase Encryption should ...
4
votes
2answers
67 views

Is a Lucene search index effectively a backdoor for field-level encryption?

To protect personally identifiable information (PII) in a SQL database, we have implemented field-level encryption. However, we need to allow fulltext search against some of those data. One idea ...
1
vote
0answers
63 views

Can I decrypt a DiskCryptor-encrypted hard drive using Veracrypt?

I have a hardrive I encrypted with DiskCryptor back when I was using Windows. Now that I have Linux I want to decrypt the hard drive but it turned out DiskCryptor is not available for Linux, whereas ...
17
votes
2answers
7k views

When using AES and CBC, is it necessary to keep the IV secret?

If I encrypt some data with a randomly generated Key and Initialization Vector, then store all three pieces of information in the same table row; is it necessary to encrypt the IV as well as the Key? ...