Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
2answers
53 views

Securing HSM-stored symmetric data encryption keys (AES) in memory on server

My project requires me to encrypt sensitive user data using symmetric data encryption (AES). I will be storing the AES key (DEK) in a HSM-based key management service (ie. Azure Key Vault / AWS KMS) ...
3
votes
2answers
105 views

Secure Android app development [closed]

I'm beginning with Android App development and I want to make sure that I'm taking the proper security precautions since most apps will handle sensitive data. What security precautions should be ...
1
vote
3answers
92 views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...
1
vote
4answers
100 views

About the AES algorithm key and ciphertext

I have the two following questions about the AES algorithm: A- Does the key need to follow any specific pattern apart from length or can it be a completely random string? So, if I select 16 random ...
1
vote
3answers
112 views

Trusted hardware password manager

I feel like I have a very common problem. I have too many passwords to remember, as well as PINs for credit/debit cards, access codes for doors at my workplace or combination locks. I don't seem to be ...
0
votes
0answers
9 views

Encryption that could have multiple decryption key [migrated]

The title looks strange but it is to deal with this situation. The data we have should only be accessible by our end user and data administrators, not anyone else. Ideally, each user should have ...
0
votes
0answers
7 views

SQL server standard edition encryption [migrated]

I'm trying to look into what kind of encryption I can do with SQL server standard edition from 2008 forth, so far I know that I can't use TDE as that's part of EKM. When I look up this topic I'm ...
9
votes
3answers
216 views

How Should WiFi Passwords be securely stored on IOT (embedded) devices?

Some devices need to store and (re)use a password (not the hash) like your mobile phone using home wifi, SmartTV, etc; How should they store the password on their flash storage? So that a person who ...
1
vote
1answer
116 views

Saving encrypted username password in session

I have Node.js server which serves an app. In that app you could be asked to login. The login credentials would be authenticated against LDAP. That server could request/post data from other servers ...
1
vote
2answers
88 views

Is it reasonable to make mandatory inside an organization (in the internal network) that all traffic were encrypted?

Is it reasonable to make mandatory that all traffic were encrypted inside an organization (in the internal network)? Usually, in the LAN of an organization some protocols are plain text, for example, ...
2
votes
1answer
67 views

What effect on internet crime did the more recent developments in encryption have? [closed]

I'm doing a presentation on the effect of encryption on internet enabled/based crime, what would people say is the largest development in encryption of say the last 5-10 years what and what kind of ...
1
vote
1answer
57 views

How to only let end user to access data in a web app

I've been read a lot about common encryption methods used in a django app. However, my requirements are very different. I am looking for a way to encrypt my web app data so only the owner of the data ...
3
votes
2answers
171 views

How to protect files from someone who has access to the computer that contains those files?

Basically, I have a Raspberry Pi that is installed in a car. If the car gets stolen, how can I make sure that the files can't be decrypted? The Raspberry Pi contains a Python script that records ...
1
vote
1answer
103 views

How does encryption strength make a difference to an attacker

Take for example I have my social security and other personal information stored as a string that I am trying to encrypt on my local drive. My first method of encrypting the string is to use a ...
3
votes
0answers
219 views

Security for Hospital IT

I'm developing a program in Java intended to be utilized in a hospital. The system uses RMI internally between workstations and the server program. The program would be installed on the hospital's ...
1
vote
0answers
65 views

Can I decrypt a DiskCryptor-encrypted hard drive using Veracrypt?

I have a hardrive I encrypted with DiskCryptor back when I was using Windows. Now that I have Linux I want to decrypt the hard drive but it turned out DiskCryptor is not available for Linux, whereas ...
1
vote
1answer
63 views

what is the best way to know if the entered decryption key is correct?

I was searching for a way to store the encryption key of AES_ENCRYPT and found a good answer here: where to store a key for encryption However, now I am trying to use "Type in the encryption key when ...
0
votes
0answers
18 views

AWS S3 Serve-rside Encryption - Client Provided Keys PHP

It is a bit strange to me this isn't a commonly discussed topic yet but I am working with an AWS S3 storage server trying to implement server-side encryption using the option of a client provided key ...
2
votes
1answer
113 views

What kind of encryption or obfuscation is this? [closed]

I found this script on a web page who attempted to change my router's DNS configuration. But I can't understant what kind of encryption or obfuscation is used. Here, a sample of the code on the ...
0
votes
1answer
39 views

OpenSSL gmail - receiving Please log in via your web browser and then try again

Using openssl as below when I do EHLO auth login and then enter my username and password I get the following error: Please log in via your web browser and then try again. Learn ...
4
votes
2answers
69 views

Is a Lucene search index effectively a backdoor for field-level encryption?

To protect personally identifiable information (PII) in a SQL database, we have implemented field-level encryption. However, we need to allow fulltext search against some of those data. One idea ...
0
votes
0answers
32 views

Encrypt and keep sensitive data in MySQL [migrated]

I have a process that parses a JSON API and loads the data into MySQL database. I have some sensitive data that should be encrypted, such as firstname, lastname, email, zip, address, credit card ...
0
votes
0answers
18 views

User key User Certificates

Why would I find these in someone's security settings? I was going through my moms phone when I noticed some type of encrypted certificate. Figured out one of the two passwords required for access. ...
2
votes
2answers
134 views

Is my sending of encrypted information secure?

Please bear with me as I am not an expert in security. I have a server and a client. On the server I am encrypting a very secret message (using AES256-GCM to hide the information and protect it's ...
3
votes
1answer
67 views

How can I mitigate against chosen plaintext attacks for AES ECB?

I am developing on a platform where my only encryption option uses AES ECB. The encryption is used to protect parameters that the user can set, and so it susceptible to a chosen plaintext attack. ...
2
votes
1answer
74 views

Are their any consequences to encrypting a one bit message? Does size/variability matter?

I'm trying to understand encryption a little more and couldn't get past this one nagging question. Let's just say I happen to want to send a one bit message to someone over an encrypted channel. I do ...
0
votes
1answer
29 views

What's the recommended way to store at-rest, symmetrically encrypted customer data?

I have a requirement to store at-rest, symmetrically encrypted customer data in a database. What's the latest recommended way to do this? My research has led me to this: Generate 8 random bytes for ...
1
vote
1answer
32 views

PHP BLENC extension security concern

PHP BLENC is a extension that allows PHP developer encrypt their code, protect their ideas and avoid illegal copy. Although BLENC allow developer to define the main encryption key in source(in the ...
0
votes
1answer
48 views

Which ciphers produce random cipher text?

I already know AES produces a "random" output. 5e4e6440826d6afc4535fbf078455f791159701a9df624ddd4e4dda84523b6a7 Its cipher-text doesn't follow a pattern and is indistinguishable from noise. Is ...
12
votes
2answers
319 views

How difficult it was to crack Navajo's language during WW2?

It is well known that during the WW2 America employed native American, namely Navajo people, to "encrypt" their radio communications. I read some time ago (I don't remember where) that their language ...
3
votes
0answers
38 views

Is it possible to perform encrypted telephonic calls in Android? [closed]

When I say that I need to perform encrypted telephonic calls to another person then please understand that I do not want an encrypted VoIP call which is routed over the internet. What I want to ...
1
vote
2answers
57 views

Best encryption mechanism for message storage/exchange in client/server application

So I am building a client/server system that is similar to email idea where clients exchange messages through the server with the following main requirements (note that the clients are pre-registered ...
0
votes
1answer
34 views

Wi-Fi Protected Setup PIN method EAP Messages

Let's look at this example: router (access point) has 8-digit PIN (printed on label) and laptop wants to connect to network using WPS PIN. So user give router's PIN into laptop and laptop sends PIN to ...
0
votes
1answer
42 views

Encryption tool that supports multiple separate decryptions?

Is there a tool that will allow me to encrypt n plaintexts with n corresponding keys such that: the cipher text is one file with no clue as to the value of n. decrypting with key i (1<=i<=n) ...
3
votes
2answers
47 views

With openssl des3, what are the passphrase parameters?

I'm using OpenSSL's des3 tool to encrypt a file, e.g. openssl des3 -salt -k SUPER_SECURE_PASSPHRASE < inputFile > outputFile Everything's working, but now I have to choose a final, fixed ...
6
votes
2answers
69 views

HMAC with or without data encryption?

I'm in the process of developing a system that periodically transmits a small amount of data (16/18 bytes), where the only part that will change is a 4 byte counter that will increment for each ...
1
vote
1answer
110 views

Encrypting password string in C++

I have a client server based application where user is presented with login screen in the client. It then passes the credentials to the server which does the authentication. Client-server ...
0
votes
0answers
19 views

What stops a man in the middle attack from intercepting SSL encrypted data and sending it with a spoofed ip address to the server? [duplicate]

Say you have a client that connects to a server using SSL. The server, upon receiving a certain command, launches a missile. Then say there's someone in the middle of the connection listening to the ...
2
votes
2answers
79 views

What does it mean to have authentication without confidentiality or authentication without encryption?

I came across these functions m+EeA(H(m)) (for authentication without confidentiality) and m+H(m+k) (for authentication without encryption) and I'm having a bit of a difficult time understanding them. ...
0
votes
1answer
34 views

BBM pin to pin security

If a BBM message is intercepted over unsecure Wi-Fi and the PIN of the intended recepient is known. Can it be decrypted easily.
5
votes
3answers
148 views

Public Key Encryption instead of passwords

As an alternative to using passwords, customers could be provided with individual asymmetric-encryption key pairs (i.e. a private key with associated public key), which could be used to validate their ...
0
votes
2answers
43 views

Ciphertext-only vs known-ciphertext attack

From what I understand, "ciphertext-only attack" and "known-ciphertext attack" are both synonyms for an attack in which the attacker knows a number of ciphertexts and only those ciphertexts, e.g. has ...
0
votes
1answer
73 views

Will the result of HTTPS and SSH encryption of the same data be identical for two separate requests?

If I was to request an image over HTTPS and record the packets over WireShark and then inspect a peer's Wireshark and look for the same packets, would I be able to see if they requested the same file, ...
2
votes
1answer
70 views

Secure data by encrypting and rewriting on same file

I'm working on a project to Encrypt files using AES encryption with a key generated from SHA-256 from a keyword. My idea to claim this was to first : read all bytes from a file second : encrypt ...
0
votes
1answer
42 views

How to encrypt data on flash drive to decrypt on another system? [closed]

I have a Mac OS X and a flash drive and I would like to store some files as a backup to carry with me in case I completely lose access to my computer (e.g. theft). I would like to encrypt these files. ...
3
votes
0answers
68 views

Method for securely removing files from a solid state drive

I've thought of a method for securely erasing single files on a solid state drive. This method will work only if the drive is encrypted, and it will work even if someone cracks the encryption key for ...
7
votes
1answer
100 views

Encrypting individual files on OS X

I am about to go paperless, and I want to protect the documents that I scan. The use case is that I'll be scanning paper documents, encrypting each file, and storing them locally and on various backup ...
7
votes
2answers
286 views

Building a backdoor for full disk encryption

I have all my data encrypted on my laptop. All the backup hard drives are also encrypted. I know all the keys by heart and I could pick up any disk, enter the password and restore everything with it. ...
0
votes
2answers
47 views

Asymmetric Encryption for Multiple Recipients?

Let's assume an arbitrary group of people who hold a key pair and who make their public key online accessible. Let X, A, B and C be arbitrary people from that group. Now X wants to encrypt a message ...
20
votes
2answers
1k views

Does holding an AES-encrypted string and its cleartext from a database help an attacker in decrypting other parts of the database

I have a question regarding Encryption. Say an attacker stole my entire database. In that database all the data was encrypted. If the attacker took one piece of encrypted data and for some reason knew ...