Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

-1
votes
2answers
47 views

What are the advantages in using LUKS + hardware encryption on SSD?

I can't see what the advantages might be, but I think this would slow data transfer down while providing no extra protection. Am I right or am I overlooking something?
1
vote
1answer
71 views

How to encrypt columns in a database and be able to easily change encryption key

I have several fields in a database table I would like to encrypt, but I would like to do it in a way that would allow me to easily change the encryption key every n months for security reasons. My ...
2
votes
1answer
65 views

multiple encryption layers and removing them in any order?

I was just thinking (through browsing the site) How possible is it to encrypt data, then encrypt it a 2nd time and then after encrypting it with a 2nd layer, remove the first layer leaving the second ...
1
vote
1answer
37 views

On Mac OSX using FileVault 2, are all user's files unencrypted if the current user has rights to login from cold boot up?

I am taking my Macbook into an Authorized Service Provider to run diagnostics on battery performance and my data is encrypted using FileVault 2. I am assuming the technician(s) will want the ability ...
3
votes
1answer
80 views

Decryption using GRUB and TPM

I'm trying to plan security routine for my new Linux install and few questions came up during searching for solution which meet my needs. Is it possible to use private key from TPM in GRUB to ...
2
votes
2answers
61 views

Clarification about IV in PBKDF2 to generate encryption key

I've realized that the following implementation isn't truly safe: $pb = pbkdf2('sha256', $_POST['pass'], "enc_salt", 100, 100); $d = openssl_decrypt ($data['container'],'aes-192-cbc', $pb, true, ...
0
votes
2answers
114 views

What stopping someone from offering distributed and encrypted email? Just like Bitcoins

Basically Email service that is ran over a network, so it's not owned by any one entity. Everyone can use it and send email to someone else. All messages travel through a web of interconnected ...
2
votes
1answer
48 views

What is the output length of CBC with zero input?

Given this formula for CBC encryption from 6.2 The Cipher Block Chaining Mode what is the output length of CBC if plaintext P is of length 0?
6
votes
1answer
76 views

What real life scenarios require separate end user certificates for Signing and Identity?

Based on this question, I'm interested in any rational argument that would support the idea of maintaining separate signing and authentication certificates. Conventional logic & wisdom says there ...
6
votes
2answers
148 views

Protecting my encryption algorithm if the attacker knows the key

Today our programming professor challenged us to make a text encryption program: we will hand him a program that only encrypts (not the source code), plus a ciphertext generated by it. We win if he ...
2
votes
2answers
27 views

Standard (or solution) for securing files in a point-to-point integration

I'm looking for a relatively light weight way to secure both integrity and confidentiality for files being uploaded in a point-to-point integration. The use case is uploading batch files for ...
2
votes
2answers
40 views

DEK, KEK and Master keying - simple explentation

This article is intended to be a simplified explanation sans drill-down for people wanting to understand the concept terms. What is DEK, KEK and MEK/Master key ?
2
votes
1answer
48 views

Is a Fernet token's timestamp a security risk?

A Fernet token has the following format: Version ‖ Timestamp ‖ IV ‖ Ciphertext ‖ HMAC As the above shows, the timestamp is not part of the ciphertext, so anyone can read the time the token was ...
2
votes
0answers
39 views

Is there a multiple asymmetric encryption algorithm, which requires all private keys to reveal the secret? [migrated]

I am looking for an asymmetric encryption algorithm, which allows to encrypt a secret with multiple public keys, but to reveal the secret all private keys must be used. You shouldn't be able to tell ...
1
vote
0answers
45 views

A Solution for Block/File Encryption that is Corruption Resilient? [closed]

Question: What encryption features/(configuration options) are implemented that mitigate issues with device/block corruption? For example, if the external hard-drive gets dropped, the damaged ...
3
votes
3answers
123 views

Should traffic between two hosts in the same data center be encrypted?

We have two hosts, theoretically in the same data center. The two machines are hosted at Online.net. We're having a bit of a debate: should the traffic between the two hosts be encrypted. The traffic ...
2
votes
1answer
43 views

Difference in size avaialbe in encrypted volume [closed]

I was making a volume with trucrypt and I set the size to be 12MB. I tried copying 10 files totalling 7.13MB (on Disk) but got an error saying I did not have enough space. Why is this? Is it because ...
1
vote
0answers
58 views

How can I distribute decryption keys to servers? [migrated]

I'm trying to implement user-folder encryption (as opposed to full-disk encryption) on some Linux servers in a data center. I don't want to store the decryption key in plain text on the servers ...
3
votes
2answers
70 views

Is it possible to construct a specific AES collision?

Suppose I have a plaintext message P, and I encrypt it using key K to get ciphertext C. It's trivial to find a different plaintext message P' and a key K' so that the encryption results in C: just ...
5
votes
2answers
86 views

Encrypting Data Without Sacrificing Query Performance

We're building a cloud web app backed by a multi-tenant db. To maximize security we plan to encrypt each customer's data with a separate key. The problem is querying. Say they're in the report ...
8
votes
2answers
384 views

*NIX shadow file password format

I'm trying to get shell access to a router and have managed to retrieve its /etc/shadow file: root:$1$$N76hdwGfg11g0KdKbtyh21:0:0:root:/root:/bin/bash I've tried to use john to crack it but ...
5
votes
2answers
59 views

Understanding digitial certifications

q1) Does that mean that every time information is exchanged, both the original data + digital certification is sent? Meaning data + signature for each and every exchange. q2) Can any kind soul here ...
1
vote
2answers
113 views

How to make sure my data is secure even if someone gains physical access?

I've been reading up on how to secure my data if someone has gained physical access to the machine, e.g. stolen it. And that seems like a very hard thing to do, as indicated by a number of posts. It ...
1
vote
1answer
43 views

Create Public Key using OpenSSL instead of PuTTYgen for PKCS#8

I'm trying to create a public key pair for ssh-rsa authentication. If I'm using puttygen.exe, the "OpenSSH authorized_keys file" string looks like this: "ssh-rsa AAAAB3 ... 6yIK9Nbw== ...
1
vote
1answer
94 views

Decrypt a file by knowing the original content [duplicate]

We had some ransomware get into our system a couple of weeks ago, and it has encrypted a large amount of our files. I am wondering, is it possible to figure out an encryption key if I know the ...
1
vote
0answers
46 views

Are there any “best practice” encryption tools for these classifications? [closed]

I appreciate there are different requirements when it comes to protecting data – however to try and get a better feel of the security landscape.... ...when considering the CIA triad: ...
2
votes
1answer
52 views

Hushmails “Secure Forms” & HIPAA

I just picked up a job for integrating Hushmail's Secure Web Forms into a medical website. The forms will submit patient's (PHI) data to Hushmail's servers, encrypt the data, and then send it to their ...
-3
votes
1answer
102 views

Is it possible for someone to read Gmail messages with a man in the middle? [duplicate]

Assuming these hypotheses: 1) Your account isn't hacked (hacker has not entered your account directly) 2) Gmail encrypts via SSL end-to-end 3) The hacker is not Gmail or Google 4) There is no ...
2
votes
0answers
56 views

Vault Secret server best practices

Recently Hashicorp released a secret management solution called Vault. Which is a free and open source general secret storage, acting as a vault for passwords, encryption keys, and hash salts. I am ...
1
vote
0answers
18 views

Are all homomorphic encryption schemes not CCA secure? [migrated]

Homomorphic encryption is hyped by computer sciences because it offers great potentials. For example you can perform cloud based calculation while nobody gets to know you data. I am wondering if ...
2
votes
1answer
52 views

Is it secure to use pbkdf2 for both password hashing and key generation

I'm writing a password manager, right now for each individual site, I already used master password + random salt with PBKDF2 to generate encryption key to encrypt its password (each site has its own ...
2
votes
1answer
69 views

How to implement encrytion/decryption system using IV between mobile app and web service

In my app we are going to send encrypted data to the web service. I am using the following code to encrypt and decrypt the data - public class DecEn { private static final String password = ...
2
votes
1answer
98 views

Is it insecure to provide a hash of an AES password?

I have made some software that encrypts and decrypts files using AES. I was wondering if it is safe to write a hash of the password to the file so that the program can check if a password is correct. ...
35
votes
8answers
5k views

How does malicious software encrypt victims' files?

Encrypting a file to me is akin to dealing with a very long string, feeding it into the hashing or encryption function to get another long encrypted string (or a hash in the case of hashing). This ...
1
vote
0answers
21 views

Reformatting drive from a GUID partition to an MBR partition [migrated]

I understand that Truecrypt is not compatible with an GUID partition but that is the limit of my knowledge. I am currently using a system that has a GUID partition but doesn't have bitlocker ...
2
votes
1answer
76 views

Why am I getting the message that Security Stack Exchange is only partially encrypted? [closed]

I realize that this is an information website but it does concern me a bit that I'm getting the message that this website does not supply ownership information. Does this mean that my posts can be ...
1
vote
3answers
77 views

Best method for securing text based messages [closed]

If I wanted to use a device for the sole purpose of sending and receiving text based messages, could it be done so that the messages from A to B are as secure as possible, the information is easily ...
4
votes
2answers
149 views

Is storing encrypted data in a database futile?

The way I see it: there are two ways to encrypt data for a web app. 1) Store a single encryption key on the server, and use it to encrypt / decrypt data at runtime. The obvious issue here is that if ...
3
votes
2answers
48 views

Requirements Placed on a User of a FIPS 140-2 Validated System

Per customer requirements, I am working with a FIPS 140-2 validated network switch that is actually running in FIPS mode. This guarantees that any cryptographic operations the device performs will be ...
0
votes
2answers
91 views

Could a compromised root CA impersonate any SSL certificate?

My question is about MITM attacks against https and how those would appear to the end user. Suppose a trusted root CA were compromised / coerced into producing fraudulent SSL certificates. What would ...
1
vote
2answers
58 views

Methods to keep an autonomous log with high integrity

I'm writing a .NET desktop application that is used to send orders to a server via a REST API. To avoid leaking of our authentication token I have made it so that, when used for the first time, the ...
1
vote
2answers
108 views

Is it feasible/possible to have encrypted data that looks unencrypted/innocuous?

i.e., could I send "Let's rob the store at 9 tonight" so that it is impossible to see what I'm saying, but it doesn't look like gibberish and obviously encrypted?
0
votes
1answer
47 views

Identify encryption algorithm for .enc files

I need to identify the encryption algorithm used to encrypt some files. I have the key, but I can't decrypt it using OpenSSL, because I don't know what algorithm was used to encrypt it. Is there any ...
0
votes
1answer
40 views

Sharing Derived Unique Key Per Transaction (DUKPT) Base Derivation Key (BDK) with a partner

Assumptions: We have devices out in the field injected with keys derived from our one and only BDK. The devices encrypt data using the injected derived key. All our devices connect to our server ...
1
vote
1answer
70 views

Understanding Key Serial Numbers (KSN) in Derived Unique Key Per Transaction (DUKPT)

I have a number of questions regarding Key Serial Numbers (KSNs) in DUKPT: KSNs are 8 - 10 bytes long. Older implementation are 8 bytes whereas newer ones are 10 bytes. Do I risk being incompatible ...
-4
votes
1answer
50 views

Is it true that breaking into the https padlock settings on a web page is easy to do? [closed]

I found some posts on this forum that explained that https settings are possible to crack. see here. Why is it possible to sniff an HTTPS / SSL request? And here is another post that mentions ...
2
votes
3answers
134 views

Securely storing bank account details in database

I am developing a service that will involve the direct debit of customers' accounts on a routine (weekly, monthly, etc.) basis, and so I'll need to store their information (BSB/routing number and ...
0
votes
1answer
53 views

Decrypting SSL traffic for Security Onion at or before the interface

I have Security Onion installed and doing full packet capture on my home network. I also have a firewall (pfSense) which does my routing. I have Security Onion sitting just behind my firewall and ...
1
vote
1answer
49 views

Secure connection between two clients with shared secret

I am creating a system where there are multiple clients, each of which has a secure connection to a central server which could pass out shared secrets to each of them. I could be wrong, but I am ...
1
vote
1answer
58 views

Cloud-based IM protocols / services saving messages encrypted on server which is decryptable only by user? [closed]

I am looking for a cloud-based (i.e. not end-to-end) secure IM protocol or service. The first one comes to my mind is telegram. Here is a quote from telegram's privacy policy: Cloud Chats ...