Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
2answers
39 views

Must mail relays always indicate the use of encryption in the “Received:” header field?

When an email message is sent with transport encryption, you can tell it from the “Received:” field the receiving mail relay adds to the message header. > Received: from [...].google.com ([...]) by ...
2
votes
1answer
115 views

Can I use more than one encryption program to encrypt my computer files or will it cause conflicts?

I encrypted my Ubuntu Linux Operating System in the installation process using the default encryption in Ubuntu if my computer is encrypted with one program can it be encryption with another at the ...
0
votes
1answer
94 views

HSM Software Vs HSM Hardware

Can I have a software version of an HSM? I have a client that requires me to connect to its HSM, but I don't have any. Can I get software to do this job? The spec document speaks of MAC key & PIN ...
2
votes
2answers
101 views

Using mutiple keys to encrypt the same text with the password as a key but someone changes their password

I want to make a messaging social network but am worried about the NSA wiretapping all my members at once without merit like they wanted to do with Lavabit. I've found a way to encrypt messages using ...
0
votes
2answers
200 views

What is the best way to encrypt a json object in Java?

I have a Json array JsonArray people; which holds JSON objects representing people. Currently I am saving them as plaintext in a json file. try { OutputStream out = new ...
0
votes
2answers
108 views

How can I make locally stored data unreadable unless connected (logged in) to server?

I have a chat application built in Java. The chat app stores a log of the user Jimmy's chats locally on his machine. I want this chat log to be encrypted so if someone uses the computer (authorized ...
-4
votes
1answer
64 views

What encryption is this? Thinking it's not web-based [closed]

I'm not too familiar with encryption and I was hoping someone could tell me? Thanks for any help. 9A84EE2C1DD3218B4BABACA0916E7E1335C5299E
0
votes
1answer
61 views

EFS encryption in Windows

I'm trying to combine EFS encryption with VeryCrypt, system encryption. With EFS I can choose specific files/folders instead doing a whole drive encryption, so that is the reason I use it. I haven't ...
3
votes
2answers
85 views

Encryption in peer to peer chat

For a homework assignment I'm developing a chat service that will be able to communicate within a single network. The communication channel should be encrypted with RSA. Should I generate keypairs ...
0
votes
1answer
72 views

Questions on the variations of RSA keys

I've built a simple application that reads in an RSA key, checks the header and starts identifying properties of the RSA key to make sure it is valid (Using child_process in express to run $ ...
2
votes
1answer
96 views

Data Leakage Prevention tips for regular home users

I am a "power user" with a limited knowledge of information security. I frequently store confidential documents on my computer. How can I protect these against a rootkit that gives an attacker ...
2
votes
1answer
34 views

Encryption algorithm selection in IPsec Phase 2

My question is, in which payload (transform or proposal) does the initiator specify the encryption algorithm to be used in Phase 2. Let us assume that PFS is turned off in this case for simplicity of ...
4
votes
0answers
233 views

Why does Java allow AES-256 bit encryption on systems without JCE unlimited strength policies if using PBE?

It's fairly standard knowledge that due to the cryptography export controls, Oracle JRE ships with "limited" cryptographic strength enabled as listed in the JCA Documentation. For AES, the default max ...
5
votes
2answers
88 views

How to avoid local caches when I open encrypted files

For personal usage I tend to keep things that I want to hide or protect in rar archives encrypted and protected with a password. Today I launched an antivirus scan, and as result it found malware in a ...
-4
votes
1answer
115 views

which is the best way to encrypt internet? [closed]

i want to know which is totally end to end encrypted methods for internet surf ..? like vpn .. i heard that nsa cracked vpn .. is there any other method for private internet surfing?
2
votes
0answers
78 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
0
votes
0answers
30 views

xls RC4 encryption password from key

I asked this question on stackoverflow, but thought it may be more appropriate here. I have a key from a RC4 encrypted excel sheet (xls), along with the salt, and hash, etc. and I have decrypted the ...
2
votes
2answers
77 views

Is this a secure Digital Signature + Encryption method?

I am trying to wrap my head around Digital Signatures and how RSA Encryption supports them. And which order to do them along with what specifically to encrypt. So say we have Alice and Bob and a ...
1
vote
1answer
77 views

Storing encrypted data readable only by user but created by server

Context I'm actually creating an automated security scan application, meaning that every user will be able to scan their own website (the property verificationpart is done) and get flaws found in ...
0
votes
3answers
152 views

JavaScript encryption for websites delivered via IPFS

I would like to encrypt user data in JavaScript in a browser before it gets sent out for storing. I read that this is generally a bad idea but considering the following points at least most of the ...
0
votes
0answers
29 views

Smartcard authentification: encrypt/decrypt or ECDSA?

I'm implementing a simple door access control with smart keyfobs. At the moment I send a 32 byte message to the keyfob which it signs with ECDSA and I verify the authenticity with the public key. ...
1
vote
0answers
76 views

Securely storing users PIN on Android with fingerprint authentication

I am have an Android app where the user can enter a pin specific to a particular phone to save them entering the full password. I'm now looking at the new fingerprint reader API on Android M where I ...
0
votes
1answer
53 views

Transfer of packets in a VPN connection

I am trying to figure out how a computer communicates with a website when using a VPN connection (specifically, how packets are transferred) as compared to a computer that's not using a VPN ...
2
votes
5answers
99 views

Searching encrypted text with encrypted queries

I'm interested in building a service that stores client-side-encrypted text-documents. Would it be possible to implement a search where the user inputs a search string (this search string would also ...
0
votes
1answer
109 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
0
votes
2answers
53 views

Secure data storage using password derived key. How to deal with lost password?

In order to securely store data for a logged-in user, I derive a key from his password when he connects and use it to encrypt the data stored locally for this user. Without the user password, which ...
1
vote
1answer
70 views

Steganography concept - How to check my implementation? [closed]

I have written my own software to do Steganography. Basically, I am dividing the message (text) into bits and then hide them into pixels in jpg. After that I am saving the bitmap into .png (because ...
3
votes
2answers
46 views

Storing Bank Account information or third party services providing data store and payout service

I am going to launch a website in India which would need users bank account numbers and IFSC for me to pay some money to them. I am concerned with the security and safety in storing such information. ...
3
votes
1answer
65 views

Securely read encryption key from NVRAM of TPM 1.2

I have configured a disk encryption in linux using LUKS with TPM with secure boot. The encryption key is loaded from TPM from NV memory using command TPM_NV_ReadValueAuth. The problem is that it is ...
3
votes
1answer
59 views

Use of RC4 on real time application

I need to use a stream cipher in my application. I know using the same key for many messages is not a good practice for stream ciphers (RC4). But I also dont want to make a new key all the time so I ...
1
vote
1answer
66 views

Are there any potential complications with these secure baseband ideas?

So I have been working on some ideas for securing cell phones from baseband level exploits and I was wondering if there are any potential complications with these solutions such as practicality or ...
-1
votes
1answer
56 views

Which encryption method is that? [closed]

I have seen it lots of times around the web, but I don't know how it's called. It has a numeric secret key, and the output is composed only by this characters; ".,:;!%&#". I searched all the web ...
3
votes
2answers
85 views

Can slightly lowered encryption standards remain secure? [closed]

State security agencies argue that lower encryption standards, but "secure enough" to resist mundane, everyday interception, would allow security agencies to defend against terrorist attacks. Would ...
-2
votes
2answers
31 views

Public Key Cryptosystem uncertainty

Can a party send plaintext (unencrypted i.e not ciphertext) to another party? Does all communication need to be encrypted as ciphertext?
1
vote
2answers
53 views

Public Key Infrastructure: Sending data securely to CLIENT?

Ok, so been looking up public key encryption and using it a bit around some of my web applications. From some testing, I understand that the server contains two keys and sends the public key to the ...
10
votes
4answers
1k views

Possible to read strength of encryption?

With the recent talks of governments trying to weaken encryption, I had a question about how they would implement it. For example, let's just say that the government banned anything above AES-128. I ...
1
vote
2answers
71 views

How to encrypt data in email body sent by (offline) app and decrypt on server

I've build an (offline)app (HTML/JS). The app allows the user to write a report (event when he is offline). The data from the report is sent via the body of an email to the companies special email ...
0
votes
1answer
77 views

SAM and SYSTEM file copying to another PC

Can I copy a SAM file and a SYSTEM file of a laptop and just change my SAM file and SYSTEM file on my own PC? Will my PC then have the password of the laptop? Or is there another way I can copy the ...
47
votes
9answers
12k views

Writing my own encryption algorithm [closed]

I am currently studying IT at college (UK college aka not University) and the coursework is boring me to death. I have been coding for quite a while now mainly in OO languages such as C# and Java but ...
1
vote
1answer
179 views

Crack 512-bit RSA encrypted messages without a private key?

I was wondering if it would be possible to crack a message that was encrypted with 512-bit PCKS1 encryption with the public key. I am doing a project for our science fair type thing at school and have ...
3
votes
1answer
26 views

RC4 encrypt many messages with same password

I would like to ask if it's insecure to encrypt many different messages sent over the Internet encrypted by RC4 with the same password. If it is insecure, then if I encrypt the first message with the ...
1
vote
2answers
114 views

Encrypting unique fields in a Database

I'm still a beginner to cryptography and want to know what the best practice is for solving the following problem: I'm creating an application with the requirement that a user's email address must be ...
2
votes
1answer
456 views

IKEv2 vs OpenVPN

I want to ask you for information about the IKEv2 protocol for a VPN connection. I haven't found so much information on the web. I am interested especially regarding the usage on a mobile phone. Is it ...
3
votes
2answers
91 views

Encrypt DB Fields preserving search functionality

I would like to protect sensitive information stored on a Postgresql database, but I would not like to encrypt it all. The idea is to encrypt only those fields which hold sensitive information. I was ...
0
votes
0answers
33 views

How many bits of security is in a n-bit modulus?

In a paper that I read, "A riddle wrapped in an enigma" by N. Koblitz and A.J. Menezes, there are several statements like this one(at page 4, section 2.3): ..., the NSA updated to Suite B [40] so ...
4
votes
1answer
75 views

Can a FIDO U2F device be used for symmetric encryption?

As I understand, U2F is mainly used for authentication. It uses challenge-response scheme to check if the device used for logging in is the same device which was used during registration based on ...
21
votes
3answers
5k views

Why does an encrypted message sometimes end in “==”

As a programming exercise I need to decrypt a message. The only clues that I have is that it seems are: The encoded message contains only Base64 Characters a n letter sequence (n in 1,4,7,10) times ...
0
votes
2answers
93 views

Internet browsing encryption

I have a shared wifi point with a person who might be interested in knowing what I am browsing, writing and downloading in the internet. This person is the master of this wifi network, only he has an ...
1
vote
0answers
36 views

Is there a point in cascade encryption? [duplicate]

I was reading the other day about some programs (ex: DiskCryptor), and with my limited knowledge of cryptography.. I started wondering about cascading encryptions (ex: AES-Twofish-Blowfish). Assuming ...
4
votes
0answers
20 views

How to securely send your user and hashed password to a server? [duplicate]

I'm making a user system for an app I'm developing, and I have a client side (the mobile app itself) and a server side (where the database remains) for it. The app sends get and post petitions to the ...