Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

13
votes
4answers
5k views

What are you doing when you move your mouse randomly during a truecrypt volume creation?

Is that called a 'round' every time you move your mouse when creating a new volume? I'm talking about the screen with the random numbers during the volume creation process. What is the purpose of ...
5
votes
3answers
1k views

Will editing a Word file from a mounted Truecrypt volume leave any trace behind on the host computer?

I've heard that even if you have a Word document encrpyted (just using the built in Word encryption tools) and are editing it, it can still leave behind remnants of a file on the local computer in ...
3
votes
1answer
442 views

HP ProtectSmart In A Domain?

All of our HP PCs come with this software pre-installed, I'm a bit inclined to outright remove it because: Credential manager stores passwords by default (this has lead to user confusion, plus ...
8
votes
2answers
10k views

sniffing/recording GSM 3G signals

Is it possible to sniff or record and process GSM 3G signals (from some reciever) given that there is no other signals interrupting etc (the most comfortable conditions) Update (with some supporting ...
0
votes
3answers
1k views

Why do some LUKS tutorials mention overwriting the partition with random data?

On a lot of tutorials on luks encryption, people say to override the partition with random data, so that data is not recoverable after encryption. I don't understand that. Will the random data be ...
6
votes
4answers
1k views

Encrypt files on flash drive for easy decryption

I am looking to give some files to my accountant, who is not computer-savvy. I am going to put the files on a flash drive encrypted. I assume, accountant has no software other than standard Windows ...
21
votes
6answers
8k views

Is AES encrypting a password with itself more secure than SHA1?

This isn't really a practical question, but more a question of curiosity. I heard a CS professor recommend stepping up from md5ing passwords not to SHA1, but to AES encrypting the password using ...
7
votes
3answers
249 views

Searching encrypted storage

I have been reading some very interesting academic papers regarding the ability to search encrypted data without needing to actually decrypt the data. Doesn't this defeat the purpose of encryption in ...
7
votes
9answers
4k views

How can I share files with other individuals using the cloud in a secure way?

I would like to use a dropbox because it is easy and convenient. But I want to encrypt the files with the public key of the intended recipient, so he will be the only one who can access the data in ...
9
votes
4answers
1k views

How would you analyze an image to find out if there are scripts embedded in it?

How would you analyze an image to find out if there are scripts or possible malware embedded in it? What tools / methods to use?
9
votes
2answers
91 views

Do I need to password-protect an “Electronic Copy” of health information given to a patient on e-media?

I'm struggling to find good documentation regarding requirements around security and encryption of patient clinical information when delivered to a patient in electronic format. Patient portals, ...
8
votes
3answers
4k views

Can I use a private key as a public key and vice versa?

I have code to encrypt data using a public key and decrypt it using a private key. This is useful when a client wants to send data to a server and know that only the server can decrypt it. But say I ...
3
votes
1answer
737 views

Sip call Developing in android with secure data transfer

I would like to make an application similar to RedPhone on android. I took a look at SipDemo from developer.android.com and at the android.net.sip package.My question is, when you make/receive a call, ...
4
votes
1answer
568 views

Android for the Paranoid

In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: ...
0
votes
1answer
356 views

Enterprise Encryption Considerations

What are the different aspects to consider for Enterprise Encryption policy? So far the resources I have are: https://www.owasp.org/index.php/Cryptographic_Storage_Cheat_Sheet ...
8
votes
3answers
1k views

Secure PXE network OS installation

How can one make sure that when PXE is being used to boot a remote operating system, that the data being sent is encrypted (or at the very least that integrity is maintained)? Would it be possible to ...
5
votes
3answers
1k views

Best user data encryption design patterns?

Let's say that I have a website that allows users to upload files (much like Dropbox), and I need to encrypt those files so that only the users that have access to them can view the file data. Users ...
0
votes
3answers
477 views

Best protection against a “chosen-ciphertext” attack?

What is the best protection against a "chosen-ciphertext" attack when transmitting (=streaming) secured (=crypted) data via networks using the TCP protocol?
6
votes
1answer
3k views

Creating a “key server” (HIPAA compliance with AWS)

I'm a part of a small company that is going to be implementing HIPAA compliance. We will be seeking legal counsel, etc so anything heard here will not be taken as legal advice, etc. I just want to ...
2
votes
2answers
135 views

Would a large prime service be useful?

The target users would be portable/embedded devices or resource limited code (i.e. javascript). The idea being that the devices could poll the service for validated primes and use them for encryption ...
36
votes
9answers
18k views

Are powerline ethernet adapters inherently secure?

I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
4
votes
4answers
1k views

Cloud computing: future security challenges and solutions

I am currently writing a paper on the future security challenges of Cloud Computing, and possible solutions to these problems. After many hours of reading articles on the internet (my nearby library ...
4
votes
6answers
214 views

Archive encrypted traffic, for later decryption attempts?

I am concerned about sending long-term sensitive information over SSL. Someone who does not have the private key could record SSL traffic (with WireShark, Fiddler or some such) and store it for ...
13
votes
10answers
20k views

Techniques for Writing Encryption Algorithms (Exclusively For Personal Use)

I'd like to preface this question by stating that I fully understand the dangers of writing your own encryption algorithms, and I would never, ever, use homemade encryption to secure the data of ...
5
votes
1answer
22k views

How to use OpenSSL generated keys in Java?

I have my pair of Public and Private keys and my certificate. Those where created in OpenSSL (why? because I was asked to do it in OpenSSL). Now I want to use those things to make a Java app that ...
4
votes
1answer
481 views

How can I validate data on RFID chip that has RSA signatures and SHA1 hash values?

I have a RFID chip that has a digital signature using RSA and has data hashed using SHA1. I would like to compare data from the chip and user input in a program but I believe in order to do that I ...
5
votes
6answers
10k views

Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL

We store user email addresses in our database, like many other websites. While we do take pride in the security measures in place, sometimes "just enough" is just not enough. We've begun looking into ...
1
vote
0answers
65 views

References on encryption in enterprise settings [duplicate]

Possible Duplicate: Enterprise Encryption Considerations I'm making a document on enterprise security. I'm looking for references and inspiration on the following topics: Enterprise ...
8
votes
4answers
1k views

Automated encryption detection

Is there any program that, given a cipher text, it would tell me what the encryption algorithm is? What if I have the plain text? Is there something that can be done in that case?
5
votes
2answers
3k views

What asymmetric encryption algorithms are in common use beside RSA?

I am looking for an asymmetric encryption algorithm other than RSA?
3
votes
1answer
199 views

What are best practices considering the use of Apple data protection?

Since iOS 4, Apple data protection supports hardware based encryption of confidential information on the device. I looked around for best practices considering the use of Apple data protection, but ...
12
votes
4answers
5k views

Does symmetric encryption provide data integrity?

Let's say I have one server that encrypts a file with a symmetric key, e.g. AES-CBC, and sends it to clients that decrypt it. Does that provide data integrity when decrypted? Or is it possible for ...
5
votes
3answers
2k views

What are the odds of brute-forcing an archive with 256-bit encryption?

I have a file (a stand-alone archive). I lost the password to it, but it has been encrypted using 256-bit encryption. The password is some 20-odd characters long (including non-alphanumeric ...
3
votes
1answer
352 views

Security for a low latency online multiplayer game

I am designing an online multiplayer game and I am looking for a good tradeoff of secure communications with minimal CPU and bandwidth utilization. My ideal solution would only use UDP packets since ...
5
votes
4answers
2k views

How to roll my own security mechanism - avoid SSL

i'm looking at implementing my own security mechanism rather than using ssl due to ssl being 'hopelessly broken' http://www.theregister.co.uk/2011/04/11/state_of_ssl_analysis/ and also because it is ...
3
votes
3answers
178 views

Resources/tools for controlling access to corporate email on smartphones

If one of our employees has access to corporate email on a smartphone I want to make sure that if they lose the phone then whoever finds it can't get at any corporate email on that phone. For iOS ...
7
votes
2answers
2k views

ssh public/private key pair

I am having problems understanding how ssh really works. I know it uses a public key cryptography to encrypt messages. However, I can ssh to a server without first generating a public/private key pair ...
0
votes
1answer
283 views

What should be Database encryption strategy ?

In MS SQL Server 2005/2008 standard encryption all data in the database is encrypted using the SMK/DMK scheme. In this scheme a key is issued for each client connecting to the database. What would a ...
5
votes
5answers
12k views

SHA, RSA and the relation between them

SHA is the hashing mechanism. However, RSA is the encryption algorithm. So does RSA algorithm use SHA hashing mechanism to generate hashing keys which in turn is used to encrypt the message?? ...
0
votes
1answer
101 views

Encrypting important context vs data sets associated with context

I am looking for an example in the real world where only a portion of the entire data set is encrypted even though the entire data set is considered sensitive. Specifically the portion that gives ...
3
votes
2answers
1k views

Statistical data about the performance of various encryption algorithms

How can I find statistical data about the performance of various encryption systems, such as RSA, DSA, ECC etc?
5
votes
2answers
388 views

System for Mutual authenticaion and confidentiality

I am looking for a protocol where there needs to be mutual authentication between client and server. For example server should connect to a particular client only. That is client should authenticate ...
12
votes
3answers
11k views

How do I ensure data encryption on Samba transmission on *NIX systems?

I have a heterogeneous system (both MS and *nix) that communicates with CIFS/SMB. How can I ensure proper data encryption at the application layer?
2
votes
1answer
6k views

Is 4096 bit good enough to encrypt data?

I need to store encrypted information in a mysql table. I would like to use the AES algoritm but I don't know if 4096 is supported and if it is a good length to encrypt data like: credit card, email ...
2
votes
1answer
733 views

How can credit cards be encrypted and still be recalled later?

Many merchants offer to save credit card info in an encrypted form for faster checkouts from their store in the future. How is it that merchants can store this information in an encrypted format and ...
4
votes
2answers
2k views

Incrementing Initialization vector by 1

Suppose that we do not generate initialization vectors randomly (using AES in CBC mode). Instead it is initially all zeroes and we increment it by 1 each time a message is encrypted. How can this ...
6
votes
3answers
3k views

Is it possible to infer that a hidden truecrypt partition is likely to be present

Truecrypt contains a feature that let's you create a hidden volume. It's said that it can't be proven if a hidden volume exists. However, is it possible to infer from the state of the data on the ...
7
votes
1answer
477 views

OpenPGP Encryption / Decryption Process Using GnuPG

I want to know if my method of encryption can ensure the security of my data if my database was hacked as well as the authenticity of the data I am decrypting. I am using GnuPG's implementation of the ...
5
votes
6answers
814 views

What is the use of password encryption?

Why do we encrypt passwords? Is it to protect the password from eavesdropping? to protect the password after saving it in database? both? or for some other reason?
6
votes
9answers
5k views

What is the best way of securing a website logon without SSL or preshared keys?

Today I sniffed some unencrypted wlan traffic during class and I found quite a few passwords by a simple search for "pass" and "user" in wireshark. Turns out about half the sites we use for school ...