Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

8
votes
3answers
2k views

Is it safe to store a single symmetric key encrypted with several different RSA public keys?

For the field-based encryption of a database containing sensitive information, I was thinking of the following design: Every user has a smartcard used for client certificate login. After login the ...
5
votes
1answer
2k views

Device versus file based encryption in TrueCrypt for a flash drive?

Are there security tradeoffs to be considered in deciding between encrypting an entire flashdrive with TrueCrypt versus storing a file encrypted container? The security goal is to be immune to the ...
7
votes
2answers
5k views

How expensive is it to guess a 15 character password, and should I be worried?

I'm currently using AES encryption (at home) on GNU/Linux (one of LUKS AES-256 variants with xts) and on Windows 7 (Truecrypt) with a 15 characters password (alphanumeric lowercase only plus _). ...
5
votes
2answers
2k views

How to store IV and key temporarily but securely

I am using .NET 4.0 to develop a Windows service that will temporarily store encrypted data in a database. The data will be encrypted when it is inserted, then decrypted, processed, and deleted once ...
10
votes
4answers
3k views

How do I encrypt the source and destination IP address, along with various parts of an email?

If the subject makes no sense to you, that's fine, it makes no sense to me. I've been tasked with securing emails sent from some devices, and I'm looking for advice on intelligent questions to ask to ...
5
votes
2answers
1k views

How does the encryption of FPGA works?

I know that FPGAS of Altera enables you to encrypt the RTL code while you work with it, what I can't understand is why it is really encrypted since once I have the FPGA, I can take it and with flash ...
4
votes
11answers
4k views

Definitely safest password storage scheme?

I already asked this on StackOverflow but I was suggested this would be a better suited place and I found no way to "move" the question so I have to copy it. Believe, I know, there are hundreds ...
4
votes
2answers
699 views

Blackberry QNX / Playbook encryption details

Now that Blackberry received FIPS 140-2 certification for one of it's QNX devices, does anyone have technical specifics on how data is encrypted on both mobile phones or the Playbook tablet? I'm ...
3
votes
5answers
429 views

Securing data transfer between public network and personal accounts

I would be traveling soon and I am looking for all kinds of ways to encrypt the data transfer (usernames, passwords, emails ...) between the new networks to which I will connect my Laptop, that is ...
3
votes
4answers
341 views

Help to account all the points of physical access to a rack server to steal software

Let's say I want to move my 1U Dell server to co-location site with a hostile company who will try to steal my code (this is almost 90% probability if I dont take steps)... The limitation for their ...
1
vote
1answer
686 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
3
votes
2answers
727 views

Where can I find information about how to implement Intel embedded AES256 encryption?

I heard this can really speed up encryption performance, but I can't find any good information about how to implement it.
3
votes
3answers
2k views

Is encrypting data with a private key dangerous?

I have been reviewing code for various internal apps that handle secure transmission of data with external systems. These follow the following process: RSA encrypt data with 3rd party public key RSA ...
3
votes
4answers
413 views

Personal Data Encryption Workflow

By personal, I mean for one person that's not sharing the workflow of data access with any other users. Appears based on the feedback I got on ...
118
votes
11answers
35k views

Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?

Why can't a password hash be reverse engineered? I've looked into this ages ago and have read lots on it, but I can't find the explanation of why it can't be done. An example will make it easier to ...
2
votes
2answers
6k views

How to improve performance of encrypted MySQL database on Linux backend server?

Is ezNcrypt's transparent encryption technology the only way to get a big boost in performance? Are there other good solutions out there we could be looking at for encrypting the entire database with ...
3
votes
1answer
1k views

Is hardware based disk encryption more secure that software based?

As a spin-off of my question on "Advice on buying an encrypted disk" -- and in an effort to address the question "how is hardware based disk encryption better?" -- I've started a new question. My ...
2
votes
2answers
304 views

OpenPGP: Sign-Verify workflow without Encrypt-Decrypt?

Is it a good and/or frequent practice to sign a file (with your own private key) without encrypting it (with the intended recipient's public key?) I haven't really been able to find a direct answer to ...
2
votes
3answers
399 views

Would a per-file encryption system any more or less secure than volume encryption?

Guessing they're the same, but not 100% sure. UPDATE: My mistake for not clearly stating the it would be assumed the keys per-file, or for a whole volume, would be the exact same -- not to mention ...
1
vote
1answer
328 views

Should I mount my mac Truecrypt Volume elsewhere?

I've read in various places to not mount your truecrypt volume in the same place as your Dropbox or Sugarsync folder. I believe this only matter for Mac/Linux, but I need some verification. On a Mac, ...
3
votes
1answer
2k views

Storage of 'secrets', keystores, HSMs and the rest

I've been digging for the past few days into storage of sentitive data. If I store this data in a database, I believe the general accepted practice is to store sensitive data encrypted, for various ...
51
votes
7answers
14k views

How hard is it to intercept SMS (two-factor authentication)?

A lot of two-factor authentication mechanisms use SMS to deliver single-use passphrase to the user. So how secure is it? Is it hard to intercept the SMS message containing the passphrase? Do mobile ...
0
votes
5answers
915 views

What voip client support manual encryption?

In pidgin there is a plugin that we can use to encrypt our messages in chat windows .. Is there anything simular for voip (pc to pc) ? any client that support manual encryption for voice data?(linux)
5
votes
1answer
695 views

Is BitLocker on a virtual machine FIPS 140-2 security level 1 compliant?

BitLocker can be used as a cryptographic module to fulfill FIPS 140-2 security level 1 compliance. What if the encrypted drive is on a virtual machine, is that still FIPS 140-2 compliant? In one ...
0
votes
1answer
846 views

Is Data Object on openPGP smartcard v2 encrypted?

currently I thinking about on-the-fly disk encryption using Truecrypt/dmcrypt LUKS with key stored on smartcard. I would like to use openPGP v2 smart card, respectively GPF Cryptostick which is based ...
7
votes
2answers
1k views

How to encrypt a password stored in a database (need to decrypt later)

I am working on a system that can connect to any number of different systems. Someone inputs the credentials for a system to connect to, and my system remembers the credentials and uses them to ...
1
vote
1answer
713 views

PAP and CHAP implementation using Java

I want to implement PAP and CHAP based authentication in my Java project how can I implement ? is there any API available in Java for using that protocol ?
3
votes
1answer
856 views

Cipher Key Length versus Encryption Bits

I am trying to add encryption functionality to a PHP script, modeled on an existing C# application. The C# app uses the Rijndael algorithm with default constructor. From this I am able to determine ...
6
votes
2answers
452 views

With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?

From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
4
votes
1answer
368 views

What does colluded truncation attack mean?

I'm doing my final year engineering project. I went through some ieee papers and came across something called colluded truncation attack. Can someone explain what it is. I'm planning to do the project ...
5
votes
1answer
899 views

Do TrueCrypt volumes look like random data?

Let say I use Eraser (or other tools) to erase my hard drive (using DoD standards which is 7 times or Gutmann which is 35 times), These eraser tools just write random data on the hard drive many ...
10
votes
3answers
815 views

Encryption-Laws in Iran

According to this article Iran has criminalized the usage of encryption and VPNs. According to this blog post it is still possible to use SSH tunnels in Iran. For me SSH is encryption and thus ...
4
votes
4answers
943 views

Are backups of truecrypt volumes with different pass phrases a security risk?

Lets say that I periodically change the pass-phrase on a truecrypt volume. The volume is regularly backed up, so my backup system has many copies of that volume, many of which have a different volume ...
6
votes
1answer
1k views

Bcrypt as a key derivation function?

I read a lot of entries at stack exchange about bcrypt and why it is supposed to be better than PBKDF2 in terms of password storage. I'm asking now if bcrypt is better than PBKDF2 in terms of key ...
4
votes
2answers
952 views

What cryptographic module does Sql Server 2008 use to run in Fips 140-2 compliant mode by default?

One can configure Sql Server 2008 to run in FIPS 140-2 compliant mode, in the same manner as running Bitlocker in FIPS 140-2 compliant mode. Which is to activate FIPS 140-2 compliant mode in the ...
3
votes
4answers
556 views

Base64 conversion for byte array in encryption

I am using ECC algorithm for security. Now the concern is I am placing the data in web page after encryption of the data in hex format and transmit to server and then it decrypts the data, but when I ...
5
votes
2answers
2k views

openssl_digest vs hash vs hash_hmac? Difference between SALT & HMAC?

openssl_digest vs hash vs hash_hmac I want to use SHA512 for storing password. Which of the above methods are best to use? Why? What is the difference between SALT & HMAC? I just read ...
8
votes
1answer
429 views

Protecting emails in your database

It's common to encrypt passwords in the database, but I'm wondering what solutions are out there to protect emails in your database. Not just from hacking, but from disgruntled employees or engineers ...
3
votes
1answer
3k views

What algorithm/encryption type does Gmail use for security?

In the wake of the recent database hacks, i.e. Sony, Gawker, etc.. where the hackers have access to the hashed usernames and passwords, i've been more keen in paying attention to the sites and ...
23
votes
5answers
2k views

Do spaces in a passphrase really add any more security/entropy?

I often see passphrase suggestions written as a sentence, with spaces. In that format are they more susceptible to a dictionary attack because each word is on it's own as opposed to a large unbroken ...
1
vote
1answer
2k views

Are there any reviews or user experiences with Secretsync?

I haven't been able to find much in the way of professional reviews for Secretsync - http://getsecretsync.com/ss/ But i'm wondering how it compares to Boxcryptor and Truecrypt. How secure is ...
2
votes
2answers
368 views

What does “if the Crypto Officer performs this operation” mean in this BitLocker security policy?

In the document Windows Server 2008 R2 BitLocker™ Drive Encryption Security Policy For FIPS 140-2 Validation, in the section 6.1.2 FIPS 140-2 Security Rules bullet point 2 it says: BitLocker™ will ...
7
votes
7answers
2k views

Verify the password of an encrypted file without waiting for complete decryption

I am currently working on an application that encrypts files with AES 256. The problem is that I want the user to see whether the password is wrong before the file is decrypted. For example if you ...
3
votes
5answers
361 views

Exchanging private keys

I would like to understand something about security. Say two parties have a private piece of data (e.g. a password or license key) and the receiver needs to know that the sender has the same key and ...
6
votes
3answers
931 views

How secure are self decrypting HTML files for data storage?

I recently came across a JavaScript self decrypting archive. Is it secure enough to be used as a portable password storage tool? The author has even challenged it to be cracked.
7
votes
1answer
3k views

SSL encryption and SSL certificates

I know for a fact that it's possible for for an SSL\TLS session to go on without an SSL certificate, meaning you pass encrypted data, but you don't have a solid foundation of who you are really ...
9
votes
3answers
6k views

Storing Credit Card Numbers

I'll be making a website with a membership type of option for the website, and I'll be most likely using Authorize.Net to make the transactions, however, I need to know what kind of encryption I can ...
2
votes
1answer
888 views

Which crypto-algorithem uses iOS in NSDataWritingFileProtection and what is the keysize?

I need to know the crypto algorithm and key strength of NSDataWritingFileProtection. I would like to know the same things for using the Keychain and NSFileManager. I searched the Apple Developer ...
2
votes
1answer
467 views

Does Bitlocker qualify as the 'Cryptographic Module' defined in FIPS140-2?

Wikipedia defines Bitlocker as: BitLocker Drive Encryption is a full disk encryption feature included with the Ultimate and Enterprise editions of Microsoft's Windows Vista and Windows 7 ...
4
votes
1answer
385 views

Thoughts on creating unscalable conditions to brute force even small passwords?

I stumbled upon something called "scrypt" which claims to add fixed time/space complexity requirements into password-based key derivation. Quoting from their page: A simple password-based encryption ...