Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
2answers
85 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
2
votes
2answers
57 views

Asymmetric key encryption that can have a public decryption key, but encryption key cannot be computed from that [duplicate]

Is there a way where I can distribute a public decryption key, but the encryption key cannot be computed from that key, so that anyone who reads one of my encrypted message, he/she can be quite sure ...
5
votes
3answers
635 views

Is sending a password encrypted or as SHA1 any safer than clear text?

It seems to me that if an attacker can intercept my login request (sent with HTTP POST), then he can replay it later, no matter whether I try obfuscate it or not. What am I missing?
0
votes
2answers
68 views

How would I brute-force a Bitlocker recovery key?

I have imaged a hard disk and used passware, but to no avail - it says Encryption key External key, and not the actual key. How do you think I would go about brute forcing it? Lets assume I had ...
7
votes
2answers
95 views

How are the disk encryption keys protected when a laptop is locked?

If you were installing such operating system as Ubuntu, you would have seen an option to encrypt your home directory or the whole hard drive with an AES 256bit cipher. When your laptop is totally ...
1
vote
0answers
9 views

GEA3 direction clarification

GEA3 (and 4) stands for GPRS Encryption Algorithm. It's specified in 3GPP TS 55.216 (at least used to, until some idiot forced them to hide it because of "export restrictions" or some crap like that). ...
0
votes
0answers
16 views

Where partially homomorphic encryption schemes like BGN are used?

Schemes like Boneh, Goh, and Nissim are interesting, because of support of polynomially many additions and one multiplication. The algorithms are indeed simple https://eprint.iacr.org/2010/182.pdf ...
1
vote
1answer
43 views

Why aren't there FIPS level 4 devices on the market?

While searching for a secure USB to use, I came across the Aegis secure key, which has FIPS Level 3 (140-2) security. I believe that it's the securest flash drive on the market. I found that the ...
3
votes
1answer
73 views

Recommended Crypto Security Setup (Implemented Algorithms)?

Firstly I'm not a crypto expert, however I know how to use algorithms that other people have defined before in practical usages, that is, as long as they live up to their promises. The thing is that ...
6
votes
0answers
59 views

Can I use disk encryption and track my device at the same time, in case it's stolen or lost? [duplicate]

I would like to encrypt a single user profile but have been told EFS isn't the solution. I have a laptop that I leave in my bag and use for work and private purposes. I want to secure data in case my ...
2
votes
5answers
192 views

How secure is a password protected file?

I have a password-protected excel file that stores other personal passwords. Obviously there have been a number of ways to crack the password. community.spiceworks.com Where do you guys store ...
0
votes
4answers
202 views

Encrypting text data by replacing characters?

I have been thinking on this method but did not really get into it because I thought it was stupid to do for some reason, maybe because I've never heard of it and it's pretty obvious. But today I got ...
3
votes
1answer
62 views

Question about AES-CBC IVs

I'm writing a Java program that encrypts strings with AES-CBC encryption. (Eventually I'm going to add steganography functions too). As you are well aware, CBC needs an IV in order to encrypt the ...
1
vote
0answers
90 views

How to safely store/process secret key for JWT

After reading this: http://stackoverflow.com/questions/30089604/jwt-whats-a-good-secret-key-and-how-to-store-it-in-an-node-js-express-app, on how to store "secret key" to assign JWT tokens. I had ...
1
vote
2answers
59 views

Key-exchange over the network with more than two peers

Me and my team is developing a multiplayer videogame with a Client/Server-Topology. This secures the match from clients who have the intention to cheat because of server authority but still allows the ...
4
votes
2answers
214 views

How to decrypt the below encrypted messages? [closed]

My friend was experimenting with the encryption methods (self-made) to encrypt text using ASCII map. He wanted to try this idea whether this encryption can be broken and so shared an encrypted text ...
0
votes
0answers
19 views

How can I create many-to-one keys in Doctrine/Zend/PHP?

I'm using Zend with Doctrine 2 to store data in a database. For a given user, I encrypt the data with a randomly-generated key specific to that user, and encrypt the key with that user's password ...
0
votes
1answer
54 views

PDF encryption anomaly; version 1.5 using AES

I'm not sure if this is the correct forum to ask this question so please accept my apologies in advance if this is the wrong place. (I have already posted this in the Programmers section but I've yet ...
0
votes
1answer
29 views

Is it possible using a file level encryption in addition to TDE in Microsoft SharePoint?

For Microsoft SharePoint, TDE is a great encryption solution to keep databases encrypted. I've tried to find a possible solution to encrypt the files once more using an other level of encryption on ...
0
votes
1answer
73 views

ssh-keygen: How is the seed generated?

How is the seed for ssh-keygen generated? I expect it will take information from /dev/random and request supplementation with system activity if we have insufficient random bits. An Instructor ...
0
votes
1answer
80 views

Vicious circle with certificates - how to trust the server cert?

I have a java app on Android that needs to be able to communicate with a web server over ssl using an client x509 certificate (for encryption negotiation) - the private key is in the java keystore ...
0
votes
1answer
69 views

Securing data passed between two sites via a browser

I need to pass some data securely from one web site to another via a browser. A user visits site A and clicks a link there which takes him to site B; this could be just a link which would produce GET ...
8
votes
1answer
345 views

How can WhatsApp recover messages sent to a damaged phone?

My mom has an Android phone that fell in the water for a couple of seconds, around 16:30. She managed to disassemble the phone and turn it off. We both share a group that is end-to-end encrypted (all ...
-3
votes
4answers
213 views

Roll your own encryption - with a twist

I am familiar with Schneier's Law: Any person can invent a security system so clever that he or she can't imagine a way of breaking it. I have read the many posts on this exchange littered with ...
4
votes
1answer
103 views

Ways to generate symmetric and asymmetric keys

We are using Beaglebone Black based custom board, and want to use hybrid encryption for encrypting firmware file, i.e. symmetric for encryption big firmware file and asymmetric for encrypting ...
0
votes
0answers
102 views

Security of an IoT network using AES (LoRaWAN)

I am studying the security of LoRaWAN. Here is a simplified architecture of the network: As you can see, there are two keys: one for the network security (no mitm, no modificatiof the messages). ...
0
votes
2answers
127 views

I want to encrypt certain entries in a database. Is this a good plan?

I'm working on a web app and want to offer the users the option to "encrypt" their account. This wouldn't encrypt everything related to them in the database. Just certain critical fields. I've ...
1
vote
1answer
54 views

Offline Javascript and encrypted secret

When using Javascript online with the server, The server can provide a unique Key and Initialization vector for use in AES-CBC available in Webcrypto API. Each user has key allocated to them. The ...
2
votes
1answer
63 views

Telegram Visibility Into Secret Chat VS Plaintext

Background Telegram Messenger offers an "End-to-End" encrypted channel, with their home brewed MTProto, called Secret Chat. They have "Link Previews" by default in all modes, but Secret Chats, in ...
2
votes
1answer
85 views

How to find out if my MBR has Evil Maid code?

If Truecrypt Bootloader will remain visually the same, how can I find out if it was infected?
-1
votes
2answers
68 views

Store encrypted data locally on the phone that the Android and iOS app itself decrypts

I have an iOS and Android app where our "secret sauce" is a bunch of numbers (weights, actually) stored in a database. Our app uses these numbers to compare what the user of the app has given it, and ...
2
votes
0answers
18 views

Secure userserver authentication with authserver

So, lets say we have Bob, Alice and Peter. Peter is trusted by Bob and Peter has an authserver. Bob hosts a userserver and Alice wants to connect to Bob over an insecure channel. But Bob needs to know ...
0
votes
0answers
27 views

How to determine which form of encryption is used? [duplicate]

I have an application which is developed using classis asp. The password is encrypted in the following format - LHFJOJ1234 Can anyone tell me which format is this? I don't have the source code. So ...
3
votes
2answers
209 views

How to decrypt text when four first letters of the key are missing in Facebook CTF contest?

I am beginner in cyber security. Now I am participating on Facebook Catch the Flag contest. I have to solve following task: There is a key. But the first four characters of the key are missing: _ _ ...
11
votes
1answer
368 views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...
2
votes
1answer
79 views

What encryption is used by 1password?

I use a password storage application on my Mac called 1password. I was wondering if it encrypts the data it stores on my computer and decrypts it using a key made from my "one password" or if it has ...
2
votes
0answers
12 views

Multiple PGP keys on one server [duplicate]

I have a server on which we are planning to expire the current PGP keys later this year. Now we have several clients which are currently using that PGP key. We want to have another new PGP key pair ...
75
votes
10answers
8k views

Why even use a one-time pad if the key distribution is fully secured?

I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough". ...
4
votes
0answers
286 views

Ansible Vault - how does the encryption work?

I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher ...
-2
votes
1answer
76 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
4
votes
1answer
155 views

Protecting master password in memory

Assuming I want to enter master password only one time at the start of the program, how is this master password usually protected in memory after that? Is the encryption key after being derived from ...
-1
votes
2answers
71 views

How does digital signature algorithms work in a private / public key environment?

From the Wikipedia page on the subject, I get, on a theoretical level, how the process of encrypting and decrypting a message works. The article states that: In a public-key encryption system, any ...
1
vote
2answers
89 views

Does this method of password confirmation risk encrypted file integrity?

I'm trying to make a basic encryption/decryption script for personal use, and it works perfectly fine. I'm posting this in the infosec section because my question revolves around how easy it is to ...
0
votes
0answers
16 views

Which bytes in an OTA Command Package are encrypted with the KIc by 3DES CBC?

I have an un-ciphered OTA message in clear and I am trying to cipher it so it becomes secure data. The cryptographic checksum is already generated as part of the un-ciphered OTA message. I have the ...
0
votes
1answer
109 views

Public Key Encryption vs HSM for storing encryption keys

Let's say I have sensitive data in the database server that needs to be encrypted (i.e emails, etc..) and I want to make sure that in the event that the server is compromised, the attacker shouldn't ...
-1
votes
1answer
37 views

Map of Protocols to Encryption/Cipher Suite

I am looking for a mapping of all protocols (HTTPS, SCP, SFTP, LDAP, RDP, ect) along with the Encryption Protocols that can be used with them (SSH, SSL/TLS, ect) and if possible their Cipher Suites (...
1
vote
0answers
48 views

Are there any benefits in using VPN service for application with SSL pinning?

I understand how using a public VPN service can make network connectivity more secure in case of HTTP, or even HTTPS a without certificate pinning in place. Suppose we have a fat client application ...
0
votes
0answers
56 views

Is there a way to use clear key encryption for protecting media HTML5 media streams?

I am trying to understand EME with Clear Key encryption. I am using MP4Box. From the documentation here, you specify decryption keys in an XML file that is used to encrypt/decrypt your mp4 files. ...
-4
votes
1answer
101 views

Preventing someone to generate a public key from a private one? [closed]

From what I read, encryption algorithms such as RSA permits to generate the public key from the private one. Long story short, for a thesis I'm writing, I thought to solve a security issue with users ...
2
votes
1answer
51 views

Way to combine encrypted tar and encrypted symmetric key with which tar was encrypted?

We are using Beaglebone Black (AM335x) based custom board, so for firmware upgrades of the board we will be using an encrypted firmware image. As you would have already guessed, we will be using ...