Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

8
votes
2answers
791 views

Implications of the proposed Burr-Feinstein senate bill? [closed]

It has been rumoured (I guess it is more than a rumour) that senators Burr and Feinstein will be introducing legislation requiring companies to provide the government (with warrants) access to encrypt ...
1
vote
2answers
82 views

How are private and public keys different?

While reading about DKIM I saw that the sender's private key is used to encrypt a hash, later decrypted by the recipient using the sender's public key. This is exactly the other way compared to ...
0
votes
0answers
27 views

when/how does an encrypted volume .dmg change to reflect the file system it stores

I'm trying to verify that storing a .dmg file stays encrypted while only the mounted file system is unencrypted (see here). My thought was to create a .dmg containing a text file, make a copy of the ...
2
votes
1answer
144 views

Is an encrypted .dmg file decrypted on the dropbox server? [closed]

I'd like to use built in tools to create an encrypted drive in OS X that I can sync with Dropbox. To this end, I've created a 'sparse bundle' encrypted volume (.dmg) that remains in ~/Dropbox. My ...
4
votes
2answers
825 views

How secure is AES-256-CBC with user provided password and initialization vector

From my understanding the IV is used as a previous block for the first block only. But since each block is used by the following this adds significant security is a IV is provided and not based on the ...
17
votes
2answers
3k views

Are Playstation 4 communications really harder to monitor?

I have read on the net that authorities are having troubles monitoring Playstation 4 communications. As usual the news are very non technical. What makes the Playstation 4 network harder to ...
1
vote
1answer
112 views

Decryping a RAR file with same password

I came across a problem very similar recently and wondered if anyone knew how to solve this. So say for example I have an RAR archive called archiveA.rar and a password to protect it the password is ...
1
vote
0answers
13 views

Multiple email addresses connected to same PGP identity [duplicate]

I am setting up PGP (using GPGTools GPG Suite for OS X) and I use multiple email addresses daily. It appears I have several choices on how to do this, and I am wondering what is most secure/most ...
1
vote
0answers
107 views

How can I safely store a password during a user session

I am writing an Java application that is using OAuth to authentificate against a server API. The server is offering the OAuth secrets for users to copy from its website. Because each request needs ...
3
votes
3answers
230 views

How To Prove That Client Side Javascript Is Secure?

Imagine that you have a web application that encrypts the user's data, such as a note or spreadsheet, on both the server and client. The normal process for a user using this web application is ...
1
vote
1answer
51 views

How to test TLS handshake process?

I need to test the handshake process of TLS. I thought to use inter-process communication in Linux. Is it possible or not? If not, what simulator could be used for this purpose? If yes, what do I ...
6
votes
2answers
1k views

Can I use SHA-512 hash as AES key?

I want to combine hashing and encryption for better security. So can I use a hash key generated from SHA-512 as a key in AES. For example, I have a password "secret", I calculate SHA-512 hash for it ...
9
votes
2answers
239 views

When do encryption viruses run? [duplicate]

Viruses that encrypt your files, like the recently very common 'Locky', seem to perform a lot of work before they are 'done'. I wonder, when do these programs run? They must take quite some time, ...
3
votes
1answer
174 views

What would be a simple example of an asymmetric encryption function (asymmetric function)?

I am trying to understand RSA encryption but the algorithm seems quite complex. I know that with asymmetric encryption you use a key and a function to encrypt data and a different function to decrypt ...
-3
votes
2answers
62 views

NTAG216 lock bytes security [closed]

I want to ask about the "lock bytes" implemented on the NTAG216 by NXP. What exactly are these and how do they work? Are they a standard or is it some proprietary technology by NXP? Are there any ...
0
votes
1answer
36 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
0
votes
0answers
63 views

How to enable ECDHE in openjdk-1.8.0 in CentOS 6.7?

I have seen many posts that hinted ECDHE is available in the SunEC provider way back in openjdk-1.6.0. My environment: CentOS 6.7 with openjdk 1.8.0.71-1.b15.el6_7. No ECDHE. Made 2 changes in ...
1
vote
2answers
85 views

encrypting data while in memory

What is the best way to protect sensitive text input and store it in memory until form submission is complete and then clear it out shortly thereafter? I'm looking to protect sensitive information ...
3
votes
4answers
158 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
1
vote
1answer
43 views

Key rotation for shared secret keys - recommendation

When using software that does encryption using shared secrets what are the recommended practices for changing the keys. To be specific, this is a distributed software running in a cluster and the ...
3
votes
2answers
100 views

Why does my private OpenPGP key look different between devices?

Something I noticed, when I use gpg --export-secret-keys -a on different computers: My private key looks different, even though they are the same key pair. Is that normal or does this indicate ...
0
votes
2answers
198 views

Why does Telegram not use end-to-end encryption? [closed]

Signal and Telegram are both mobile applications that "try" to ensure secure chats. Signal uses end-to-end encryption, Telegram does this as well (in 'secret chats') but it does not use end-to-end ...
3
votes
1answer
97 views

What happens when encrypted email is in-transit?

If you're using a service that offers end-to-end encryption, what happens when you send an email to another non-encrypted email address? Let's say I write my email in ProtonMail and then send it to a ...
2
votes
2answers
36 views

Could I use a TimeStamp also as IV?

For an academic application, I use AES-GCM to encrypt my frames between 2 parties. To enhance security, and reduce the possibility of replay, I'd like to use a TimeStamp in my frame exchanges. But, ...
13
votes
2answers
635 views

Is there a cipher suite “translator”

I have a list of cipher suites in this format: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384 Is there a fast, easy way of translating it to more human readable/management readable format? :)
2
votes
2answers
42 views

Tails, relay nodes tracking

When I open "network map" on Tails, I see a list of IP addresses with locations. What are these? And it's titled "Relay". Does the government have access to all relay nodes on the TOR network as they ...
2
votes
2answers
55 views

Does Thunderbird Enigmail plugin decrypt attached files?

From my research I have found out that you can easily send encrypted messages to one another using Enigmail. If first I encrypted a file,then attached it to an email, sending it through Enigmail to a ...
4
votes
3answers
125 views

How to decrypt a file encrypted under multiple public keys GPG

According to https://www.gnupg.org/gph/en/manual/x110.html To decrypt a message the option --decrypt is used. You need the private key to which the message was encrypted. Similar to the ...
3
votes
1answer
80 views

How does ProtonMail manage search?

There is a service called ProtonMail that encrypts email on the client, stores encrypted messages on their server and sends it encrypted in some fashion (depending on what email service the recipient ...
5
votes
1answer
177 views

Which block cipher for a very short (40-bit) message?

Question: I'm trying to encrypt a 32-bit message to produce a ciphertext no longer than 40 bits. Are there vetted block ciphers or other good ways to encrypt very short messages? Are there any ...
3
votes
1answer
57 views

uploading pkcs12 to yubikey piv slot

i have a id_rsa (private key which is used by me to authentication and encryption together with cert on yubikey piv smardcart provider on slot 9a) now i wish to use this key to create a pkcs12 ...
-1
votes
1answer
70 views

Tool for reading application data before it's encrypted [closed]

For a test, I have a simple client-server Python socket-based application with a self-signed certificate. The code is copied from here. Although I don't see the traffic as TLS in Wireshark (why?), ...
2
votes
1answer
93 views

Is storing encrypted and hashed versions of the same data less secure?

I have some database columns which are encrypted. Obviously there is no way to filter these by plaintext value. As the data stored in the db is ~~salted~~ combined with the IV, there is no way to ...
3
votes
2answers
87 views

Is email sent form a Java web-app over a HTTPS connection encrypted?

I'm working on a Java web-application which runs on a HTTPS connection. This application sends emails to its users. I want to protect those emails from man-in-the-middle attacks and other potential ...
82
votes
15answers
17k views

Why would someone “double encrypt”?

If I have a website or mobile app, that speaks to the server through a secured SSL/TLS connection (i.e. HTTPS), and also encrypt the messages sent and received in-between user and server on top of the ...
1
vote
0answers
27 views

Finding the key of encrypted string (given known decrypted message) [duplicate]

I have a bunch of messages where I can run the encrypted message against a validation services, and get a response that the encrypted message is valid as well as the contents of the encrypted message. ...
6
votes
2answers
362 views

Am I weakening symmetric OpenPGP encryption by deploying a custom pre-derivation?

I often use GnuPG to encrypt files with a passphrase. I'm very paranoid, and afraid that the key derivation used by GnuPG isn't slow enough. For this reason, I've decided to do my own key derivation ...
3
votes
1answer
49 views

How to prevent data from Interception?

I am a web developer. A few days ago, I used Burp, to intercept facebook's official App over network, by setting up proxy. I noticed that the data was encrypted. While I have been using Json to ...
-6
votes
6answers
182 views

Relative merits and risks of encryption and OS security [closed]

There are many aspects to computer security and many threats to address: poisoned DNS, worms, trojans, viruses, rootkits, firmware malware, etc. One of the biggest software vulnerabilities is buffer ...
3
votes
2answers
43 views

Specifying my key name while encrypting file to some receiver using GnuPG

I would like to make sure of one thing. When I am encrypting file, the only needed key to specify is --recipient, because I only need to specify key to encrypt (receiver key)? I don't need to specify ...
35
votes
6answers
3k views

Is C a good choice for security-related software any longer? [closed]

C is a rock-solid and widespread programming language that is very popular especially in the FOSS community. Many security-related software (such as encryption libraries) are written in C and will ...
1
vote
1answer
44 views

Location/proximity based decryption using separate machine

I read a long thread where the whole issue was revolving around deriving decryption keys from GPS location. This has huge issues, as being present at a location is not needed to know the location. ...
-4
votes
2answers
48 views

How and what is used when information is sent to a hacker's server? [closed]

I'm working in some malware research, my main question is how the victim's data is transfered over the internet, protocol and how? Using HTTP or any other way? As fat as I know the data can be sent ...
1
vote
0answers
57 views

Encrypted Malicious Traffic Database

I was working on a little research project to correctly identify the encrypted traffic pattern generated by various tools/applications for example metasploit (or increase the success rate). I have ...
3
votes
1answer
96 views

Putty settings - Protocols and Algorithms to warn about

I specify "Putty" as otherwise I feel the question would be too broad. What are the algorithm (as of March 2016) that one needs to be warned about (ie, those that no longer are considered safe ...
5
votes
2answers
149 views

Is AES 128 encryption weak for very small payload size?

If I have a payload of e.g. 8 bits and I want to encrypt it using AES 128, I will need to add some random padding to make the plaintext 128 bits long. Does this padding affect the security of AES?
0
votes
1answer
67 views

Checking a salted hash against known password?

I've created a mysql dump of my users and passwords and awked them into a presentable form: Passwords: ...
2
votes
1answer
67 views

Cisco Registered Envelope Service (CRES), big security flaw?

While researching so called HIPAA compliant email providers, I came across Cisco Registered Envelope Service(CRES), which claims to be HIPAA compliant. According to this instruction, upon receiving ...
0
votes
0answers
76 views

How to decrypt a microSD card after a factory reset of the device used to encrypt it?

Two month ago, I encrypted my Micro SD card in my Android device (Samsung Galaxy S5) for security purposes, and yesterday I forgot to decrypt it whilst removing the card I and factory resetting the ...
0
votes
2answers
84 views

How to have client encryption without server encryption key

I want to build a service where people can message each other via their mobile device so that they encrypt all of their information on their device and not on my server. Basically I want to two people ...