Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

6
votes
4answers
267 views

How to communicate securely

What is the proper way for two parties, say A and B, to communicate securely where: Communication between A and B must be secure so that only they know the content of the communication. A isn't ...
0
votes
2answers
131 views

Is it safe to store encrypted volumes on cloud syncing services?

A recent discussion on another website prompted a proclamation that storing (TrueCrypt, LUKS, DMG, etc) on cloud sync services like Dropbox is unsafe, since a version history is kept of each file, and ...
0
votes
3answers
296 views

How to trace the owner of a computer by mac address

I was given the mac address of a computer that was on my wifi . It was not my computer. There were 2 computers, mine plugged to the modem and a 2nd computer with different mac address than mine. So I ...
0
votes
1answer
55 views

Looking for a way to encrypt/decrypt data using a generated key that works in Windows and Linux

I am looking for a way to encrypt/decrypt data on windows and linux platforms. The data gets encrypted in windows and the same data needs to be decrypted on linux/windows and vice versa. I understand ...
-2
votes
1answer
82 views

Is it really worth to spend time on Telegram Crypto Contest? [closed]

Telegram is running this crypto contents. But what I heard from some people on the web is that they designed the contest in such a way that they made it practically impossible to crack. Is it really ...
1
vote
1answer
72 views

Is it safe to combine AES with TLS?

Given that two clients want to sync data through a server, is it safe to use AES to encrypt the data and TLS to communicate with the server? Assumptions: Server has never access to unencrypted data ...
0
votes
2answers
230 views

Is an >=2048bit key with Asymmetric encryption secure enough to negotiate a Symmetric encryption key?

Let's say that a client app already knows the public key of the server to which it needs to communicate with and the client app needs to connect to the server using a normal non-secured internet ...
0
votes
1answer
37 views

Encryption and unique id [closed]

Why not encrypt all confidential, sensitive and borderline data? Why not use a fingerprint ID system as the private encryption key? Why not use a fingerprint and/or other unique identifier such as ...
4
votes
4answers
673 views

Effects Of Encryption On Computer Systems

I am currently writing an essay and one part is a discussion about the effects of encryption on an Operating System/Computer/Infrastructure in general. However, I am struggling to see how a computer ...
3
votes
1answer
147 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
0
votes
0answers
32 views

Has Stackfield been security audited and is the metadata safe?

It appears that Stackfield is one of the only functioning applications that combines end to end encryption, messaging services and file sharing. Peerio has just been launched (literally a day or two ...
6
votes
3answers
795 views

How to encrypt all existing customer passwords [closed]

I work for an online shop and since I worked here we have stored customer passwords in plaintext. I joined the company as a data inputter and when I discovered that we did this I flagged it up with ...
1
vote
0answers
53 views

For use with RC4 how do I combine a reused key and an initialization vector

I am an a-level student writing an encryption program using an rc4 implementation I have written myself. I have the basic algorithm coded correctly (and I have checked that some ciphertext for a given ...
2
votes
1answer
121 views

Hashcat, finding out the Hash

I've been searching but I can't seem to find the much information on how to extract hash's from say PDF files or Lotus Notes files that I can then use in Hashcat? I know how to get them for Office ...
31
votes
3answers
4k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
2
votes
0answers
65 views

How to securely store application data on mobile device

How can security be enhanced to the maximum in a messaging app storing messaging history on the device (like whatsapp)? I am specifically referring to methods to minimize the risk of the data being ...
3
votes
1answer
155 views

Has the POODLE SSL vulnerability ever actually been used?

Is there any evidence that the the POODLE SSL or TLS has actually been proven to be a risk for file transfer like SecureFTP etc...? ...or is it just a theoretical exposure?
27
votes
4answers
5k views

How do I verify that WhatsApp is using end-to-end encryption?

Slightly old news: Whatsapp Just Switched on End-to-End Encryption for Hundreds of Millions of Users Is there any test that I can perform to verify that WhatsApp is indeed using end-to-end encryption ...
5
votes
2answers
653 views

Security of Linux Full Disk Encryption (Ubuntu / Mint) -insecure?

I'm wondering, why is Ubuntu and Mint using SHA1 for Full Disk Encryption? I heard several times that SHA1 shouldn't be used anymore because it is weak and it could be cracked. Could you guys ...
1
vote
1answer
127 views

Microsoft Bitlocker - Using my own encryption/decryption key

Is it possible for me to use my own encryption or decryption key and update it whenever is possible?
1
vote
2answers
164 views

Overkill or appropriate?

I have come across a web application that a company has asked me to rebuild. After all the implementation is said and done I will deploy on a private server, and the database will be on its own ...
1
vote
1answer
47 views

How do you practically manage your never-use-personal-accounts-on-a-work-machine-ever double life, when your personal machine is a limited iOS device? [closed]

This is follow-up to Starting a new job after working at home for years. How to best protect data, secrets, and privacy in the workplace? The answer to that question is Follow company security ...
0
votes
2answers
74 views

Is it possible to run an encrypted java environment?

I've seen that virtual machines in virtualbox or VMware can be encrypted so that no one on the outside can access the disk, ram or CPU cache since the entire hardware is emulated and encrypted too. ...
0
votes
1answer
35 views

How does a keyfile work?

I was looking at some code on codereview that is far out of my league of understanding and just screwing around, but it raised a question. This program (along with many other encryption programs, i ...
0
votes
1answer
87 views

Starting a new job after working at home for years. How to best protect data, secrets, and privacy in the workplace?

I have just started interviewing for new computer job after years of working from home. At home I feel very secure with how I protect myself from data loss and keeping my secrets secure. I backup ...
2
votes
1answer
56 views

PBKDF2 strong salt for client-side hashing

What should I use as a secure/strong salt for PBKDF2 hashing when salt is not available to use before login as it will be client-side javascript to hash user+pass with PBKDF2 ? I'm going to use ...
2
votes
1answer
38 views

Is it feasible to create a new key for symmetric encryption for each message rather than negotiating a long lives session?

The normal method of providing an encrypted channel appears to be negotiating a session key (using Diffie Hellman or similar), then using this key for a long lived session. Even IPSec that is message ...
3
votes
1answer
55 views

What encryption and signature systems (don't?) allow for plausible deniability of the OP's key being used?

I need to prevent Mallory from blindly matching encryption and signing keys to messages Hypothetical scenario: A user creates a public key An encrypted or signed payload exists. With only public ...
0
votes
1answer
51 views

How to secure sensitive data in application with message queue

Currently we are creating one small service, where we are using some sensitive data from users(not worth zillions but to me it is like password). The idea is that application itself only inserts this ...
0
votes
2answers
72 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
2
votes
0answers
66 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
-1
votes
1answer
192 views

Use openssl key to decrypt file in android/java [closed]

I want to decrypt file encrypted in openssl in java. File is encrypted with private key using openssl and on java side i want to decrypt it using public key. The code: public void testRSA() throws ...
5
votes
2answers
370 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
2
votes
1answer
84 views

Is it safer to use a PGP key encrypted with a password than just the same password separately?

I'd like to encrypt some master passwords that I want to store with added security outside of KeePass, instead as just a normal record in the database. I was considering storing these passwords in an ...
1
vote
2answers
121 views

What is the common practice to encrypt user's personal identifiable information

I am trying to protect the data by using AES to encrypt all PII data before it is saved to database, and I think the general mechanism is something like below. (This is what I think, not necessary ...
2
votes
2answers
316 views

How easy is it to crack gpg with private key, but without password

I was wondering if an adversary have your private gpg key but not the password/phrase, how easy/difficult would it be to crack a encrypted file compared to a encryption that only use password and not ...
2
votes
4answers
154 views

Is it possible to communicate securely entirely over the internet given a global, resourceful man in the middle?

Assuming a global, resourceful man in the middle, is it possible to Securely communicate (I don't mean storing encrypted data off site) completely establishing and sending messages over the internet ...
8
votes
2answers
5k views

The Pirate Bay - Secret Message?

The Pirate Bay will be relaunched as the timer indicates (see http://thepiratebay.se/) But on the bottom of the site is a "secret" message. What does this message mean? It's written in this image: ...
0
votes
1answer
83 views

Hiding existing windows 7 and loading decoy windows 7 instead [closed]

I have windows 7 64bit installed on my computer (NTFS). I wish to hide this installation and create a "decoy" windows 7: When the computer boots up, it will boot to this new "decoy" win 7. If, on the ...
15
votes
0answers
730 views

Understanding HTTPS: why use both symmetric and asymmetric key cryptography? [duplicate]

As a Web Developer I recently realised my understanding of HTTPS is poor and am currently endeavouring to better understand it. After some initial reading I'm left a bit puzzled as to why initially ...
1
vote
2answers
56 views

Is it secure to split information into multiple packets?

I just stumbled upon this SO question. I was wondering if it would be still secure to split the encrypted packet into multiple packets, which are then transferred over the wire separately. Could ...
0
votes
1answer
96 views

How to store passwords to a remote web site?

Say I want to build a public API to access a website that doesn't have one. The website is protected by a standard username/password scheme and the API implementation will use scraping to get the data ...
6
votes
4answers
166 views

does using a long delimiter multiple times degrade encryption security?

I need to condense multiple distinct pieces of data into a single encrypted string that can be decrypted and separated out later. Before encrypting, I need to separate the data with some kind of ...
4
votes
3answers
371 views

What is the security value of this on-the-fly SRP user registration?

I am currently implementing SRP on a game I am developing. However, I will be distributing this game server and client, so I would like registration to be allowable on-the-fly, without requiring the ...
2
votes
1answer
209 views

Arduino to Android secure bluetooth connection

I'm using an Arduino Uno and a nRF8001 board from Adafruit to connect to an Android phone over bluetooth. I will be using it to lock and unlock a lock and I need to make sure only verified devices are ...
1
vote
3answers
91 views

Read encrypted hard-drive after extraction from running computer

If someone unplugs the hard-drive of my laptop while it's running, what contents would they be able to extract from it? I understand that on login, the image of my hard-drive is mounted, but I'm ...
1
vote
2answers
104 views

Broadcast encryption protocol for file sharing service (a-la Dropbox)

I'm building a prototype of a (rather simple) Dropbox-type file sharing service, where users can upload & share file(s) with other user(s). But here's a feature request: I want file(s) to be ...
2
votes
3answers
125 views

Encrypt data going through an encrypted connection

If data are passing through a SSL-encrypted connection, is it required to re-encrypt these data? In other words, is it mandatory/useful/worth it to AES/RSA (for example) encrypt data that will be ...
4
votes
1answer
122 views

How safe are encrypted files error-wise?

If a non-encrypted document has a corrupt byte - we only get a typo. But what about an encrypted file? It seems, and please correct me if I'm wrong, that if the encryption is done right - every byte ...
-1
votes
1answer
103 views

Corporation Best Practices for Encrypting Locally Stored Email Data

Since the recent Sony hacks took place, the attackers have published troves of data from users' email accounts. Some of this data is very detrimental to the company's image. I suspect that based on an ...