Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

-1
votes
6answers
2k views

How to prevent illegal file transfer or copying of video files from a PC? [closed]

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
13
votes
5answers
2k views

Why does IV not need to be secret in AES CBC encryption?

According to Wikipedia, the initialization vector (IV) does not have to be secret, when using the CBC mode of operation. Here is the schema of CBC encryption (also from Wikipedia): What if I ...
3
votes
2answers
82 views

Does TLS rotate the shared secret periodically?

After the initial shared secret is agreed upon between the client an server through the TLS handshake does the shared secret get rotated periodically ?
1
vote
0answers
62 views

Android Rooting and Evil Maid Attacks

I'm trying to learn more about full disk encryption (in the context of a Linux based server) and what schemes offer true security and which only offer the illusion of security. As I understand it, ...
0
votes
2answers
54 views

Replacing files with infected files on anonymous ftp server

I am creating a new question as i now have another question which was raised from a previous answered question post. What im trying to figure out is would this scenario be possible. I have an ...
2
votes
1answer
78 views

Is storing passwords encrypted with GnuPGP on an anonymous FTP server safe?

I would like some advice on a method of storing passwords to a database on my anonymous FTP server. Basically I have login details for a few trusted users to a database server stored in a text file ...
0
votes
0answers
3 views

Why ecryptfs still remain in mtab? [migrated]

I use ecryptfs for encrypted lxc container container start ok and stop ok But i see even after stop this line /var/container-lxc/face/rootfs.crypt on /var/container-lxc/face/rootfs type ecryptfs ...
8
votes
4answers
554 views

Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?

Since Whatapp started end-to-end encryption with an option for users to verify keys, many government security agencies, like the Indian one, red-flagged such use of encryption. Now, Yesterday the ...
1
vote
1answer
67 views

What is the best practice to secure an unattended Raspberry Pi?

I'm working on a project which involves mounting a Raspberry Pi on a self-moving vehicle. I'm looking for the best way to encrypt the Pi (entire file-system, swap, etc.), with the minimum possible ...
3
votes
1answer
112 views

Is there readily available encryption algorithms for current computers, that is safe from quantum computers?

Is there readily available encryption algorithms for current computers, that is safe from quantum computers? I know a bunch of currently popular encryption algorithms that are safe from current ...
0
votes
0answers
28 views

SQLCipher and PRAGMA key on iOS

I'm a bit confused as to how SQLCipher handles the PRAGMA key provided for encrypting the SQLite database For background: I'm looking at options for encrypting application data at rest. From the ...
7
votes
3answers
1k views

What are the disadvantages of using public key cryptography when encrypting files? [duplicate]

I am wanting to encrypt a file with my public key, my friend told me that this is not a good idea but did not explain why. Can someone explain please.
1
vote
1answer
94 views

Should the RTP feed from a surveillance camera be protected?

I see a lot of camera system and they're either using RSTP over RTP or just RTP. Most of the times they are on straight HTTP for the login, some will be on HTTPS, but unless forced (which I have ...
4
votes
1answer
49 views

Transport Layer Encryption vs. Application Layer Encryption

Can anyone tell me the key differences between Transport layer encryption and Application layer encryption and outline example use cases where each are most appropriate? The research I have done so ...
0
votes
1answer
55 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
1
vote
0answers
73 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
-1
votes
0answers
12 views

How can you figure out which encryption was used just by looking at the data? [duplicate]

I have 1500 lines, which were encrypted (by a random encryption method) and then encoded using base64. Let's say I can easily write code to decode the base64 strings. After that I get the encrypted ...
2
votes
2answers
107 views

How does an encryption master key work

Apparently the 'secure' cloud-encryption service BoxCryptor supports master keys for encrypted files. Decrypt every file which is accessible by any member of your organisation. How would a ...
3
votes
1answer
75 views

Security of cellular-connected devices

The EFF Secure Messaging Scorecard lists a number of apps that meet all of its security criteria. So assuming that end-to-end encryption is accessible for the majority of people in countries in which ...
3
votes
1answer
140 views

How is encryption different for Windows yet they are identical?

I right clicked on C:\Users\USERNAME and did advanced -> enable encryption. On one laptop it turned green. The other it shows an icon on the files with a lock. What is the difference between these? ...
2
votes
2answers
87 views

How to know when an OpenSSH rekey occured, and how to trigger one?

I have a twofold question about OpenSSH rekeying. I use OpenSSH 6.4 on the server side and the connection between client and server is a SSH2 connection. The questions: How do I know when a rekey ...
-5
votes
1answer
76 views

What is AES 256 bit encryption? [closed]

I was looking through some apps to store my passwords in on the App Store when I found one that boasted an "AES 256 bit encryption system". Now that sounds all very good and well, but that doesn't ...
5
votes
3answers
65 views

Asymmetric encryption and signature performed by hand

There are some methods of encryption so easy that you can do them be hand, but is there an easy(ish) method of private & public cryptography and signing that a human can perform it by hand? The ...
3
votes
1answer
131 views

Authenticate tracking device with TCP server

I am building a tracking device and am looking for a secure authentication method to use when the device wants to establish a connection to the server. The server is a TCP server that we open a ...
2
votes
1answer
52 views

Is EFS FINRA and SEC Acceptable

I'm trying to search in their manual but there is nothing explicit being mentioned as to what type and how encryption should be done. Can I assume that if I use EFS on the entire USER directory that ...
0
votes
1answer
25 views

Hashing and signing partial data in payload

I'm hashing and signing part of a payload prior to HTTP Posting from a mobile device to server side. The payload contains of about 7 data elements and only 3 of them are hashed/signed using a private ...
-1
votes
1answer
116 views

CRC-96(ZIP) decryption

Is there a way to decrypt CRC-96 encrypted string? I am testing a web application which stores the password in the database in CRC-96 encrypted format.
0
votes
1answer
145 views

How does the Signal Protocol, used by WhatAapp, work?

I want to understand the process of the Signal Protocol. I have google it, but I am unable to find any good article or tutorial. I want to understand the basic definition and functionality of the ...
1
vote
1answer
92 views

AES step by step

I can't seem to find an AES tutorial that starts from Unicode to Cipher text. All of the tutorials I found starts with 128 bit block already. Also, where do I start or what topics do I have to start ...
1
vote
1answer
59 views

Client-side encryption using public-key

My situation: Login password from a POST request is left in browser memory in clear text as long as cache is not cleared (manually/closing browser). Connection is HTTPS. Possible Solution: ...
3
votes
2answers
134 views

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack ...
0
votes
0answers
11 views

USB memory stick automatic encryption [migrated]

Is there any commercially available USB drive (memory stick) that will automatically encrypt any file(s) copied to the drive, without needing to install or execute special software on the connected ...
0
votes
1answer
28 views

AES-CTR with PBKDF2 for IV for file archiving at server. Is this ok?

I have tried to grasp enough of encryption/hashing to be able to implement a secure storage for files, server side. Once I have it down to reasonably safe I'll go over it with an expert. There is no ...
0
votes
1answer
69 views

What's Google Inbox request/response obfuscation skill? [closed]

I Inspected Google Inbox network resources via Chrome Developer Tool. I saw some request/response payload and result. This object type is not readable for human. I've never seen this kind of ...
5
votes
3answers
122 views

Encrypt Items With Single Key or Use KDF+Salt To Encrypt Each Item?

I'm currently planning the development of a system where extremely sensitive information for individual users would be stored. There are currently two approaches being discussed. In order to make it ...
1
vote
0answers
31 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
0
votes
0answers
81 views

Should I blur the cached snapshot of my app?

I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. ...
0
votes
1answer
95 views

Is it possible to to encrypt multiple messages with multiple keys and get only one cipher?

I want to have cipher which when people decrypt it with their own key, get different meaningful messages. Is this possible at all?
6
votes
1answer
247 views

Are RSA Key Pairs unique?

I generate RSA key pairs mostly using the following command: ssh-keygen -t rsa -b 4096 -C "someemail@hostname.com" which produces a public-private RSA key pair. If I run this command again and ...
1
vote
0answers
54 views

Key Hierarchy and key Encryption

If i have two 56-bit DES keys, and I use these two key to encrypt a 256-bit AES key. Like this: K_AT encrypts K_BT and K_BT encrypts K What is the effective security of key K? Is it 2 X 56 Bits?
1
vote
2answers
74 views

Is it possible to find the salt?

I have this PHP code with me : $auth = md5($username.$password.$salt); I have a dummy value : $username = user $password = password And I also have the resulting MD5 Hash : ...
0
votes
0answers
13 views

Does windows still use it's software based user keys when TPM-based EFS is enabled?

I have an infineon TPM installed, with ownership taken, and EFS enabled with the TPM taking control of EFS for me. I do know that regular EFS uses the windows user cryptography/login password to ...
0
votes
0answers
70 views

For multiple clients it's better symmetric or assymetric encryption?

I'm a newbie in the encryption world so I'm here for asking which is the best solution between Symmetric and Asymmetric encryption. In our use cases, we have multiple clients that must be ...
0
votes
1answer
37 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
0
votes
3answers
120 views

Can you NEVER be 100% sure you decrypted a message?

Put in simple terms, for most encryption algorithms: can't you technically ever be sure you actually decrypted something? Sure, if you decrypted a word document and MS Word can open it you've got a ...
5
votes
1answer
103 views

Wasn't WhatsApp messages already encrypted?

According to this article, which was written in 2014, WhatsApp had partnered with Open Whisper System to make its (text based) messages encrypted. So what's the big change now that Whatsapp's ...
0
votes
0answers
24 views

Cryptography and key exchange [duplicate]

Can someone please explain the Diffie-Hellman key exchange for me. I have been studying it but I don't actually get the concept
7
votes
5answers
190 views

Secure application data transmission via SMS channel

There are mobile banking applications that use SMS channel to communicate with their server. Some of them offer both internet and sms channels which the customer gets to choose from. While there's ...
0
votes
1answer
49 views

Difference between Hybrid encryption and Diffie-Hellman key agreement?

Can someone explain me the difference between the Diffie-Hellman key agreement (DH encryption) and Hybrid encryption? As to my knowledge DH key agreement uses public and private keys to generate a ...
3
votes
2answers
149 views

Is it safe to reveal AES encrypted password?

Please correct me if any of my statement is incorrect. It is probably more good practice to not show any hint of the password. However, AES encrypted passwords by itself cannot be used to decrypt ...