Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

11
votes
1answer
368 views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...
151
votes
2answers
94k views

What is the difference between https://google.com and https://encrypted.google.com?

Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)? In terms of security what were the ...
0
votes
1answer
80 views

Vicious circle with certificates - how to trust the server cert?

I have a java app on Android that needs to be able to communicate with a web server over ssl using an client x509 certificate (for encryption negotiation) - the private key is in the java keystore ...
8
votes
1answer
345 views

How can WhatsApp recover messages sent to a damaged phone?

My mom has an Android phone that fell in the water for a couple of seconds, around 16:30. She managed to disassemble the phone and turn it off. We both share a group that is end-to-end encrypted (all ...
3
votes
2answers
209 views

How to decrypt text when four first letters of the key are missing in Facebook CTF contest?

I am beginner in cyber security. Now I am participating on Facebook Catch the Flag contest. I have to solve following task: There is a key. But the first four characters of the key are missing: _ _ ...
1
vote
1answer
97 views

Is it OK to seal data to TPM SRK directly?

In reviewing various TPM programs and libraries, I have noticed that when sealing data to the TPM, a new key is always created (wrapped by the SRK), and that new key is loaded and used in the seal ...
0
votes
2answers
127 views

I want to encrypt certain entries in a database. Is this a good plan?

I'm working on a web app and want to offer the users the option to "encrypt" their account. This wouldn't encrypt everything related to them in the database. Just certain critical fields. I've ...
21
votes
2answers
24k views

Decrypting TLS in Wireshark when using DHE_RSA ciphersuites

How can I decrypt TLS messages when an ephemeral Diffie-Hellman ciphersuite is used? I am able to expose the premaster secret and master secret from the SSL Client. Using that, how to decrypt the ...
75
votes
10answers
8k views

Why even use a one-time pad if the key distribution is fully secured?

I had a job interview yesterday where they asked what the only scenario where a one-time pad can be broken would be, my answer to which was "when the key distribution process is not secure enough". ...
-3
votes
4answers
213 views

Roll your own encryption - with a twist

I am familiar with Schneier's Law: Any person can invent a security system so clever that he or she can't imagine a way of breaking it. I have read the many posts on this exchange littered with ...
2
votes
1answer
167 views

Authenticating a ciphertext

What can be considered as a downside of authenticating a ciphertext? For example, can we say a drawback of authenticating a ciphertext is that we lose repudiation, for example, we can't prove to the ...
4
votes
3answers
1k views

Calculate time taken to break AES key

A 256 bit AES key is required to be broken using the brute force method on a 2GHz computer. How long would it take to break the key in the best case and in the worst case situations? Assume that 1000 ...
4
votes
1answer
103 views

Ways to generate symmetric and asymmetric keys

We are using Beaglebone Black based custom board, and want to use hybrid encryption for encrypting firmware file, i.e. symmetric for encryption big firmware file and asymmetric for encrypting ...
2
votes
3answers
565 views

Can I decrypt a DiskCryptor-encrypted hard drive using Veracrypt? [closed]

I have a hardrive I encrypted with DiskCryptor back when I was using Windows. Now that I have Linux I want to decrypt the hard drive but it turned out DiskCryptor is not available for Linux, whereas ...
2
votes
1answer
118 views

PHP BLENC extension security concern

PHP BLENC is a extension that allows PHP developer encrypt their code, protect their ideas and avoid illegal copy. Although BLENC allow developer to define the main encryption key in source(in the ...
3
votes
1answer
320 views

IoT Devices and 39 Month TLS Certificate Life

I develop IoT (Internet of Things) devices on small embedded systems, where it is very difficult to update the local certificate once they have been deployed. It really needs to be avoid if it can. ...
7
votes
2answers
2k views

When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?

When you take ownership of a TPM in Windows 7 you encounter a screen like this: Based on this document, it is my understanding that completing this dialog box somehow results in the generation of ...
0
votes
0answers
102 views

Security of an IoT network using AES (LoRaWAN)

I am studying the security of LoRaWAN. Here is a simplified architecture of the network: As you can see, there are two keys: one for the network security (no mitm, no modificatiof the messages). ...
1
vote
1answer
54 views

Offline Javascript and encrypted secret

When using Javascript online with the server, The server can provide a unique Key and Initialization vector for use in AES-CBC available in Webcrypto API. Each user has key allocated to them. The ...
2
votes
1answer
63 views

Telegram Visibility Into Secret Chat VS Plaintext

Background Telegram Messenger offers an "End-to-End" encrypted channel, with their home brewed MTProto, called Secret Chat. They have "Link Previews" by default in all modes, but Secret Chats, in ...
2
votes
1answer
85 views

How to find out if my MBR has Evil Maid code?

If Truecrypt Bootloader will remain visually the same, how can I find out if it was infected?
-1
votes
2answers
68 views

Store encrypted data locally on the phone that the Android and iOS app itself decrypts

I have an iOS and Android app where our "secret sauce" is a bunch of numbers (weights, actually) stored in a database. Our app uses these numbers to compare what the user of the app has given it, and ...
6
votes
2answers
1k views

Why is using a pseudo-random key considered more practical than a one-time pad?

I am experiencing confusion regarding one-time pads. I have read that a one-time pad generates a key that has the same length as the plaintext. This is considered to be an overhead in sharing such a ...
2
votes
0answers
18 views

Secure userserver authentication with authserver

So, lets say we have Bob, Alice and Peter. Peter is trusted by Bob and Peter has an authserver. Bob hosts a userserver and Alice wants to connect to Bob over an insecure channel. But Bob needs to know ...
0
votes
0answers
27 views

How to determine which form of encryption is used? [duplicate]

I have an application which is developed using classis asp. The password is encrypted in the following format - LHFJOJ1234 Can anyone tell me which format is this? I don't have the source code. So ...
2
votes
1answer
79 views

What encryption is used by 1password?

I use a password storage application on my Mac called 1password. I was wondering if it encrypts the data it stores on my computer and decrypts it using a key made from my "one password" or if it has ...
2
votes
0answers
12 views

Multiple PGP keys on one server [duplicate]

I have a server on which we are planning to expire the current PGP keys later this year. Now we have several clients which are currently using that PGP key. We want to have another new PGP key pair ...
4
votes
1answer
155 views

Protecting master password in memory

Assuming I want to enter master password only one time at the start of the program, how is this master password usually protected in memory after that? Is the encryption key after being derived from ...
-2
votes
1answer
76 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
1
vote
2answers
89 views

Does this method of password confirmation risk encrypted file integrity?

I'm trying to make a basic encryption/decryption script for personal use, and it works perfectly fine. I'm posting this in the infosec section because my question revolves around how easy it is to ...
2
votes
3answers
245 views

Can you ever be 100% sure you decrypted a message?

Put in simple terms, for most encryption algorithms: can you technically ever be sure you actually decrypted something? Sure, if you decrypted a word document and MS Word can open it, you've got a ...
0
votes
0answers
16 views

Which bytes in an OTA Command Package are encrypted with the KIc by 3DES CBC?

I have an un-ciphered OTA message in clear and I am trying to cipher it so it becomes secure data. The cryptographic checksum is already generated as part of the un-ciphered OTA message. I have the ...
3
votes
3answers
207 views

Can you use ssh for secure inter app communication on the same device?

I use ssh to get an encrypted connection between servers and local machines all the time. It's fast, it's secure, and there's a way to do it in nearly every system programming language that I've used ...
-4
votes
1answer
101 views

Preventing someone to generate a public key from a private one? [closed]

From what I read, encryption algorithms such as RSA permits to generate the public key from the private one. Long story short, for a thesis I'm writing, I thought to solve a security issue with users ...
-1
votes
1answer
37 views

Map of Protocols to Encryption/Cipher Suite

I am looking for a mapping of all protocols (HTTPS, SCP, SFTP, LDAP, RDP, ect) along with the Encryption Protocols that can be used with them (SSH, SSL/TLS, ect) and if possible their Cipher Suites (...
107
votes
14answers
30k views

Is there any technical security reason not to buy the cheapest SSL certificate you can find?

While shopping for a basic SSL cert for my blog, I found that many of the more well-known Certificate Authorities have an entry-level certificate (with less stringent validation of the purchaser's ...
1
vote
0answers
48 views

Are there any benefits in using VPN service for application with SSL pinning?

I understand how using a public VPN service can make network connectivity more secure in case of HTTP, or even HTTPS a without certificate pinning in place. Suppose we have a fat client application ...
0
votes
0answers
56 views

Is there a way to use clear key encryption for protecting media HTML5 media streams?

I am trying to understand EME with Clear Key encryption. I am using MP4Box. From the documentation here, you specify decryption keys in an XML file that is used to encrypt/decrypt your mp4 files. ...
4
votes
1answer
297 views

Putty settings - Protocols and Algorithms to warn about

I specify "Putty" as otherwise I feel the question would be too broad. What are the algorithm (as of March 2016) that one needs to be warned about (ie, those that no longer are considered safe enough)...
2
votes
1answer
51 views

Way to combine encrypted tar and encrypted symmetric key with which tar was encrypted?

We are using Beaglebone Black (AM335x) based custom board, so for firmware upgrades of the board we will be using an encrypted firmware image. As you would have already guessed, we will be using ...
0
votes
0answers
31 views

Is any encyption used for EAP-TLS certificate exchange?

I was reading about the EAP-TLS and mutual client - server authentication using digital certificates. In the authentication process explained in RFC 5216, both server and client exchange ...
0
votes
0answers
52 views

Would a hard-coded public key or fingerprint protect against MITM?

Say there's a server and a client. Normally to connect and establish an end-to-end encrypted session, they'd have to carry out key exchange, which potentially gives an attacker the opportunity to ...
1
vote
1answer
97 views

Password Encryption For PHP 5.3 or Should We Update to 5.5+?

I'm trying to hash passwords for our company site. After testing on a local Apache server that has PHP 5.5.9 and everything working as expected, I went to test on our live server being hosted by ...
4
votes
2answers
128 views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
0
votes
0answers
69 views

How could I encrypt an SD card to store data on it?

I have some data I'd like to carry with me in an encrypted form onto an SD card, so I (and only I) can access it easily from any OS (or at least Windows, OSX and Ubuntu). My idea was like: Two ...
2
votes
1answer
83 views

Is using trim on a ssd with LVM LUKS safe?

I know that it can allow an attacker to know the filesystem and file size, but can it allow an attacker to decrypt any files?
1
vote
1answer
110 views

How to detect zip file encryption algorithm

As we know zip files supports a simple password-based symmetric encryption system and some vendors use other algorithms. I used the zipinfo command in Linux but it doesn't say what encryption ...
14
votes
10answers
38k views

Is Windows BitLocker secure?

Naturally I feel that I have to ask this question, since it's a built-in feature in Windows. Let's say someone has physical access to my PC, is there an easy way for them to access a BitLocker ...
0
votes
0answers
16 views

Password Managers — Generating Passwords On The Fly a Safe Approach? [duplicate]

Most password managers store user credentials for individual services encrypted on their own back-end databases, so that your passwords are available on multiple devices. So, a DB compromise on these ...
0
votes
1answer
94 views

How to check if the decryption is correct?

I'm working on chat room that encrypt messages for more than one users and each user might have different encryption and key/password. The user's key won't work with all the message, therefore; return ...