Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

14
votes
10answers
37k views

Is Windows BitLocker secure?

Naturally I feel that I have to ask this question, since it's a built-in feature in Windows. Let's say someone has physical access to my PC, is there an easy way for them to access a BitLocker ...
0
votes
0answers
13 views

Password Managers — Generating Passwords On The Fly a Safe Approach? [duplicate]

Most password managers store user credentials for individual services encrypted on their own back-end databases, so that your passwords are available on multiple devices. So, a DB compromise on these ...
0
votes
1answer
86 views

How to check if the decryption is correct?

I'm working on chat room that encrypt messages for more than one users and each user might have different encryption and key/password. The user's key won't work with all the message, therefore; return ...
1
vote
3answers
258 views

why don't we store passwords in a database using encryption instead of hashing? [duplicate]

hashing is a one way method, if a user lost his password he will never be able to get that password from the server, so why don't we store passwords in a database using encryption instead of hashing?
1
vote
2answers
129 views

What are the recommended steps involved in creating an encrypted file format? [closed]

I'm developing a pretty standard program which lets users save their work in a custom file format and reopen it later. Now I'd like to add the capability to encrypt the file using a user-defined ...
3
votes
1answer
98 views

Why POODLE vulnerability has for each byte a probability of 1/256 to get it in plaintext?

I read the Google paper about POODLE vulnerability (https://www.openssl.org/~bodo/ssl-poodle.pdf) and a lot of other articles. Each paper/article wrote about that you have to try it in average 256 ...
5
votes
2answers
268 views

Biometric device instead of password - signature security

Lets assume that there is a bio-metric algorithm for user authentication which compares fingerprints with a user's signature saved in a database (comparing function is not important here). Next, there ...
2
votes
1answer
101 views

Who defined the term “end-to-end encryption”?

I am trying to find the origin of the term "end-to-end encryption", but have been unsuccessful until now.
5
votes
3answers
122 views

Why are low-entropy passwords considered OK in many cases?

When talking symmetric encryption, a 56 bit key is known to be so weak. If you use it for your encryption, you are considered a goner as you wont survive brute-force. When talking passwords however, ...
5
votes
3answers
7k views

Is it safe to auto-fill credit card numbers using Chrome?

Is it safe to auto fill credit card numbers using Chrome? Does it safely store the credit card information? As far as my understanding goes, it just shows asterisk values but on click it reveals the ...
2
votes
3answers
170 views

Do file-encrypting software give a false sense of security? [closed]

I sometimes use a VeraCrypt volume to store personal data (mostly backups from another computer) on a Windows computer I don't own. But I learned over the years that modern OSes store users' data in ...
0
votes
1answer
100 views

Questions on the variations of RSA keys

I've built a simple application that reads in an RSA key, checks the header and starts identifying properties of the RSA key to make sure it is valid (Using child_process in express to run $ ...
0
votes
4answers
194 views

Which layer of OSI model does end-to-end encryption and decryption happen in a network? Why?

I thought it happens at Layer 6, but some resources state that it happens at either Layer 3 or 4.
1
vote
0answers
19 views

Substitution Table in TKIP

In TKIP Encapsulation, we divided the per packet key mixing process into two phases. In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
1
vote
2answers
115 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
1
vote
1answer
104 views

Everykey (Bluetooth master key) - is it really secure? [closed]

Obligatory disclosure I have no relation to the Everykey company and do not mean to promote them in any way. I came across the product Everykey that claims to be "your only key" by allowing you to ...
2
votes
1answer
45 views

What is the exact meaning of “Keying material”?

I have seen this term in many docs on IKE and ISAKMP. These docs seems to be written for Security experts but not everyone who needs to setup an IPSec tunnel needs to be a security expert :-) So what ...
0
votes
0answers
47 views

How to communicate securely between my Swift app and a localhost socket.io server?

I have written a tiny Swift app that uses NSTask to start up a nodejs socket.io server (bundled with the app), which it then connects to via the official socket.io Swift client (https://github.com/...
0
votes
1answer
54 views

How to figure out encryption given input and output text? [duplicate]

I need to figure out how some fields are being encrypted. In my program, I can change the input text and see the encrypted output text. For example, "Admin" results in "51@fnmk5gHT[^FX". I ...
0
votes
1answer
72 views

Is there a ransomware variant that checks for file's magic numbers to encrypt?

Is there a known ransomware-variant (Cryptolocker, Cryptowall etc.) that before encrypting the files checks for their magic numbers? Lets say that there's a Word file, that had its file extension ...
4
votes
1answer
107 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
0
votes
1answer
134 views

Encrypt password with salt

Can anyone explain why formula 1 is safer than formula 2?I don't get it even I get the answer. According to 2, it says as s is in plaintext form, the attacker can decrypt the password by (y.s). Isn'...
2
votes
1answer
225 views

Encrypting data before sending to SaaS tool and decrypting on browser view

I'd like to send data to a SaaS tool, where the data is stored in the cloud. I'll use Google Analytics as an example, but it applies to any similar service. Google Analytics does not allow you to ...
1
vote
0answers
74 views

How to crack (get secret from) Android Keystore System

I am looking for the best way to protect sensitive data in Android devices, e.g. secret or private keys, and found Android Keystore System. Based on the documentation, key material may be bound to ...
1
vote
1answer
56 views

Securing confidential information between users

I know there are several issues about encryption, but my case is slightly different Users have confidential information stored on their device They have a RSA key pair The information must be ...
17
votes
6answers
20k views

How secure is NTFS encryption?

How secure is the data in a encrypted NTFS folder on Windows (XP, 7)? (The encryption option under file|folder -> properties -> advanced -> encrypt.) If the user uses a decent password, can this ...
3
votes
1answer
108 views

How to make secure communication between servers

I have two servers with 2 web application in PHP, I need this server make a secure communication there is my scope: I need to application 1 make a POST on application 2, but on application 2 I need ...
7
votes
2answers
203 views

Why does Mozilla Firefox encrypt saved passwords?

If you ask Mozilla Firefox to remember the login details for a website, the credentials will be stored in your profile directory in Logins.json. Instead of storing plaintext values, the username and ...
-4
votes
1answer
82 views

How long does it take to brute force a 7 character long password taken from 16 character set

A database file is encrypted with 256bits AES and the key is the first 7 characters (from the character set 0-9, a - f, all small letter) of MD5 hash . This implies 2^28 bits (268,435,456) possible ...
0
votes
2answers
398 views

Bitwise cipher Cryptography

I'm doing an online cryptography course. There is a question in which it is given that the encrypted text for; OwBPAAQXAE9UC0FVBQxODgZSCUUMAQwCCApYRBJZBR0LDhoAGApPHQAUAQNZRAJPGwQbDQBDDREKQA== Is ...
0
votes
1answer
38 views

Veracrypt options to protect against multiple versions of an encrypted volume

I'm planning to use rsnapshot to backup a veracrypt volume as it changes. This means I will have multiple versions of the same volume, with slight differences in data. It is my understanding that ...
3
votes
1answer
70 views

OpenSSL's EVP functions, more specifically EVP_SealInit

Reference: https://wiki.openssl.org/index.php/Manual:EVP_SealInit%283%29 I want to securely share a symmetrical key between two endpoints using OpenSSL's EVP interface. Transferring the encrypted ...
67
votes
6answers
122k views

Why most people use 256 bit encryption instead of 128 bit?

Isn't 128 bit security enough for most practical applications?
4
votes
2answers
101 views

Managing the public keys and certifications of S/MIME protocol

I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the ...
1
vote
1answer
24 views

Modsecurity Encrypted traffic in 3 tier architecture

The scenario is that we have 3 tier architecture DMZ > BEA > DB with end to end encryption the data is encrypted within DMZ > BEA > DB. I have read that modsecurity doest deal with encrypted traffic ...
4
votes
5answers
573 views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
0
votes
0answers
15 views

Insecure data in-transit

My organization processes some PII data and shares it with an outbound connection (outflow only) that is a third party. The data transfer transactions occur without human intervention. That outbound ...
4
votes
2answers
298 views

How Does Telegram's Identity Verification Work?

Note: please refrain from commenting on Telegram's design of OTHER parts, as it will distract from the stem of the question. Background: Signal (Previously, "TextSecure" app) uses specific "Your ...
1
vote
1answer
41 views

Sensitive files in the Cloud: Automated mounted TrueCrypt volume

My current setup currently I'm using Boxcryptor Classic 1.x (still compatible to EncFS) to mirror some files with SyncBack Pro into the virtual Boxcryptor-Harddisk. Those get then encrypted by BC ...
6
votes
2answers
261 views

Is there an equivalent of an Apple cryptochip in Android devices?

Apple has a cryptochip which, beside managing the encryption keys, tunnels authentication and provides throttling of failed attempts, as well as the ability to trigger a device wipe after several ...
12
votes
5answers
660 views

What steps should one take to provide “reasonable” levels of privacy from a government?

I'm highly uncomfortable with the recent news surrounding government snooping in the UK. If we define a typical user to mean somebody who: Browses web sites such as BBC News and Stack Overflow Uses ...
0
votes
0answers
41 views

Best way to store SQLite password offline? [duplicate]

I'm developing a Windows application that uses SQLite, and I want to encrypt it (there is some sensitive information). The trouble is that one of the application requirements is that it must work ...
1
vote
2answers
74 views

Storing two copies of data, encrypted in different ways

Our website has some personal data that needs to be visible to both the user it belongs to and the administrators. It also needs to be encrypted. As we want to maintain a simple system, just username ...
-5
votes
0answers
59 views

What kind of encryption/encoding is this? [duplicate]

Unknown encryption/encoding: %7D12%25YEK%7BcX%25%26VF%5ExiGBL20E%7F%11,WJGLSSx%07DE%5D%5E%2B%26*2do_Le%1D%0D%13%2BG%5CAdt%0D%1B%1Dsh%04q%1Cw%12%09%03%17%07%02%7Cq%1E%11yulaOL%02B%5CTG%0D36%13ZCd.@...
0
votes
1answer
255 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
1
vote
0answers
87 views

Decryption with two-way authentication

We have a Customer who wants his sensitive user-data stored with an encryption. These are the basic requirements: Sensitive user-data is stored in a database using encryption A remote-attacker who ...
0
votes
0answers
34 views

Unable to view USB Hard drive contents after lock(read-only access)

My work laptop has PGP Desktop 10.3 and when I connected my USB flashdrive it prompted me to Encrypt or Lock. Given the information on both of these options the only choice I had in order to access ...
0
votes
0answers
24 views

AES256 nopadding vs PKCS7Padding

I was looking over AES Crypt's Java lib which seems like a secure AES encryption software and I noticed that they are using nopadding. Can somebody explain to me what the benefit of using nopadding as ...
0
votes
1answer
67 views

Questions regarding AES 256

i have googled and searched quite alot but most things just state the same things but not answering my questions so hopefully you guys can help me out abit Story: i am looking at creating an ...