Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

2
votes
1answer
79 views

Security of online storage of KeePass-like files

A common advice for storing passwords is to store them into an encrypted file, for example by using a dedicated software such as KeePass2. To keep this file in sync between several computers, the ...
0
votes
1answer
37 views

How to encrypt or store data so that only a pool of processes can share it on Windows?

I am writing an application T1 which is using SQLite database to store some sensitive data and i am trying to encrypt it securely. The issue i am facing is that i don't want my symmetric key to be ...
1
vote
2answers
165 views

Storing encrypted information in database vs partition encryption

Trying to search for answers like Database encryption or filesystem encryption? but did not found what I need. My database contains confidential information. What is better? To store encrypted ...
1
vote
0answers
9 views

Need Help: How to do XML Element Encryption using JAVA? [migrated]

I have a question regarding Java programing. I have this .PFX file that contain public key and private key public key algorithm = RSA public key format = X.509 Public Key = Sun RSA public key, 2048 ...
0
votes
1answer
22 views

Size of initialisation vector and plaintext in CBC mode

If I have a 16-number sequence (7,7,7,....7), and I need to encrypt this using a simple 4-bit substitution cipher, do I have to "chop" the plaintext in blocks which are of same size as the IV? In my ...
5
votes
4answers
250 views

Which strategy to encrypt data accessed by multiple users?

I need suggestions to design my database architecture (in the context of a web application) on the particular point of its encryption ; knowing that the following elements must be respected: 1- Data ...
3
votes
2answers
269 views

IPhone iOS 8.3 encryption security against physical access

Excerpt from Apple's Whitepaper "iOS Security" on Effaceable Storage: A dedicated area of NAND storage, used to store cryptographic keys, that can be addressed directly and wiped securely. ...
1
vote
0answers
25 views

Possible vulnerabilities in private chat application implemented using web broadcasting

I have never used web-sockets but I am working in a PHP framework which has builtin broadcasting facility. This broadcasting use web-sockets technologies named Redis and Pusher. The workflow of this ...
-2
votes
0answers
19 views

Having a bit of trouble to determine the encryption of a file I'm playing around with

Basically I'm playing around with this file (http://pastebin.com/qJAU3mXD) I encountered a problem. My guess was first a base64 encrypted file, obviously because of the string in between the . and the ...
2
votes
1answer
28 views

Personal cipher/digest preferences ignored when generating a new key pair in GnuPG

I have specified personal digest preferences in my ~/.gnupg/gpg.conf: personal-digest-preferences SHA512 SHA256 SHA384 SHA224 SHA1 then, I have generated a new key pair. But when I check the ...
1
vote
2answers
81 views

I forgot my 7z password [closed]

I used 7zip to encrypt a 200mb archive of my code used a combination of some of 7 possible words and no numbers or caps. So 823543 possible passwords. What is the best free program I can use to ...
0
votes
2answers
42 views

encryption protection against lost password

Here is a plan I am thinking about. I haven't seen this proposed, so I thought I would ask about it. Threat we are guarding against: A lost or stolen laptop leading to exposure of sensitive ...
0
votes
1answer
39 views

DNS sercure when using DNS crypt?

Is it the same security level like a VPN DNS wise when using Open DNS crypt servers plus DNS crypt proxy? I installed both packages in Ubuntu and now unless i have the right IP entry in the network ...
1
vote
1answer
22 views

Detect if AES and hmac keys are invalid

I have a server which has a configured value of aes and hmac key. The client also should have the same aes and hmac key value. When the client sends a request, the server interprets this request and ...
0
votes
1answer
32 views

How is an epsilon of 1/1000 non-negligible?

Lately I've been studying cryptography and in the current course I'm taking we're reviewing statistical tests and how they can be used to determine if a pseudo-random generator is secure or not. ...
8
votes
6answers
2k views

Why do we keep our keys secret, rather than our algorithms? [duplicate]

On almost any website that relates information about cryptography in general there is this common notion that almost all encryption/decryption algorithms should use a key as one of their inputs. The ...
0
votes
1answer
43 views

Is it possible to make a different encryption for a phone communication?

I wanted to know if maybe it's possible to make a phone communication more secure than the current A5/1 (used for GSM). Or maybe create a special tunnel between two phones. I mean like an ssh ...
-4
votes
1answer
73 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
0
votes
0answers
59 views

Ensure that a file can only be decrypted after a specific condition is not present

Are there any cryptographic schemes/protocols that would allow me to encrypt a file, make it publicly available, but ensure that it can only be decrypted when a specific condition is not present (I ...
0
votes
0answers
31 views

Update certificate in Outlook contacts [migrated]

How can I update an encryption security in Outlook contacts? I got an email signed with an updated certificate by someone who is already in my contacts with an expired certificate. If I REPLY to ...
2
votes
3answers
167 views

Is it possible to encrypt an SD card?

In the film "Citizen 4", it's said that we cannot encrypt an SD card. Do you know why it would not be possible?
-1
votes
1answer
61 views

How can I recover my encrypted data from a Sandisk Secure Access [closed]

I had saved my all important and personal data on sandisk secure access 2.0 on 16gb pen drive cruzer but after 1.5 month when I connect my pen drive to the system, it asked me to generate new ...
1
vote
0answers
55 views

How to decrypt a file only if specific conditions are not met [closed]

I know how to decrypt a file after one or more specific environnemental conditions are met (with secure triggers). I am interested in a cryptographic sheme that would enable decryption of data only ...
0
votes
1answer
38 views

Passing data among 3 parties with public key encryption

There are three parties involved in a repeated data transfer process: Client C, Broker B and Provider P. There might be multiple clients C. Broker B manages P's customer database. Each customer has a ...
0
votes
0answers
67 views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
0
votes
1answer
68 views

Is SQL Server 2016's Deterministic Encryption any good?

I'm seeing that MS just released a new version of SQL Server which supports deterministically encrypting a column, so that you can still query it: ...
1
vote
0answers
42 views

How can I use session salt for encrypting data using AES in CTR mode?

I have to implement a crypto-plugin in Java. The approach followed is conceptually similar to that used for SRTP. The algorithm used for data confidentiality is AES in CTR mode (I'm following a ...
0
votes
0answers
23 views

What type of security does Gazzang zNcrypt provide?

We have just planned to implement the same in our organization, and I believe this will encrypt files and data on disk. I have two questions: Does it provide column level encryption in database (if ...
1
vote
1answer
31 views

Can DUKPT BDK be 192 bits?

All examples seem to be with 128 bits. Can it be 192 bits?
1
vote
2answers
59 views

secure notebook options [closed]

How can I secure my notebook with highly sensitive information stored in a spreadsheet. I am keeping the following options in mind: Password protect & encrypt BIOS Full disk encryption Password ...
1
vote
1answer
64 views

Sketchy traffic from port 3030?

I am running tests on a server that is ran by a close family friend, who agreed to allow me to do so in exchange for the experience I will gather (I am currently a computer science student). On ...
1
vote
0answers
66 views

WhatsApp Password generation [closed]

Is it known how the WhatsApp-Servers generate the password for the user? My Google-Fu is not strong enough to find it out by myself. For reference (Step 6 / 2, I mean the step in which the server ...
0
votes
0answers
35 views

Hashed master password and generated encryption key in a password manager program

I'm writing a WPF password manager application to practice programming, so far this is the scheme I intend to use to store master password and individual site password: Master password: Generate a ...
2
votes
1answer
24 views

Does endianness affect encryption keys and initialization vectors?

When encrypting (specifically when using AES) content, will endianness affect how the key (and/or initialization vector) should look when encrypting/decrypting content? And could this depend on the ...
0
votes
1answer
96 views

Decrypting .P7M File with Key (.pem) using OpenSSL

My knownledge about security is limited so I need some help here. The Question I want to Decrypt a .P7M file using its private key (.pem). I would prefer to use OpenSSL for this. Tried so far ...
10
votes
2answers
362 views

Are there any meta-formats for crypto?

Are there are any (properly specified) meta-formats / schema formats for describing cryptographic message structures? I'm looking for a way to describe the format (where some channels might want ...
0
votes
0answers
95 views

Is facebook to facebook (mobile application call ) encrypted?

I understand facebook uses WebRtc to send voice data packet in network if any one end client is on the browser. Use of DTLS packets can be seen in captured (wireshark) file. But in case of mobile app ...
2
votes
0answers
36 views

How can I recover data after luksFormat? [migrated]

How can I recover data after luksFormat? It was late one night when I decided to try gnome-shell 3.16 without messing up my Ubuntu box. So, I downloaded an Antergos image and booted it. I was maybe ...
0
votes
1answer
49 views

Is SESSION is safe for transferring encrypted email and password in PHP

I am working on a project where I am using PHP_SESSION, Somewhere I heard that PHP_SESSION are quite unsafe for passing valuable data so I have to know what are the security flaws, how it can be ...
0
votes
1answer
73 views

iOS 8 encryption vs Android Lollipop encryption

iOS 8 includes encryption that is enabled by default, whereas in Android it is optional. Do both operating systems decrypt everything on boot and then the PIN is used to unlock it until it is turned ...
-2
votes
0answers
38 views

Completely filling up unused space in TrueCrypt container?

Right now, I am fooling around with Truecrypt and I definitely want to protect my private data on a USB stick. So there are two ways of doing this. Either with a container or completely encrypting the ...
2
votes
1answer
143 views

How to tell if my OpenPGP public key is self-signed?

I recently read: You should sign your PGP public key immediately after generating your public/private key-pair. And now I wonder how I can check whether I already did that. So my question is: ...
2
votes
1answer
37 views

Best practice of deprecating old OpenPGP subkeys when migrating to a new subkey pair?

I've been using GnuPG with an offline master + online subkey setup for a while now. All my email is signed with the signing-only subkey and encryption is done with the encryption-only subkey. The ...
-6
votes
1answer
67 views

What encryption is this? [closed]

7c4a8d09ca3762af61e59520943dc26494f8941b This is 123456, I don't know what kind of encryption it is and all the passwords are saving as it in my database so i need to know
-1
votes
2answers
82 views

How is encryption broken [duplicate]

The title describes pretty well what I want to ask, because I just can't wrap my head around it. I understand the basics of breaking encrypted data with the method of kind-of-bruteforcing where you ...
3
votes
1answer
72 views

Why is plain dm-crypt only recommended for experts?

I am curious about the following claim from the Cryptsetup FAQ: 2.4 What is the difference between "plain" and LUKS format? First, unless you happen to understand the cryptographic background ...
0
votes
2answers
78 views

Can I VPN a phone's connection to my home network, and then apply my home firewall to my phones network connections?

I have a decent firewall/router at home, and I was wondering whether it would be possible to use my home firewall for the connections that my phone makes, even when I'm not at home. It would mean ...
2
votes
1answer
87 views

VoIP call security: How does encrypting signalling protocol (SIP) protects RTP?

Checking the data packets from many VoIP applications shows that SIP packets are encrypted with TLS. So the captured session shows no SIP signals at all, just simple TCP and TLS/SSL packets. But ...
-1
votes
0answers
15 views

Would BitLocker and SysKey be a possible and good security combo? [migrated]

Is it possible to have Bitlocker and SysKey work together on a Windows machine? If so, could you have them both work on a single USB thumb drive? Would the Thumb Drive have to be partitioned? If no, ...
0
votes
2answers
24 views

Advantages of Enabling Firmware Password Protection

What security advantages, if any, would be gained by enabling Firmware Password Protection on a mac that allready has filevault encryption for the disk?