Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

-1
votes
1answer
61 views

How can I secure encryption keys in the code? [duplicate]

I have files on the server that is encrypted with AES. I am developing iOS and Android apps to decrypt and process those files in the phone or tablet. To decrypt files on the client apps, I have to ...
2
votes
2answers
147 views

Practical steps for encrypting an encryption key for data stored in MySQL

So I'm working on my first project where user data is stored as encrypted using the user's password as (part of) the key. I have read many similar things about best practices, but the details seems to ...
1
vote
2answers
47 views

Should Android apps for communication encryption and security require permissions like identity, device ID, contacts, etc.?

There is a Android application Threema for communication encryption and that says it does not collect user data, but it requires the following permissions: identity, contacts and device ID. Can ...
1
vote
1answer
34 views

How can Key Compromise Impersonation be mitigated?

This paper describes a successful attack on TLS called Key Compromise Impersonation. It states that the attack can be mitigated thus: Disable non-ephemeral (EC)DH handshakes Set appropriate X509 ...
5
votes
1answer
83 views

How to really treat security between peers in WebRTC

Recently I've been implementing WebRTC in my project and would like to add security and privacy to the couple. I then decided to search on and found something if it is really necessary to impose ...
2
votes
0answers
29 views

How to safely decrypt user data in scheduled script

I have a web application with a lot of stored db data, some of which is encrypted. The data is encrypted with a surrogate key, which itself is encrypted with a hash of a user password. Upon request ...
1
vote
1answer
119 views

What is the most secure way to digitally communicate between the U.S. and China?

What is the most secure way for two people to communicate digitally when one person is in the U.S. and the other is in China (likely being monitored)? Updated: Here's some additional info: The ...
5
votes
3answers
1k views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
2
votes
0answers
55 views

How to share an encrypted storage on Windows, Mac OS X and Linux in a secure way [migrated]

I got a 2 TB drive that I have to use with both Windows 8.1 / Windows 10 and Yosemite to OS X / OS X El Capitan and maybe even on Linux. I need to encrypt the volume. Or rather, I want to create two ...
6
votes
6answers
2k views

Ransom attacks - can I protect myself by encrypting all my files?

If I encrypt all my files can I get "attacked" by ransom attacks? Because my files are already encrypted, they cannot access them, so I should be safe or am I wrong? Also, if someone could tell me ...
1
vote
1answer
59 views

Should I worry about padding oracle?

I have a PHP webapp which encrypts (by AES192-CBC) messages with a random key and a random IV. Everywhere people are saying how amazing are GCM, EAX and authenticated modes (does currently exist safe ...
2
votes
1answer
123 views

Reading encrypted data before sent to remote server

I'm developing a mobile app (Android only for now) to provide a disposable e-mail service to users. Users will be given temporary e-mail addresses so they can receive and read e-mails for a certain ...
-3
votes
2answers
67 views

Encrypted Passwords in Databases

Every day the technology around us is getting better and better, and so does security. Almost every-day newspapers headlines are: hackers hacked database of a big company and stole passwords and ...
0
votes
0answers
20 views

Is there a combination program that will generate a dictionary from a predefined list of words and numbers in specific order?

I'm sorry if this question has been asked, but I've already wasted 6 precious hours trying to find a program that will accomplish the task I'm requesting. (Perhaps I'm asking the wrong question?) ...
0
votes
1answer
69 views

What is the “segment size” when using Cipher FeedBack (CFB) chaining mode?

When using CFB chaining mode with AES, I see instructions that the "plaintext length (in bytes) must be a multiple of segment_size/8" (also mentioned here). What does that mean?
4
votes
1answer
742 views

How is the iCloud keychain protected from unauthorized access?

With OS X Mavericks and iOS 7.0.3, Apple has introduced a new feature called iCloud keychain. During setup, you can choose an iCloud Security Code. This code is used when you want to grant access to ...
1
vote
1answer
292 views

Prevent CryptoLocker on Server

A quick question, which may have a not-so-quick answer - Are there any ways to prevent files associated with CryptoLocker, to be propagated to a data server, by means of a back up? We use Cobian as ...
2
votes
1answer
55 views

Do password derived encryption keys need to be salted?

If I have a database where I store users' sensitive information, and encrypt that information, do I need to do something like PBKDF2(password,salt,10^5) for the encryption key as well as the hash?
-3
votes
5answers
77 views

Asymmetric encryption: Is it possible to share private key and hide public key?

I know that normally it's the public key to be shared and the private key to be kept secret (hence the names) in asymmetric encryption. I have a special case that I want to encrypt some files and let ...
2
votes
1answer
93 views

Is a large encrypted file more secure than a small one?

Does encrypting a large file and subsequently having to decrypt a large file make it more secure than a small one when attempting to brute force it? If you have to brute force a 25GB file and a 250MB ...
2
votes
3answers
145 views

UEFI and security implications for encryption

After my old PC kicked the bucket I now own my first UEFI board and I am already having trust issues. I utilized Truecrypt's system encryption for years now and really got used to it. My new board has ...
0
votes
1answer
38 views

Sending Group Keys over network

For multicast encryption one user creates group keys on his local (Symetric and asymetric). If we encrypt these with other group user's public keys and send over networks . Is this acceptable? Can ...
1
vote
1answer
82 views

Encrypting data before sending to SaaS tool and decrypting on browser view

I'd like to send data to a SaaS tool, where the data is stored in the cloud. I'll use Google Analytics as an example, but it applies to any similar service. Google Analytics does not allow you to ...
-1
votes
0answers
78 views

Best way to keep encrypted data, which is often decrypted?

I'm starting project for my BSc, where I want to send e-mails with keys (e.g. games on Steam platform, Paysafecard) on Allegro, which is similar to eBay. I will have my own database with users' data ...
2
votes
3answers
89 views

Proper implementation of HIPAA within iOS app with several factors

We are developing an iOS app that allows users to store/modify Protected Health Information (PHI) and the app needs to allow users to do so without an internet connection for large parts of the ...
9
votes
2answers
187 views

What real life scenarios require separate end user certificates for Signing and Identity?

Based on this question, I'm interested in any rational argument that would support the idea of maintaining separate signing and authentication certificates. Conventional logic & wisdom says there ...
2
votes
0answers
69 views

A fledgling idea: Relational Encryption [closed]

I've been spending my spare time coming up with the basis for an encryption algorithm. I am completely unfamiliar with computer programming, but my time as a Network Technician left me incredibly ...
2
votes
1answer
76 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
3
votes
0answers
192 views

Enterprise message bus encryption

I'm contemplating using Amazon's Simple Queue System as the basis of an enterprise message bus. According to Amazon, the contents are not encrypted, which means the application(s) will have to handle ...
5
votes
2answers
424 views

How to store passwords in database so that they can be retrieved?

I'm developing a password manager web app. It's just for fun: I'm not exposing anybody's passwords. My idea was to use hashing+salting, and that's what I did for the master password. But then I ...
4
votes
2answers
193 views

Car Remote App Security

Car manufactures like BMW, Audi or Mercedes-Benz all provide mobile applications to control your car. All apps share really critical functions like remote lock/unlock or the ability to find your car ...
1
vote
3answers
111 views

What benefit to use different encryption key (passphrase) for different customers?

When we store confidential information in our database, we encrypt it using AES. In addition, when customers install our product, they protect their machines using a firewall. Should we use different ...
3
votes
2answers
450 views

Secure database password stored in an env variable

I need to somewhere store my DB password on my production environment to access the DB. At the moment the prod system is deployed in the cloud, so is the DB. The password, the username and some other ...
4
votes
5answers
293 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
11
votes
2answers
264 views

“Encrypt and wipe” procedure on Android Lollipop?

I know a lot of people are advocating an "encrypt and wipe" procedure for selling used Android phones. But according to the AOSP website, in Android 5.x Lollipop: Created fast encryption, which ...
7
votes
2answers
500 views

ProtonMail security concerns

This TED talk brought me here. First of all, to those who created ProtonMail: Nice job!!. Regardless of what people say, it's definitely a big step forward from tradition options like Hotmail, Gmail ...
-3
votes
2answers
71 views

How does SSL work? Simpler Explanation? [duplicate]

I'd like to explain my understanding first then ask a question. This question is meant as a simpler overview of other question..and talks about implication and not process as much. My understanding ...
2
votes
1answer
102 views

Message and Key Security

I'm reading Post-Quantum Cryptography, and in the page 106 in the beginning of the Section 3 it says: In this section we consider the message security (opposed to key security) of code-based ...
1
vote
1answer
39 views

Use of server and root certificate in ssl termination and inspection

I'm researching vendors which allow SSL termination and inspection, I came across Cisco CWSA technology, the technology was somewhat easy to understand the stuff which really boggled my mind was the ...
0
votes
1answer
113 views

Can this text be figured out?

It seems that as long as a computer is connected to the network, any encryption used by that computer makes it insecure, because the computer can be compromised. I wonder if in this scenario is it ...
0
votes
1answer
66 views

Block Ciphers Terminology?

I have been looking at block ciphers, and I found this: Do the little circles with the plus symbols mean XOR? And how are the plaintext blocks split, and ciphertext blocks combined? Also, how can ...
0
votes
1answer
78 views

Identify encryption algorithm for .enc files [duplicate]

I need to identify the encryption algorithm used to encrypt some files. I have the key, but I can't decrypt it using OpenSSL, because I don't know what algorithm was used to encrypt it. Is there any ...
8
votes
2answers
3k views

Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?

Got a Surface Pro 3 today (it's awesome BTW!) and noticed in it's EFI that it's got TPM enabled, "Secure Boot" enabled (unsure what such an umbrella/catch all term actually covers) And then in ...
1
vote
1answer
51 views

What is the difference between Key Derivation Function and (salted) Hash?

I see in this post that the main difference is that KDF outputs have "certain randomness properties", and I don't understand what does it mean. Suposing that that "certain randomness properties" are ...
0
votes
0answers
71 views

How secure is the TAP Windows Adapter V9? [duplicate]

I use Cyberghost to browse the web on public wifi. How secure is the network adapter? Cyberghost uses OpenVPN which utilizes TAP Windows Adapter V9. I am asking this, because I believe at the ...
28
votes
2answers
19k views

where to store a key for encryption

I am looking for a way to store a key used for password encryption. I am using a mysql db which would store a user name and an encrypted password that would be encrypted using ...
0
votes
2answers
99 views

Centralized local hosted web based password manager

In our company we have more than 100 employers and everyone use several online applications daily. To access all of this sites they need a password which was now stored very insecurely. so I'm ...
3
votes
1answer
252 views

Are DSA keys breakable?

Are the DSA keys breakable? If so, what is the maximum key size that is breakable with the latest technology ? Why are DSA keys not used during authentication? Can we use DSA keys for encryption?
2
votes
1answer
59 views

Is it secure to use pbkdf2 for both password hashing and key generation

I'm writing a password manager, right now for each individual site, I already used master password + random salt with PBKDF2 to generate encryption key to encrypt its password (each site has its own ...
8
votes
0answers
480 views

Linux, TRESOR and XTS

I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU's registers. It uses the kernel's crypto API for ...