Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
2answers
185 views

How to decrypt text when four first letters of the key are missing in Facebook CTF contest?

I am beginner in cyber security. Now I am participating on Facebook Catch the Flag contest. I have to solve following task: There is a key. But the first four characters of the key are missing: _ _ ...
11
votes
1answer
302 views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...
2
votes
1answer
74 views

What encryption is used by 1password?

I use a password storage application on my Mac called 1password. I was wondering if it encrypts the data it stores on my computer and decrypts it using a key made from my "one password" or if it has ...
2
votes
0answers
12 views

Multiple PGP keys on one server [duplicate]

I have a server on which we are planning to expire the current PGP keys later this year. Now we have several clients which are currently using that PGP key. We want to have another new PGP key pair ...
74
votes
10answers
8k views

Why even use a one-time pad if the key distribution is fully secured?

I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough". ...
1
vote
0answers
108 views

Ansible Vault - what is it doing?

I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher ...
-2
votes
1answer
63 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
4
votes
1answer
147 views

Protecting master password in memory

Assuming I want to enter master password only one time at the start of the program, how is this master password usually protected in memory after that? Is the encryption key after being derived from ...
-1
votes
2answers
58 views

How does digital signature algorithms work in a private / public key environment?

From the Wikipedia page on the subject, I get, on a theoretical level, how the process of encrypting and decripting a message works. The article states that: In a public-key encryption system, any ...
-3
votes
0answers
72 views

Alternate SSH authenticate

I was doing a little bit of research on how SSH actually authenticates a user and different things. And I came across a document which nicely explains how SSH authentication works which is something ...
1
vote
2answers
88 views

Does this method of password confirmation risk encrypted file integrity?

I'm trying to make a basic encryption/decryption script for personal use, and it works perfectly fine. I'm posting this in the infosec section because my question revolves around how easy it is to ...
0
votes
0answers
15 views

Which bytes in an OTA Command Package are encrypted with the KIc by 3DES CBC?

I have an un-ciphered OTA message in clear and I am trying to cipher it so it becomes secure data. The cryptographic checksum is already generated as part of the un-ciphered OTA message. I have the ...
0
votes
1answer
85 views

Public Key Encryption vs HSM for storing encryption keys

Let's say I have sensitive data in the database server that needs to be encrypted (i.e emails, etc..) and I want to make sure that in the event that the server is compromised, the attacker shouldn't ...
-1
votes
1answer
31 views

Map of Protocols to Encryption/Cipher Suite

I am looking for a mapping of all protocols (HTTPS, SCP, SFTP, LDAP, RDP, ect) along with the Encryption Protocols that can be used with them (SSH, SSL/TLS, ect) and if possible their Cipher Suites (...
1
vote
0answers
44 views

Are there any benefits in using VPN service for application with SSL pinning?

I understand how using a public VPN service can make network connectivity more secure in case of HTTP, or even HTTPS a without certificate pinning in place. Suppose we have a fat client application ...
0
votes
0answers
37 views

Is there a way to use clear key encryption for protecting media HTML5 media streams?

I am trying to understand EME with Clear Key encryption. I am using MP4Box. From the documentation here, you specify decryption keys in an XML file that is used to encrypt/decrypt your mp4 files. ...
-4
votes
1answer
101 views

Preventing someone to generate a public key from a private one? [closed]

From what I read, encryption algorithms such as RSA permits to generate the public key from the private one. Long story short, for a thesis I'm writing, I thought to solve a security issue with users ...
2
votes
1answer
47 views

Way to combine encrypted tar and encrypted symmetric key with which tar was encrypted?

We are using Beaglebone Black (AM335x) based custom board, so for firmware upgrades of the board we will be using an encrypted firmware image. As you would have already guessed, we will be using ...
0
votes
0answers
29 views

Is any encyption used for EAP-TLS certificate exchange?

I was reading about the EAP-TLS and mutual client - server authentication using digital certificates. In the authentication process explained in RFC 5216, both server and client exchange ...
0
votes
0answers
44 views

Would a hard-coded public key or fingerprint protect against MITM?

Say there's a server and a client. Normally to connect and establish an end-to-end encrypted session, they'd have to carry out key exchange, which potentially gives an attacker the opportunity to ...
1
vote
1answer
88 views

Password Encryption For PHP 5.3 or Should We Update to 5.5+?

I'm trying to hash passwords for our company site. After testing on a local Apache server that has PHP 5.5.9 and everything working as expected, I went to test on our live server being hosted by ...
3
votes
2answers
113 views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
2
votes
1answer
46 views

Is using trim on a ssd with LVM LUKS safe?

I know that it can allow an attacker to know the filesystem and file size, but can it allow an attacker to decrypt any files?
1
vote
1answer
173 views

Partial decryption using untrusted decryption service

While there are ways to encrypt and decrypt information, most of these seem quite computation-heavy. Because of this I am thinking about splitting decryption into two parts - one is computation heavy ...
0
votes
1answer
85 views

How to detect zip file encryption algorithm

As we know zip files supports a simple password-based symmetric encryption system and some vendors use other algorithms. I used the zipinfo command in Linux but it doesn't say what encryption ...
0
votes
0answers
13 views

Password Managers — Generating Passwords On The Fly a Safe Approach? [duplicate]

Most password managers store user credentials for individual services encrypted on their own back-end databases, so that your passwords are available on multiple devices. So, a DB compromise on these ...
0
votes
0answers
61 views

How could I encrypt an SD card to store data on it?

I have some data I'd like to carry with me in an encrypted form onto an SD card, so I (and only I) can access it easily from any OS (or at least Windows, OSX and Ubuntu). My idea was like: Two ...
0
votes
1answer
86 views

How to check if the decryption is correct?

I'm working on chat room that encrypt messages for more than one users and each user might have different encryption and key/password. The user's key won't work with all the message, therefore; return ...
1
vote
2answers
129 views

What are the recommended steps involved in creating an encrypted file format? [closed]

I'm developing a pretty standard program which lets users save their work in a custom file format and reopen it later. Now I'd like to add the capability to encrypt the file using a user-defined ...
3
votes
1answer
98 views

Why POODLE vulnerability has for each byte a probability of 1/256 to get it in plaintext?

I read the Google paper about POODLE vulnerability (https://www.openssl.org/~bodo/ssl-poodle.pdf) and a lot of other articles. Each paper/article wrote about that you have to try it in average 256 ...
6
votes
3answers
124 views

Why are low-entropy passwords considered OK in many cases?

When talking symmetric encryption, a 56 bit key is known to be so weak. If you use it for your encryption, you are considered a goner as you wont survive brute-force. When talking passwords however, ...
0
votes
4answers
196 views

Which layer of OSI model does end-to-end encryption and decryption happen in a network? Why?

I thought it happens at Layer 6, but some resources state that it happens at either Layer 3 or 4.
1
vote
0answers
19 views

Substitution Table in TKIP

In TKIP Encapsulation, we divided the per packet key mixing process into two phases. In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
2
votes
3answers
173 views

Do file-encrypting software give a false sense of security? [closed]

I sometimes use a VeraCrypt volume to store personal data (mostly backups from another computer) on a Windows computer I don't own. But I learned over the years that modern OSes store users' data in ...
2
votes
1answer
45 views

What is the exact meaning of “Keying material”?

I have seen this term in many docs on IKE and ISAKMP. These docs seems to be written for Security experts but not everyone who needs to setup an IPSec tunnel needs to be a security expert :-) So what ...
0
votes
0answers
49 views

How to communicate securely between my Swift app and a localhost socket.io server?

I have written a tiny Swift app that uses NSTask to start up a nodejs socket.io server (bundled with the app), which it then connects to via the official socket.io Swift client (https://github.com/...
1
vote
1answer
105 views

Everykey (Bluetooth master key) - is it really secure? [closed]

Obligatory disclosure I have no relation to the Everykey company and do not mean to promote them in any way. I came across the product Everykey that claims to be "your only key" by allowing you to ...
1
vote
3answers
259 views

why don't we store passwords in a database using encryption instead of hashing? [duplicate]

hashing is a one way method, if a user lost his password he will never be able to get that password from the server, so why don't we store passwords in a database using encryption instead of hashing?
0
votes
1answer
54 views

How to figure out encryption given input and output text? [duplicate]

I need to figure out how some fields are being encrypted. In my program, I can change the input text and see the encrypted output text. For example, "Admin" results in "51@fnmk5gHT[^FX". I ...
1
vote
0answers
75 views

How to crack (get secret from) Android Keystore System

I am looking for the best way to protect sensitive data in Android devices, e.g. secret or private keys, and found Android Keystore System. Based on the documentation, key material may be bound to ...
1
vote
1answer
56 views

Securing confidential information between users

I know there are several issues about encryption, but my case is slightly different Users have confidential information stored on their device They have a RSA key pair The information must be ...
3
votes
1answer
108 views

How to make secure communication between servers

I have two servers with 2 web application in PHP, I need this server make a secure communication there is my scope: I need to application 1 make a POST on application 2, but on application 2 I need ...
-4
votes
1answer
83 views

How long does it take to brute force a 7 character long password taken from 16 character set

A database file is encrypted with 256bits AES and the key is the first 7 characters (from the character set 0-9, a - f, all small letter) of MD5 hash . This implies 2^28 bits (268,435,456) possible ...
4
votes
1answer
108 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
7
votes
2answers
203 views

Why does Mozilla Firefox encrypt saved passwords?

If you ask Mozilla Firefox to remember the login details for a website, the credentials will be stored in your profile directory in Logins.json. Instead of storing plaintext values, the username and ...
1
vote
1answer
24 views

Modsecurity Encrypted traffic in 3 tier architecture

The scenario is that we have 3 tier architecture DMZ > BEA > DB with end to end encryption the data is encrypted within DMZ > BEA > DB. I have read that modsecurity doest deal with encrypted traffic ...
0
votes
0answers
15 views

Insecure data in-transit

My organization processes some PII data and shares it with an outbound connection (outflow only) that is a third party. The data transfer transactions occur without human intervention. That outbound ...
0
votes
1answer
134 views

Encrypt password with salt

Can anyone explain why formula 1 is safer than formula 2?I don't get it even I get the answer. According to 2, it says as s is in plaintext form, the attacker can decrypt the password by (y.s). Isn'...
1
vote
1answer
42 views

Sensitive files in the Cloud: Automated mounted TrueCrypt volume

My current setup currently I'm using Boxcryptor Classic 1.x (still compatible to EncFS) to mirror some files with SyncBack Pro into the virtual Boxcryptor-Harddisk. Those get then encrypted by BC ...
0
votes
0answers
41 views

Best way to store SQLite password offline? [duplicate]

I'm developing a Windows application that uses SQLite, and I want to encrypt it (there is some sensitive information). The trouble is that one of the application requirements is that it must work ...