Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

8
votes
3answers
608 views

How secure is HTTPS with weak ciphersuites?

Today I came across the website https://mtgox.com/, which claimed to be secure because of the Verisign certificate. I checked the certificate out of curiosity (it's the first thing they claim, let's ...
2
votes
1answer
172 views

How to enable ECDHE in openjdk-1.8.0 in CentOS 6.7?

I have seen many posts that hinted ECDHE is available in the SunEC provider way back in openjdk-1.6.0. My environment: CentOS 6.7 with openjdk 1.8.0.71-1.b15.el6_7. No ECDHE. Made 2 changes in jre/...
0
votes
1answer
156 views

How to securely send bank details to someone?

I have completed my internship and my employer wants me send him my bank account details so that he can transfer me my stipend. How can I securely do this? I have Ubuntu MATE 16.04. My employer is not ...
11
votes
3answers
1k views

ProtonMail security concerns

This TED talk brought me here. First of all, to those who created ProtonMail: Nice job!!. Regardless of what people say, it's definitely a big step forward from tradition options like Hotmail, Gmail ...
3
votes
2answers
488 views

End to end security for REST services, any emerging standards?

I work with integration in the healthcare sector, where end-to-end security is important. We integrate with numerous SOAP services, and use the WS-security features to encrypt and sign requests and ...
4
votes
1answer
189 views

Should SHA-1 be used with RSA-OAEP?

PKCS#1 defines SHA1 as a default hash function and all implementations support this hash function and the mask generation functions based on SHA1. In some implementations you can change the hash ...
1
vote
1answer
45 views

How can we serve sensitive encryped data without storing the key? Should I use user-defined passwords for keys?

System Background Sensitive data must be stored (i.e. Credit Card number or SSN) in the system for a notable period of time, to serve ongoing operation of the company. Anyone can insert sensitive ...
1
vote
4answers
107 views

What exactly is a key in cryptography?

After researching and reading I am not sure if I completely understand it. To my knowledge, a key is a password used to decrypt a message. However, the confusion comes in when it comes to the public ...
50
votes
4answers
27k views

ECDSA vs ECDH vs Ed25519 vs Curve25519

Among the ECC algorithms available in openSSH (ECDH, ECDSA, Ed25519, Curve25519), which offers the best level of security, and (ideally) why?
3
votes
1answer
85 views

How to securely communicate with radio controlled device?

Let's say I have a drone that is controlled through radio and I would like to make sure that nobody else can control and gain data from it except for me. I could encrypt the data with a cipher and ...
1
vote
1answer
156 views

Do my router and OS “know” which URLs I visit, if SSL is used?

Is it possible for a router or an operating system to get access to URLs I visit in my browser, if SSL-encryption is used between a browser and a webserver?
0
votes
1answer
110 views

Public Key Encryption vs HSM for storing encryption keys

Let's say I have sensitive data in the database server that needs to be encrypted (i.e emails, etc..) and I want to make sure that in the event that the server is compromised, the attacker shouldn't ...
2
votes
1answer
250 views

SQL Server Asymmetric Encryption Keys

I have used SQL Server database with data to be encrypted and I will use symmetric key for encryption and will encrypt it by asymmetric key now comes the question how to give user permission to ...
0
votes
1answer
171 views

Is this a good scheme for storing encrypted user credentials?

We are building a service that manages multiple user accounts. For that reason, we need to store the credentials to a user's accounts using a symmetrical algorithm so they can be retrieved for the ...
6
votes
2answers
710 views

Requiring 2 keys to access a content

I need to use an external service that can only be accessed by password. I don't like the idea of storing the plaintext password on the server, but AFAIK there's not much I can do. Considering this ...
0
votes
1answer
326 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
-6
votes
0answers
34 views

which type of encryption is RWJKeLBJTBfDc? [duplicate]

which type of encryption is RWJKeLBJTBfDc ? and how can you detect it
7
votes
2answers
95 views

How are the disk encryption keys protected when a laptop is locked?

If you were installing such operating system as Ubuntu, you would have seen an option to encrypt your home directory or the whole hard drive with an AES 256bit cipher. When your laptop is totally ...
4
votes
1answer
109 views

ProtonMail: Would it not be much better if each user had their own private key?

ProtonMail keeps the encrypted private keys of all their users in their servers. The mailbox password for each user decrypts this private key, which is known only to that user. Would it not actually ...
5
votes
4answers
4k views

How To Recover EFS Cert From Backup?

I made a backup of the old Win 7 Pro then did a clean install. But I forgot to export my EFS encryption certificate, so when after I restored the encrypted files from backup I could no longer access ...
3
votes
2answers
76 views

Is it secure to overwrite unencrypted files with encrypted ones?

If I have a text file on my desktop and I encrypt it (as in replace it with an encrypted version, not create a secondary file) will the old file still be recoverable? In other words if you replace the ...
29
votes
4answers
2k views

How to encrypt in PHP, properly?

How do I encrypt data in PHP, properly, using symmetric-key encryption? I have a message M and a secret S. I'm looking for a solution that uses cryptography properly without making any of the usual ...
1
vote
1answer
91 views

Effect of “decrypting” clear-text then “re-encrypting” it

I have a (unique) situation where I receive data that is a combination of encrypted (with AES-CBC) and clear-text blocks and I cannot tell which blocks are encrypted. I plan to decrypt all of the data,...
4
votes
2answers
3k views

IS TDE PCI-Compliant?

According to PCI PAN can be stored in the database as long as strong cryptography is used. I couldn't find which cryptography is considered strong according to PCI. Here's the issue: I have PAN ...
3
votes
1answer
133 views

The NSA circumvents encryption and how would I protect myself from these type of attacks? [closed]

For the sake of this question, assume that I am security conscious to the point of paranoid. I am concerned that older versions of GnuPG may be compromised due to RSA encryption keys because of known ...
1
vote
0answers
33 views

What information can be seen when I'm using SRTP via XMPP?

Just as the title goes, basically what data/information can be tracked when using SRTP via XMPP? As client I'm using Jitsi. If things works in some aspects similar to HTTPS, I guess that maybe it ...
2
votes
2answers
121 views

Known vulnerabilities of GOST

Are there any known vulnerabilities in the GOST block cipher (GOST 28147-89)? Spcifically, I'm thinking about i.e. "master keys" which intentionally exist and are used i.e. by the Russian government. ...
5
votes
3answers
636 views

Is sending a password encrypted or as SHA1 any safer than clear text?

It seems to me that if an attacker can intercept my login request (sent with HTTP POST), then he can replay it later, no matter whether I try obfuscate it or not. What am I missing?
4
votes
0answers
290 views

Ansible Vault - how does the encryption work?

I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher ...
-7
votes
1answer
198 views

Whats encryption is use there [duplicate]

Please help me and give me this decrypted, or tell me what sort of encryption or hash is used here. aHR0cHM6Ly9tZWdhLm56LyMhZmt3UTJESlQhd21qYkNDZXZHbDNrS1ZqWGRGWnpmRDBwbjlyb2tWNUdf​YmxwQzlUbTRVUQ==
1
vote
0answers
43 views

Long-term cloud backup encryption

I have a few TiB of data on machines that I control. For georedundant backup purposes I want to also have the data in the cloud. Obviously I don't want to give the provider (or any intelligence ...
0
votes
1answer
110 views

Questions on the variations of RSA keys

I've built a simple application that reads in an RSA key, checks the header and starts identifying properties of the RSA key to make sure it is valid (Using child_process in express to run $ ...
5
votes
1answer
92 views

What is the exact meaning of “Keying material”?

I have seen this term in many docs on IKE and ISAKMP. These docs seems to be written for Security experts but not everyone who needs to setup an IPSec tunnel needs to be a security expert :-) So what ...
9
votes
3answers
110 views

Where to find current information on cipher suite strength?

I am hardening the configuration for my /etc/ssh/sshd_config and have a few choices for Ciphers: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,...
3
votes
2answers
60 views

RC4 encrypt many messages with same password

I would like to ask if it's insecure to encrypt many different messages sent over the Internet encrypted by RC4 with the same password. If it is insecure, then if I encrypt the first message with the ...
6
votes
2answers
1k views

Secure database password stored in an env variable

I need to somewhere store my DB password on my production environment to access the DB. At the moment the prod system is deployed in the cloud, so is the DB. The password, the username and some other ...
0
votes
0answers
43 views

How does an attacker compromise a soft switch?

Speaking of soft switches (e.g soft switch in data plane of software defined networking). I've been trying to find a good research paper or article that explains how an attacker can compromise a soft ...
1
vote
2answers
148 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
3
votes
3answers
3k views

Centralized local hosted web based password manager

In our company we have more than 100 employers and everyone use several online applications daily. To access all of this sites they need a password which was now stored very insecurely. so I'm ...
1
vote
1answer
819 views

Prevent CryptoLocker on Server

Are there any ways to prevent files associated with CryptoLocker, to be propagated to a data server, by means of a back up? We use Cobian as our backup system, and it backs up the user's directory to ...
0
votes
1answer
91 views

Is there a ransomware variant that checks for file's magic numbers to encrypt?

Is there a known ransomware-variant (Cryptolocker, Cryptowall etc.) that before encrypting the files checks for their magic numbers? Lets say that there's a Word file, that had its file extension ...
6
votes
1answer
132 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
2
votes
1answer
241 views

Encrypting data before sending to SaaS tool and decrypting on browser view

I'd like to send data to a SaaS tool, where the data is stored in the cloud. I'll use Google Analytics as an example, but it applies to any similar service. Google Analytics does not allow you to ...
0
votes
4answers
294 views

Hardware encryption for flash drives

Could someone tell me the difference between hardware encryption and software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
1
vote
2answers
97 views

Bruteforcing hardware-encrypted SSD

Can you bruteforce a hardware-encrypted SSD drive? I mean recovering the password needed to unlock the drive. Is there any software could do this? Here the focus is the software that could do the job....
0
votes
1answer
42 views

Stolen Remote Desktop Protocol (RDP) credentials

I would like to know how to guard against RDP-renting services such as dedicateexpress.com which rents out stolen corporate laptops credentials. Are there IDS for such events?
2
votes
2answers
2k views

Is it true that encryption bit “strength”, although numerically identical, may actually be different depending on the algorithm?

I was reading recently that for AES, the encryption strength is actually the key size/length, so 128-, 192- or 256-bit. While, for SHA-2, the encryption strength is measured against the message digest ...
2
votes
1answer
370 views

P12 private key vs private key file : what is more secure?

The question is a bit tricky because they don't have the same purpose but : Do both kind of file face the same security issue concerning private key protection : password strength? (PBKDF2 as both ...
8
votes
2answers
490 views

With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?

From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
0
votes
1answer
91 views

How to crack encrypted disk (crypto-LUKS) in an efficient way?

I had a disk encrypted by crypto-LUKS but forgotten password. I read a question posted here. LUKS HDD Encryption crack But before that I want to know if there's some free software I can use to ...