Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
3answers
115 views

Can you have Secure encryption with a backdoor, and still be secure?

Is it possible to have an encryption algorithm/implementation that has a "backdoor", that also wouldn't introduce flaws into the encryption? For instance, if you have a master password, once that ...
-1
votes
3answers
62 views

Can AES encryption prevent modifying bits in a wireless protocol?

I'm building an application with NFC which is a wireless communication protocol. An attacker can modify bits in a wireless communication protocol. I want to prevent this. I know we can't prevent an ...
3
votes
2answers
82 views

Key Size vs. Block Size: In Practice

I've seen a lot of confusion between encryption key size and block size. I feel like I completely understand the difference between the two, no need to explain what they are. But it's when put in ...
1
vote
1answer
97 views

Secure backup on online Cloudstorage

i own a small private server (@home) with all necessary features for my backup purposes (Owncloud, SVN, GIT). My target now is to ensure the safety of my data in emergency cases like fire/flood. For ...
0
votes
1answer
73 views

Improving stateless REST API authentication token - or ditch it for database persistence?

I'm looking to implement stateless REST authentication into an API. I've been reading up on articles here, and have implemented an idea that works, but I was hoping to get some feedback on its ...
1
vote
0answers
39 views

Serpent Cipher 128bits (Example rounds on any plaintext/key) [migrated]

Is there are any possibility to see trace(example) of Serpent Encryption/Decryption on concrete plaintext/key example, (not code implementation) or at least animation of steps. During reading of ...
1
vote
0answers
68 views

Encrypt in C# program, Decrypt in android application By RSA Keys

I used RSA Encryption for sending message between Server and client. The server program implemented by C# and the Client is an android application. I want to know is it possible a message that ...
2
votes
1answer
73 views

The most trusted hard problem [closed]

Is there a mathematical formalism to rank the hardness of the hard problems? In particular I am referring to the sort of hard problems that are typically used in cypher system; such as factorization ...
0
votes
1answer
126 views

How strong is PDF security/encryption?

I want to securely convey a PDF document containing sensitive information from my system to another system. The latter is operated by a different person, whom I trust. However, this person does not ...
1
vote
0answers
56 views

Is it possible to encrypt Word Docs with something other than default?

AES 128-bit advanced encryption is fairly simple to break and was wondering if there was any way to use a more secure one? And if so - any suggestions?
2
votes
1answer
119 views

Is knowing the decrypted and encrypted data enough to find the key?

Let's say an attacker knows the encrypted content, the decrypted content and the algorithm used: can he get the key that was used to encrypt the content or does it make it easier to find the key out? ...
2
votes
1answer
65 views

Anonymiszing sensitive data in MySQL DB while retaining searchability

I have a MySQL database that stores sensitive (personal) data about individuals; and have been tasked with ensuring that this data is encrypted in some way to protect the individuals and their data if ...
-2
votes
1answer
76 views

I want to encrypt content on USB or SD Card [closed]

I want to encrypt the content on a USB or SD card that can only be decrypted by an app installed on any device or TV. When the USB is not connected to that particular app, it should not be accessible. ...
0
votes
1answer
59 views

Protection of Private Keys

I've used mail encryption products like Mailvelope in the past, where you have to create a key pair to encrypt/decrypt data. I understand you have to hand out the public key to others that want to ...
1
vote
0answers
46 views

NaCL: Encrypt file to multiple recipients

I am trying to understand the Networking And Cryptography Library (NaCL). Consider i have a file that i want to send to multiple recipients. PGP or S/MIME supports multiple recipients by encrypting ...
1
vote
1answer
38 views

How can I hide proprietary elements of test data in tests that are automatically run?

I am writing automated tests for a web application that will be run periodically over night, and I am running into a moderate security issue. In order to make the tests thorough, I am hoping to ...
1
vote
1answer
62 views

Mapping of plaintext and ciphertext in DES

The plain text and the cipher text have a one to one mapping. Given a pair of those, can there be multiple keys used to generate the same pair? Or can a particular plain text - cipher text mapping be ...
1
vote
1answer
69 views

Chat encryption system avoiding protocol sniffing and then key+decryption replay?

I'm working on a chat system and I want to add it some kind of security (not just HTTPS with SSL since I've read it can be sniffed and decrypted with a few tools). Now, my knowledge in cryptography is ...
0
votes
1answer
87 views

How to decode/decrypt strings of text [closed]

So I'm trying to decrypt/decode some text strings. I don't believe they're hashes because they vary in length too much and the software they are used for is able to easily decode them and display them ...
3
votes
1answer
182 views

How resistant is the iPhone encryption against brute-force attacks?

I just read the following paragraph in an article from the New York Times about Apple encrypting iPhones by default): Breaking the code, according to an Apple technical guide, could take “more ...
-1
votes
0answers
59 views

How do public/private keys work?

I have read "How does SSL/TLS work?" and "Public-key cryptography", and I know basically what happens when using a Public-key to encrypt/decrypt something. To sum up what I've read, A Public-key ...
0
votes
3answers
95 views

Is is necessary to encrypt the message digest?

In symmetric key settings, in order to provide the message integrity, we compute the hash of the message. The message along with the message digest is then encrypted. Is it necessary to encrypt the ...
1
vote
0answers
53 views

Secure self-concealing symmetric encryption (non-verifiable decryption)?

From what I observed using standard encryption tools such as OpenSSH and GPG, the decryption only succeeds when the correct password/key is provided (or at most a few others, in case of collision). ...
2
votes
2answers
132 views

Does a self-signed certificate offer more protection than a public key?

I'm having a hard time finding the practical benefits of transmitting a self-signed certificate over simply a public key. I understand that a self-signed certificate proves the integrity of the public ...
2
votes
3answers
86 views

AES Key Management / How To Swap Encryption Key

I'm currently using AES 256 for the encryption of my web application and the security policy context specifies that the encryption key must be replaced once every few months. When that happens what ...
1
vote
2answers
93 views

Does adding multiple recipients to an encrypted message decrease security?

Let's say you want to send the same GPG/OpenPGP encrypted message to 50+ recipients. Assuming everyone you send to is trusted, and there is no risk of any recipient leaking their secret key, is ...
0
votes
0answers
26 views

L2tp protocol security

do l2tp protocol is secure enough to use in unsafe home network ? protection from man in the middle ? i having a problems install openvpn in linux you think following that guide will offer me ...
3
votes
1answer
86 views

Does encrypting a setting in web.config actually provide security?

Does encrypting a value in the web.config file actually provide any real protection? It seems to me that any web app can read that setting. Yes that's more work than just reading the web.config file, ...
0
votes
2answers
180 views

What does 2^77.1 calls presented in a SHA1 attack mean?

Regarding the SHA 1 deprecation, I found this information here: http://blogs.technet.com/b/srd/archive/2013/11/12/security-advisory-2880823-recommendation-to-discontinue-use-of-sha-1.aspx I know ...
1
vote
1answer
43 views

Encrypt pdf by the server to prevent printing and copying

We are building a portal where users can upload few materials. we have been successful in using the command lines of linux to convert doc,ppts to pdf directly through the server but we are not able to ...
5
votes
3answers
415 views

Does Android encryption really prevent law enforcement access?

Google recently announced that in Android L encryption would be turned on by default: For over three years Android has offered encryption, and keys are not stored off of the device, so they ...
0
votes
2answers
109 views

Can we hide a constant hashed key used for AES encryption of a password?

Are there any methods in java to hide a constant hashed key which is embedded in a class? FYI, the key is used to AES encrypt a password used to authenticate a Web Service which would only take a ...
3
votes
2answers
62 views

Any advice on how to assure patients that a medical facility is well protected against identity theft?

My apologies if this question has been asked before. How does a medical practice assure patients that the practice follows excellent computer security practices? Conversely, how does a patient find ...
1
vote
1answer
108 views

Efficacy of self-made ransomware protection

I was recently wondering about how to circumvent malware such as the infamous Cryptolocker a while back and was wondering about the efficacy of having a set of files with known content in a known ...
-3
votes
1answer
78 views

What is the algorithm of bcrypt? [closed]

In many places I heard that people recommend to use the bcrypt algorithm to save passwords into database while creating web applications.I want to know what is the algorithm used to bcrypt a password ...
2
votes
1answer
51 views

Is there any asymmetric scheme provides signature with length of 30 bytes?

I want to send short messages to cell phones.Commonly a short message is no longer than 70 bytes. I need 20 bytes or more holding information and the rest bytes are for signature provided by ...
13
votes
3answers
1k views

Trying to understand why signatures in root certs “are not used”?

Taken from here: Don't worry if the root certificate uses SHA1; signatures on roots are not used (and Chrome won't warn about them. Why are the signatures not used? Are not root certificates ...
0
votes
2answers
64 views

Is my Password Hashing Secure or not?

I have recently created a code for hashing password. Can you please give your advice over the security of my code? The function takes a password, then converts it to a number. #include <string> ...
0
votes
1answer
91 views

How can I safely include the encryption key in the encrypted file?

I am encrypting text files using AES256 (no particular reason, that can easily be changed). Before granting access to a file, I need to verify if a party knows the correct key, but without necessarily ...
17
votes
3answers
2k views

Is SHA1 weak for SSL?

I noticed that today after I scanned a site on the Qualys SSL Labs site that SSL ciphersuites which use SHA1 are now highlighted as being "Weak". It seems this has just happened; I scan sites pretty ...
0
votes
1answer
68 views

Privacy concerns while traveling with HDDs [duplicate]

I'm traveling to UK for college and I'm bringing 2x2TB drives with me. I'm concerned about my privacy when going through the border as they might search the drives. So I came up with the following ...
0
votes
1answer
75 views

Encrypting the salt with password [duplicate]

Salts are stored in the plain text and readily available with the hashed passwords if the password database is compromised. What if we encrypt the salt using password itself? Doesn't it make offline ...
2
votes
1answer
148 views

Python implementation of AES and SHA256/512 that are FIPS-140-2 validated?

For security purposes I need to use AES encryption and SHA256/512 in my Django/Python project. I know there are various libraries out there that provide different encryption methods but I can't seem ...
0
votes
2answers
135 views

What is actually the purpose of encrypting the values in a cookie?

I was researching on internet security. When I reached at section Cookies, I happened to read that the values inside a cookie are generally stored only after encrypting them. But an encryption can be ...
1
vote
1answer
130 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
23
votes
3answers
2k views

Tell people that I can encrypt emails

I know that it is still not very easy to use PGP for an average user. However, the situation is improving (there are some easy plugins that can even nicely integrate into your GMail webmail). In ...
1
vote
1answer
113 views

Android support for TLS 1.1

Do anybody know from what version of Android did TLS 1.1 started to be supported directly by the OpenSSL version preinstalled in the system?
2
votes
1answer
72 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPSec. Is that more secure or these types of encryption have nothing ...
0
votes
2answers
113 views

How do I know that my connection is really encrypted?

I am using a VPN to ensure to encrypt my browsing. I wonder though if I could check somehow if the datastream really is encrypted?
1
vote
2answers
143 views

Opinions on my “Encryption at rest” implementation idea

Ok so basic overview of the environment I'm envisioning: Webapp w/ db backend storing sensitive data, possibly phi; standard user:pass auth due to unteachable users. My idea was to encrypt row data ...