Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
0answers
38 views

Is it possible to perform encrypted telephonic calls in Android? [closed]

When I say that I need to perform encrypted telephonic calls to another person then please understand that I do not want an encrypted VoIP call which is routed over the internet. What I want to ...
5
votes
1answer
389 views

Encrypt in C# program, Decrypt in android application By RSA Keys

I use RSA encryption for sending messages between a server and client. The server program is implemented in C# and the client is an Android application. I want to know if it is possible for a ...
6
votes
2answers
67 views

HMAC with or without data encryption?

I'm in the process of developing a system that periodically transmits a small amount of data (16/18 bytes), where the only part that will change is a 4 byte counter that will increment for each ...
0
votes
1answer
33 views

Wi-Fi Protected Setup PIN method EAP Messages

Let's look at this example: router (access point) has 8-digit PIN (printed on label) and laptop wants to connect to network using WPS PIN. So user give router's PIN into laptop and laptop sends PIN to ...
2
votes
2answers
42 views

With openssl des3, what are the passphrase parameters?

I'm using OpenSSL's des3 tool to encrypt a file, e.g. openssl des3 -salt -k SUPER_SECURE_PASSPHRASE < inputFile > outputFile Everything's working, but now I have to choose a final, fixed ...
0
votes
1answer
42 views

Encryption tool that supports multiple separate decryptions?

Is there a tool that will allow me to encrypt n plaintexts with n corresponding keys such that: the cipher text is one file with no clue as to the value of n. decrypting with key i (1<=i<=n) ...
6
votes
4answers
552 views

What do you do to protect data on a Macbook in the event of theft/loss of the device?

What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device? I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
1
vote
1answer
109 views

Encrypting password string in C++

I have a client server based application where user is presented with login screen in the client. It then passes the credentials to the server which does the authentication. Client-server ...
13
votes
2answers
345 views

What does banking etc. server room protection look like? What happens if it fails?

Given that information security is derived from physical security, as evidenced by this theft, I'm curious as to what protection surrounds my bank account? There are two main avenues I'm interested ...
0
votes
1answer
30 views

BBM pin to pin security

If a BBM message is intercepted over unsecure Wi-Fi and the PIN of the intended recepient is known. Can it be decrypted easily.
0
votes
0answers
19 views

What stops a man in the middle attack from intercepting SSL encrypted data and sending it with a spoofed ip address to the server? [duplicate]

Say you have a client that connects to a server using SSL. The server, upon receiving a certain command, launches a missile. Then say there's someone in the middle of the connection listening to the ...
2
votes
2answers
172 views

End to end security for REST services, any emerging standards?

I work with integration in the healthcare sector, where end-to-end security is important. We integrate with numerous SOAP services, and use the WS-security features to encrypt and sign requests and ...
0
votes
2answers
42 views

Ciphertext-only vs known-ciphertext attack

From what I understand, "ciphertext-only attack" and "known-ciphertext attack" are both synonyms for an attack in which the attacker knows a number of ciphertexts and only those ciphertexts, e.g. has ...
0
votes
1answer
73 views

Will the result of HTTPS and SSH encryption of the same data be identical for two separate requests?

If I was to request an image over HTTPS and record the packets over WireShark and then inspect a peer's Wireshark and look for the same packets, would I be able to see if they requested the same file, ...
18
votes
2answers
18k views

Decrypting TLS in Wireshark when using DHE_RSA ciphersuites

How can I decrypt TLS messages when an ephemeral Diffie-Hellman ciphersuite is used? I am able to expose the premaster secret and master secret from the SSL Client. Using that, how to decrypt the ...
0
votes
3answers
149 views

JavaScript encryption for websites delivered via IPFS

I would like to encrypt user data in JavaScript in a browser before it gets sent out for storing. I read that this is generally a bad idea but considering the following points at least most of the ...
0
votes
1answer
42 views

How to encrypt data on flash drive to decrypt on another system? [closed]

I have a Mac OS X and a flash drive and I would like to store some files as a backup to carry with me in case I completely lose access to my computer (e.g. theft). I would like to encrypt these files. ...
2
votes
1answer
66 views

Secure data by encrypting and rewriting on same file

I'm working on a project to Encrypt files using AES encryption with a key generated from SHA-256 from a keyword. My idea to claim this was to first : read all bytes from a file second : encrypt ...
3
votes
0answers
67 views

Method for securely removing files from a solid state drive

I've thought of a method for securely erasing single files on a solid state drive. This method will work only if the drive is encrypted, and it will work even if someone cracks the encryption key for ...
1
vote
1answer
144 views

SQL Server Asymmetric Encryption Keys

I have used SQL Server database with data to be encrypted and I will use symmetric key for encryption and will encrypt it by asymmetric key now comes the question how to give user permission to ...
40
votes
6answers
6k views

Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?

Current setup We have a service that allows users to upload documents through a website and stores the uploaded documents encrypted on disk. The documents on disk are encrypted with a per-user key, ...
5
votes
1answer
62 views

Encrypting individual files on OS X

I am about to go paperless, and I want to protect the documents that I scan. The use case is that I'll be scanning paper documents, encrypting each file, and storing them locally and on various backup ...
0
votes
0answers
4 views

Need for salt with IV [migrated]

I have mainly referred to this question http://stackoverflow.com/questions/1949640/does-iv-work-like-salt . Definitely in case of using a salt, IV has a use of adding randomisation to each and every ...
47
votes
8answers
26k views

Are powerline ethernet adapters inherently secure?

I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
5
votes
2answers
553 views

Requiring 2 keys to access a content

I need to use an external service that can only be accessed by password. I don't like the idea of storing the plaintext password on the server, but AFAIK there's not much I can do. Considering this ...
102
votes
4answers
102k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
28
votes
7answers
3k views

Encrypting With Passwords - Encryption of Key vs. Data

Many password-based encryption utilities (e.g.: KeePass, TrueCrypt) do something along the lines of... Encrypt data with super-strong random-generated key, "data key". Encrypt data key with another ...
20
votes
2answers
1k views

Does holding an AES-encrypted string and its cleartext from a database help an attacker in decrypting other parts of the database

I have a question regarding Encryption. Say an attacker stole my entire database. In that database all the data was encrypted. If the attacker took one piece of encrypted data and for some reason knew ...
5
votes
2answers
136 views

Should Android apps for communication encryption and security require permissions like identity, device ID, contacts, etc.?

There is a Android application Threema for communication encryption and that says it does not collect user data, but it requires the following permissions: identity, contacts and device ID. Can ...
0
votes
2answers
46 views

Asymmetric Encryption for Multiple Recipients?

Let's assume an arbitrary group of people who hold a key pair and who make their public key online accessible. Let X, A, B and C be arbitrary people from that group. Now X wants to encrypt a message ...
4
votes
1answer
57 views

Infinite one time pads, brute force multiple pads?

So based on my understanding using the same key for encrypting two completely random plain texts when using an otp cipher will still retain perfectly secret. This is based on the answers on this ...
3
votes
3answers
120 views

Good way of storing lots of third-party passwords

I've consulted this question, but I'd like to hear some more input. I'm building a scraping app that is going to act as an aggregator of sorts for a large number of businesses which use a few popular ...
11
votes
2answers
309 views

How to store private data both securely and publicly accessible?

The task may not be solvable in as broad a formulation as in the title, but this is my scenario (which is somewhat similar e.g. to newsletter subscriptions and therefore certainly has already been ...
-1
votes
1answer
48 views

Using and creating a custom 2 way encryption function [closed]

I am trying to create a 2 way encryption function using PHP. As yet I do not have a very good system at all, it is severely flawed and highly insecure, it is using a substitute cipher running from ...
1
vote
1answer
52 views

How can I extract the encrypted master key from LUKS header?

I know that a LUKS partition has a plain-text header that stores many informations like master key (MK) digest, MK iterations of PBKDF2, information about the 8 key-slots etc. I also know that in the ...
0
votes
1answer
125 views

Encrypting the System Infrastructure

The requirements are to Encrypt the data in our servers 'at rest' and the 'database' - in short the whole infrastructure. Threat Model - to protect a possible data-breach by an adversary (or from ...
95
votes
13answers
25k views

Is there any technical security reason not to buy the cheapest SSL certificate you can find?

While shopping for a basic SSL cert for my blog, I found that many of the more well-known Certificate Authorities have an entry-level certificate (with less stringent validation of the purchaser's ...
3
votes
2answers
112 views

RAM Encryption. Is it possible? [duplicate]

Without adding any additional hardware, is RAM encryption possible? If so are there any known and currently used implementations for Linux or Windows systems? And if this is something that is possible ...
20
votes
1answer
2k views

TLS Bicycle Attack - What cipher is free from flaws to use?

Recently a novel attack on TLS stream ciphers was developed by Guido Vranken, dubbed Bicycle and referenced in this Websense's blog post. It was based on a characteristic of stream ciphers that says ...
-2
votes
1answer
94 views

LastPass Emergency Access

any idea how "emergency access ", the new feature of the last pass, is working? I cant find any detailed information on the encryption/decryption process. How can we be sure that they don't keep a ...
8
votes
3answers
224 views

what does LUKS header contain?

What is contained inside the LUKS header ? I know, the header has size of 2MB. Also, cryptsetup supports "detached header", where the header can be stored in a separate file. Thus, for example, I can ...
12
votes
3answers
1k views

How secure is “Firefox Hello”?

The new "Firefox Hello" feature promises easy and safe video conversation. It is not nescessary to create an account, you simply share a link with your partner to start the conversation. The ...
0
votes
0answers
29 views

can I recover encrypted image files from an old Android phone where I know the pin used but the device key is unknown?

I think I know the OS version that was used to encrypt the images but I don't know if that is relevant. I assume if I know the encryption algorithm/software used (ie. CryptFS) and can brute force the ...
9
votes
3answers
15k views

Encrypt data within mobile app and send to web service

I'm developing a mobile application for Android and iOs. What is best practice when it comes to data encryption within the mobile application which will be sent to a web service? Basically I will ...
24
votes
1answer
23k views

What key exchange mechanism should be used in TLS?

There are many key exchange mechanisms that can be used in TLS. Among them are RSA, ECDH_ECDSA, ECDHE_ECDSA, ECDH_RSA, ECDHE_RSA and others. Which of these are more cryptographically secure and can be ...
10
votes
4answers
8k views

Is client side encryption really better than server side?

Web application may encrypt all user data at client side to convince users that it can't decrypt them. When user enters password, it's used to encrypt data in browser and then it's sent to server in ...
2
votes
2answers
142 views

Machine readable, user non-readable - XML file

I need some advice as I have been unable to find anything useful via the web - (Google search). I have used the application EventGhost so as to create a custom shell, that I run using the Windows 7 ...
10
votes
4answers
15k views

What do key size and block size mean in cryptography?

Can some one simply explain the meanings and the difference between symmetric key and block size. Why 64 block size not safe any more and they increase it to 128 (AES,...,Serpent)? And what about key ...
4
votes
1answer
57 views

What types of trade-offs are appropriate when using encryption/authentication on devices with low bandwidth?

This is my first foray into this Stack Exchange, and I have limited knowledge of the InfoSec world, but I'll try to make this a pointed, answerable question. I'm tasked with investigating including ...
4
votes
0answers
46 views

Bidirectional encrypted server to server communication using TLS

I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I've been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would ...