Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

2
votes
1answer
80 views

Why am I getting the message that Security Stack Exchange is only partially encrypted? [closed]

I realize that this is an information website but it does concern me a bit that I'm getting the message that this website does not supply ownership information. Does this mean that my posts can be ...
1
vote
3answers
81 views

Best method for securing text based messages [closed]

If I wanted to use a device for the sole purpose of sending and receiving text based messages, could it be done so that the messages from A to B are as secure as possible, the information is easily ...
4
votes
2answers
161 views

Is storing encrypted data in a database futile?

The way I see it: there are two ways to encrypt data for a web app. 1) Store a single encryption key on the server, and use it to encrypt / decrypt data at runtime. The obvious issue here is that if ...
3
votes
2answers
59 views

Requirements Placed on a User of a FIPS 140-2 Validated System

Per customer requirements, I am working with a FIPS 140-2 validated network switch that is actually running in FIPS mode. This guarantees that any cryptographic operations the device performs will be ...
0
votes
2answers
118 views

Could a compromised root CA impersonate any SSL certificate?

My question is about MITM attacks against https and how those would appear to the end user. Suppose a trusted root CA were compromised / coerced into producing fraudulent SSL certificates. What would ...
1
vote
2answers
59 views

Methods to keep an autonomous log with high integrity

I'm writing a .NET desktop application that is used to send orders to a server via a REST API. To avoid leaking of our authentication token I have made it so that, when used for the first time, the ...
1
vote
2answers
110 views

Is it feasible/possible to have encrypted data that looks unencrypted/innocuous?

i.e., could I send "Let's rob the store at 9 tonight" so that it is impossible to see what I'm saying, but it doesn't look like gibberish and obviously encrypted?
0
votes
1answer
75 views

Identify encryption algorithm for .enc files [duplicate]

I need to identify the encryption algorithm used to encrypt some files. I have the key, but I can't decrypt it using OpenSSL, because I don't know what algorithm was used to encrypt it. Is there any ...
0
votes
1answer
68 views

Sharing Derived Unique Key Per Transaction (DUKPT) Base Derivation Key (BDK) with a partner

Assumptions: We have devices out in the field injected with keys derived from our one and only BDK. The devices encrypt data using the injected derived key. All our devices connect to our server ...
1
vote
1answer
114 views

Understanding Key Serial Numbers (KSN) in Derived Unique Key Per Transaction (DUKPT)

I have a number of questions regarding Key Serial Numbers (KSNs) in DUKPT: KSNs are 8 - 10 bytes long. Older implementation are 8 bytes whereas newer ones are 10 bytes. Do I risk being incompatible ...
-4
votes
1answer
52 views

Is it true that breaking into the https padlock settings on a web page is easy to do? [closed]

I found some posts on this forum that explained that https settings are possible to crack. see here. Why is it possible to sniff an HTTPS / SSL request? And here is another post that mentions ...
2
votes
3answers
216 views

Securely storing bank account details in database

I am developing a service that will involve the direct debit of customers' accounts on a routine (weekly, monthly, etc.) basis, and so I'll need to store their information (BSB/routing number and ...
0
votes
1answer
78 views

Decrypting SSL traffic for Security Onion at or before the interface

I have Security Onion installed and doing full packet capture on my home network. I also have a firewall (pfSense) which does my routing. I have Security Onion sitting just behind my firewall and ...
1
vote
1answer
66 views

Secure connection between two clients with shared secret

I am creating a system where there are multiple clients, each of which has a secure connection to a central server which could pass out shared secrets to each of them. I could be wrong, but I am ...
1
vote
1answer
62 views

Cloud-based IM protocols / services saving messages encrypted on server which is decryptable only by user? [closed]

I am looking for a cloud-based (i.e. not end-to-end) secure IM protocol or service. The first one comes to my mind is telegram. Here is a quote from telegram's privacy policy: Cloud Chats ...
1
vote
1answer
32 views

Is it possible to assign different UIDs to subkeys for the purpose of having multiple identities?

Many people advocate generating new primary keys for each identity they wish to have. For example, creating one primary key and associated subkeys for workplace use, and a completely different ...
2
votes
1answer
57 views

How to securely derive a second password specific to an user

I'm giving each of my users an unique Blocktrail wallet that is protected by two API keys (which the server knows) and one passphrase (unique to each wallet). I want the wallet's passphrase to be ...
1
vote
1answer
36 views

Machine readable, user non-readable - XML file

I need some advice as I have been unable to find anything useful via the web - (Google search). I have used the application EventGhost so as to create a custom shell, that I run using the Windows 7 ...
3
votes
2answers
84 views

Can you use ssh for secure inter app communication on the same device?

I use ssh to get an encrypted connection between servers and local machines all the time. It's fast, it's secure, and there's a way to do it in nearly every system programming language that I've used ...
1
vote
1answer
113 views

Check HMAC after completing decryption or before?

I have written a piece of software that symmetrically encrypts big files (multi-megabyte). Plaintext is encrypted, after the encryption the HMAC is calculated and written into the header of the file. ...
2
votes
1answer
85 views

How to determine if mail was encrypted during transport using the header information?

First things first: I know about the difference between end-to-end-encryption and transport encryption. Back to topic: I already read some things about how mail server handle transport encryption, ...
2
votes
0answers
38 views

Security implications of providing an encryption/decryption oracle

I need to provide a service that acts as a symetric encryption/decryption blackbox : the box get a secret key k users send datas d, and get ciphertext c = Encrypt(d,k) users send ciphertext c, and ...
0
votes
1answer
39 views

Getting multiple key matches on plaintext/ciphertext pairs in double DES

I'm trying to implement a Meet-in-the-Middle attack and just to test it out I've done some hardcoding of values, which is simply this block of simple code: byte[] key1 = new byte[] { 0x20, 0x00, ...
1
vote
1answer
67 views

Are OpenSSH vs OpenSSL public key format names mismatched?

I generated a key pair vis OpenSSH and later wanted to generate PEM encoded public key. I noticed that generated public key differs when generated by OpenSSH vs OpenSSL when using same format name ...
1
vote
2answers
158 views

Is there a way to securely store unsalted passwords?

So, obviously I'm not talking about username/password pairs here, I plan to store passwords with two salts and three hashes, but what occurred to me is that if I had a table where I kept pairs: ...
2
votes
2answers
221 views

My Virgin Media account password is visible in plaintext to call center staff. What do I do?

Whilst on the phone to support staff (about billing) to Virgin Media, perhaps the largest ISP and telecoms company in the UK, I was asked to confirm my password over the phone. I asked the advisor ...
1
vote
0answers
36 views

Is there a solution for On-the-fly-encryption with active directory rules & policies?

I am looking at having our servers' sql databases for a few program and documents to be always encrypted on the HDD, but available to AD users. So one or multiple users with the right AD privileges ...
2
votes
1answer
102 views

How to send an encrypted mail only knowing the PGP fingerprint?

How does one send an encrypted email with PGP, when he only has the recipient's fingerprint? I am already sending emails using PGP, but I've just pulled a contact's PGP fingerprint who I need to ...
0
votes
2answers
459 views

Is it safe to auto-fill credit card numbers using Chrome?

Is it safe to auto fill credit card numbers using Chrome? Does it safely store the credit card information? As far as my understanding goes, it just shows asterisk values but on click it reveals the ...
2
votes
1answer
116 views

Is it possible to do Public Private Key Encryption on a chip (hardware)?

Does a chip exist which will take input data and output encrypted data in a public private key scheme, where the public key is on the chip and the private key is located remotely? The ultimate goal ...
-3
votes
2answers
49 views

AES algorithm encryption time

What is the time taken by an AES Encryption algorithm, with a key of 128 bits, operating on a normal computer (say with Intel i7) and what will be the impact be on the time if I wish to use a 256 bit ...
2
votes
3answers
140 views

UEFI and security implications for encryption

After my old PC kicked the bucket I now own my first UEFI board and I am already having trust issues. I utilized Truecrypt's system encryption for years now and really got used to it. My new board has ...
1
vote
1answer
67 views

CryptoAPI to CommonCrypto with RC4

I have cryptographic code used in the Windows platform, which uses the Crypto API functions and need to convert this to using Common Crypto on OS X. Essentially the original code is this, with error ...
0
votes
0answers
59 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
-1
votes
1answer
63 views

what is the best security application to check if someone has copied my files with a usb and how to stop that [closed]

I need an encryption application that will detect who has accessed my files from my laptop via a usb and also to help me block memory sticks to access my files and laptop without my permission.
0
votes
0answers
46 views

Encrypted Drive. Forgot password. Remember parts of it. Less than 15 characters [duplicate]

So I forgot my password to an encrypted drive (encrypted via Truecrypt 7.1a) and I remember parts of it. I know that there's "12345" in it and the entire password starts with J. how do I restore it ...
0
votes
1answer
100 views

Is it secure to not expire keys in symmetric encryption?

Note that this question describe hypothetical case, that is never meant to be used in real world. Server communicates with clients with message structure: client_id, initialization_vector, encrypted ...
-1
votes
1answer
83 views

Is this process a secure way for users to login? If so, is there a name for it already?

I thought of this process specifically to stop "man in the middle" attacks and replay attacks: User types their username into the client application. Client application sends the username to the ...
0
votes
0answers
45 views

Is there an encryption scheme that allows an auditor to view some, not all data?

I want to create an online chat room allows for privacy, freedom of speech, and for law enforcement to protect citizens from violent behavior. I think the best approach is to use Shamir secret ...
3
votes
2answers
69 views

Saving Authentication Tokens to Third-Party Websites

So Flickr allows you to authenticate users to your app via app_key and secret and returns an authentication token. I want to securely save that authentication token in my database, but also be able to ...
1
vote
1answer
89 views

Reversing encryption by analysing executable

I have a program that reads data from a file, parses/organizes it, and spits it out as an encrypted XML. The application can also take an encrypted XML and spit out the original file. My objective at ...
2
votes
2answers
109 views

Is it possible to encrypt a download twice, once with a different encryption method?

So without giving too much away, the basics are that I have a board that needs an operating system, so I go to an IPL server to supply that operating system. I have a verifier in the middle and my ...
2
votes
1answer
124 views

Security of online storage of KeePass-like files

A common advice for storing passwords is to store them into an encrypted file, for example by using a dedicated software such as KeePass2. To keep this file in sync between several computers, the ...
1
vote
1answer
79 views

How to encrypt or store data so that only a pool of processes can share it on Windows?

I am writing an application T1 which is using SQLite database to store some sensitive data and i am trying to encrypt it securely. The issue i am facing is that i don't want my symmetric key to be ...
1
vote
2answers
183 views

Storing encrypted information in database vs partition encryption

Trying to search for answers like Database encryption or filesystem encryption? but did not found what I need. My database contains confidential information. What is better? To store encrypted ...
0
votes
1answer
22 views

Size of initialisation vector and plaintext in CBC mode

If I have a 16-number sequence (7,7,7,....7), and I need to encrypt this using a simple 4-bit substitution cipher, do I have to "chop" the plaintext in blocks which are of same size as the IV? In my ...
7
votes
4answers
348 views

Which strategy to encrypt data accessed by multiple users?

I need suggestions to design my database architecture (in the context of a web application) on the particular point of its encryption ; knowing that the following elements must be respected: 1- Data ...
3
votes
2answers
376 views

IPhone iOS 8.3 encryption security against physical access

Excerpt from Apple's Whitepaper "iOS Security" on Effaceable Storage: A dedicated area of NAND storage, used to store cryptographic keys, that can be addressed directly and wiped securely. ...
1
vote
0answers
39 views

Possible vulnerabilities in private chat application implemented using web broadcasting

I have never used web-sockets but I am working in a PHP framework which has builtin broadcasting facility. This broadcasting use web-sockets technologies named Redis and Pusher. The workflow of this ...
2
votes
1answer
48 views

Personal cipher/digest preferences ignored when generating a new key pair in GnuPG

I have specified personal digest preferences in my ~/.gnupg/gpg.conf: personal-digest-preferences SHA512 SHA256 SHA384 SHA224 SHA1 then, I have generated a new key pair. But when I check the ...