Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

8
votes
3answers
1k views

Is it safe to sync private keys between iOS devices using iCloud?

My iOS app has to handle storing private keys for the user. Normally I would just use Keychain Services for this as I would a password, but it would be great if I could sync the keys between the ...
3
votes
0answers
58 views

Who defined the term “end-to-end encryption”?

I am trying to find the origin of the term "end-to-end encryption", but have been unsuccessful until now.
1
vote
1answer
98 views

PHP BLENC extension security concern

PHP BLENC is a extension that allows PHP developer encrypt their code, protect their ideas and avoid illegal copy. Although BLENC allow developer to define the main encryption key in source(in the ...
1
vote
0answers
34 views

VPN chain in one machine without VM natively

Is it any way to make VPN chain in one machine (MAC or WIN) without VM natively (L2TP/IPsec)? I need this for obtain an extra layer of security. For example - if one VPN turns off I still have ...
0
votes
0answers
37 views

Preventing a key from being found by analysis

Lets say Alice wants to send an encrypted message to Bob. They both know a secret key. Alice uses the key to encrypt the message and Bob uses the key to decrypt the message. Now, if the handshake ...
16
votes
3answers
10k views

Is email encryption, as claimed by ProtonMail, possible?

Is it possible to create a Web service that encrypts all messages, such that only the writer, and the person to whom the mail is sent, can read it? In other words, is the theory behind ProtonMail ...
15
votes
3answers
2k views

How secure is “Firefox Hello”?

The new "Firefox Hello" feature promises easy and safe video conversation. It is not nescessary to create an account, you simply share a link with your partner to start the conversation. The ...
0
votes
1answer
90 views

Wi-Fi Protected Setup PIN method EAP Messages

Let's look at this example: router (access point) has 8-digit PIN (printed on label) and laptop wants to connect to network using WPS PIN. So user give router's PIN into laptop and laptop sends PIN to ...
0
votes
0answers
3 views

Samba TLS Setup [migrated]

I'm reading this Samba Manpage and according to this, you can setup TLS. I've got 2 questions. On the Server-side, TLS options requires the path of the certificate and keys? How would that work on ...
2
votes
2answers
359 views

End to end security for REST services, any emerging standards?

I work with integration in the healthcare sector, where end-to-end security is important. We integrate with numerous SOAP services, and use the WS-security features to encrypt and sign requests and ...
4
votes
0answers
34 views

Why would I use at-rest encryption over a DB's key-based encryption?

Goal I want to store encrypted data in a database. Constraints Application-level encryption (encrypting before sending to the DB) is not a reasonable option for my use case. The DB providers I'm ...
18
votes
1answer
15k views

What changed between TLS and DTLS

What did the DTLS (TLS over UDP) authors have to change so that it could run without TCP? Bonus points: Do any of the protocol difference affect the way it should be used, both in terms of interface ...
6
votes
4answers
6k views

What does Windows's built-in encryption do, if I can seemingly always read my encrypted files?

I'm playing around with certificates and encryption on a Windows system, but either it isn't working or I don't know how it should works. When I encrypt a file its name changes to green. But then, I ...
13
votes
6answers
22k views

What does “key with length of x bits” mean?

I'd like to know what it means to say "the cryptosystem C uses keys with a length of x bits". I do not understand what the bits length means... doesn't it depend on the encoding? The same word encodes ...
1
vote
1answer
216 views

SQL Server Asymmetric Encryption Keys

I have used SQL Server database with data to be encrypted and I will use symmetric key for encryption and will encrypt it by asymmetric key now comes the question how to give user permission to ...
-1
votes
1answer
145 views

How can this encryption algorithm be improved?

I am currently developing an application to store my passwords safely. It will be a proof-of-concept at first, but I am planning to upgrade it later. Anyway, here is how the passwords are accessed: ...
2
votes
2answers
77 views

What information can my ISP see using squid proxy?

My ISP provides a transparent proxy to use and I can see that they are using the squid proxy for caching this. What I am wondering is what data can they see and what can they see further if they can ...
20
votes
2answers
3k views

Why was DES with 112 bit keys (IBM) reduced to 56?

On the French wikipedia page about DES it says that the original DES algorithm from IBM used 112 bit keys. Why did they reduce this to 56 bits? Edit: ok NSA convinced IBM but today it seems like a ...
0
votes
1answer
106 views

Is this a good scheme for storing encrypted user credentials?

We are building a service that manages multiple user accounts. For that reason, we need to store the credentials to a user's accounts using a symmetrical algorithm so they can be retrieved for the ...
2
votes
1answer
52 views

Is EFS FINRA and SEC Acceptable

I'm trying to search in their manual but there is nothing explicit being mentioned as to what type and how encryption should be done. Can I assume that if I use EFS on the entire USER directory that ...
6
votes
2answers
663 views

Requiring 2 keys to access a content

I need to use an external service that can only be accessed by password. I don't like the idea of storing the plaintext password on the server, but AFAIK there's not much I can do. Considering this ...
1
vote
0answers
83 views

Why are MACs not included when defining Protocols? [migrated]

I see often in literature related to cryptographic protocols that MACs (Message Authentication Codes) are not included in protocol definitions. For example: A -> S: {TA, B}KAS S -> A: {TS, ...
7
votes
1answer
205 views

Encrypting individual files on OS X

I am about to go paperless, and I want to protect the documents that I scan. The use case is that I'll be scanning paper documents, encrypting each file, and storing them locally and on various backup ...
1
vote
1answer
94 views

Should the RTP feed from a surveillance camera be protected?

I see a lot of camera system and they're either using RSTP over RTP or just RTP. Most of the times they are on straight HTTP for the login, some will be on HTTPS, but unless forced (which I have ...
0
votes
0answers
3 views

How can I show RSA OAEP IND-CPA secure [migrated]

How can I show, that RSA with OAEP is IND-CPA secure by using G,H one way function?
0
votes
0answers
37 views

How will credit card purchases NOT fall under the guidlines of the new Supreme Court ruling? [migrated]

The intent of this new ruling by the Supreme Court is for anonymous networks but, when doing forensics on a wire in such a manner as to present to a judge, you can't tell what's inside those packets. ...
0
votes
1answer
140 views

Is this algorithm really end to end encrypted and secure?

I'm creating an anonymous chat where one of the premises is that the conversations are end to end encrypted. I'm using firebase so all the comunication between the clients and the server is SSL ...
14
votes
2answers
1k views

What's the difference between a hashed and an encrypted password?

Alright, so I know this may sound dumb, but I'm having a hard time understanding what an encryption would be since it's different from a hash. I've read up on it, but I'm still not quite sure. So, I ...
1
vote
1answer
66 views

How to use nmap through proxychains?

Iam running nmap through proxychains using this comand proxychains nmap -v scanme.namp.org This produced an error showing like this root@kali:~# proxychains nmap -v scanme.nmap.org ...
1
vote
1answer
56 views

Stateless AEAD (AES-GCM) based tokens

I want to generate secure data tokens which can be shared with the client for uses like password reset, etc. which involves low storage overhead at server end. Ideally I am interested only in managing ...
3
votes
2answers
216 views

Biometric device instead of password - signature security

Lets assume that there is a bio-metric algorithm for user authentication which compares fingerprints with a user's signature saved in a database (comparing function is not important here). Next, there ...
0
votes
1answer
28 views

Do I need to use GPG subkeys for my backups?

I'm reading a lot about the need to separate the master key from additional encrypting or signing keys, like these links: GPG subkey layout. Separate keys for C, S and E? ...
0
votes
0answers
58 views

Is it possible for an attacker to log keystrokes of a bluetooth or wireless keyboard [duplicate]

Bluetooth and wireless keyboards are sending keystrokes wirelessly. Could this mean that an attacker (or spy) can log the keystrokes by monitoring the wireless or Bluetooth radio waves (or whatever)? ...
0
votes
1answer
96 views

Questions on the variations of RSA keys

I've built a simple application that reads in an RSA key, checks the header and starts identifying properties of the RSA key to make sure it is valid (Using child_process in express to run $ ...
0
votes
1answer
71 views

Is a password-protected excel file considered secure versus encrypted file or email

I understand that encryption is the highest form of security for document/data storage. While a password-protected document is more secure than one without password protection, if the document is ...
0
votes
1answer
31 views

Can a 3rd party validate the origin of an HTTPS session?

I'm wondering if HTTPS can be used as proof that a server reported an answer. If I understand correctly, the initial handshake is for HTTPS is the only time that the public/private key of the server ...
80
votes
8answers
215k views

How to determine what type of encoding/encryption has been used?

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format ...
0
votes
2answers
94 views

How do data breaches of account login information end up in plaintext?

For example, see this story. Am I missing something here? Are the login details actually still encrypted? I don't understand how it is possible for a data breach of what I assume is encrypted ...
0
votes
0answers
20 views

Should RSA primes p and q should differ in length by “a few digits”? [migrated]

When generating RSA keys in the original RSA paper it is stated: "to gain additional protection against sophisticated factoring algorithms, p and q should differ in length by a few digits" Why is ...
3
votes
2answers
82 views

Does TLS rotate the shared secret periodically?

After the initial shared secret is agreed upon between the client an server through the TLS handshake does the shared secret get rotated periodically ?
1
vote
2answers
107 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
13
votes
5answers
2k views

Why does IV not need to be secret in AES CBC encryption?

According to Wikipedia, the initialization vector (IV) does not have to be secret, when using the CBC mode of operation. Here is the schema of CBC encryption (also from Wikipedia): What if I ...
-1
votes
6answers
2k views

How to prevent illegal file transfer or copying of video files from a PC? [closed]

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
0
votes
1answer
36 views

Unsecure FTP with Encrypted file and Wireshark leakage

Hi i was wandering if it is possible to have a password leaked to an encrypted file on an anon ftp server with r-x-w permissions. So for example i have a file encrypted using gpg and when opened on ...
8
votes
4answers
558 views

Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?

Since Whatapp started end-to-end encryption with an option for users to verify keys, many government security agencies, like the Indian one, red-flagged such use of encryption. Now, Yesterday the ...
1
vote
1answer
111 views

Sending Group Keys over network

For multicast encryption one user creates group keys on his local (Symetric and asymetric). If we encrypt these with other group user's public keys and send over networks . Is this acceptable? Can ...
1
vote
0answers
62 views

Android Rooting and Evil Maid Attacks

I'm trying to learn more about full disk encryption (in the context of a Linux based server) and what schemes offer true security and which only offer the illusion of security. As I understand it, ...
2
votes
1answer
214 views

Encrypting data before sending to SaaS tool and decrypting on browser view

I'd like to send data to a SaaS tool, where the data is stored in the cloud. I'll use Google Analytics as an example, but it applies to any similar service. Google Analytics does not allow you to ...
0
votes
2answers
54 views

Replacing files with infected files on anonymous ftp server

I am creating a new question as i now have another question which was raised from a previous answered question post. What im trying to figure out is would this scenario be possible. I have an ...
74
votes
5answers
12k views

What kinds of encryption are _not_ breakable via Quantum Computers?

There's the recent article NSA seeks to build quantum computer that could crack most types of encryption. Now I'm not surprised by the NSA trying anything1, but what slightly baffles me is the word ...