Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
54 views

Secure communication between two REST apis

I'm building an application which stands alone for the most part, but which needs to access another system for private user data. What is a simple and safe method of securing that private data? We ...
3
votes
1answer
60 views

Storing passwords in text files inside Ubuntu encrypted home directory

I'm interested in getting offlineimap working with my Gmail account so that I can read my emails while offline. My biggest concern with this is that it's a pretty big workaround to get the ...
3
votes
1answer
38 views

Can STARTTLS protect emails between two organisations?

There are a few threads on STARTTLS but none seem to provide a clear overview of what STARTTLS can and can not do with respect to encrypting email in transit. So my question is, can STARTTLS be ...
11
votes
2answers
309 views

How to store private data both securely and publicly accessible?

The task may not be solvable in as broad a formulation as in the title, but this is my scenario (which is somewhat similar e.g. to newsletter subscriptions and therefore certainly has already been ...
7
votes
1answer
64 views

Impact of using a NON-SSL/TLS connection for API calls on same server

I have two domains hosted on the same server, Domain A and Domain B, both domains have different IP addresses, assuming IPs 1.1.1.1 for Domain A, and 2.2.2.2 for Domain B. Each domain has a different ...
3
votes
1answer
55 views

Operating system encryption of a Virtual Machine

I am a MacBook Pro user but sometimes I need to manage very sensitive data on Windows Seven. I am running Windows Seven on a virtual machine using Parallels Desktop v10.2.1. This software already has ...
0
votes
1answer
59 views

Security concerns for image server?

I am new to the concept of security. I have a simple image server that takes in username and an image to be uploaded. Given a username on a different URL, all images can be viewed as a slide-show on ...
0
votes
1answer
45 views

“Secure” emails from unfamiliar source(s)

The context is long, so I'll ask my question first. If an encrypted message is received from an unfamiliar sender and it's spam, how can I avoid receiving further messages of the same sort? If it's ...
10
votes
3answers
236 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
-9
votes
1answer
137 views

Can you decrypt this encrypted password? [duplicate]

I'm coding a social network so I need to get serious about security as people will be sharing personal information on my site. Can you decrypt this encrypted password? ...
3
votes
2answers
39 views

Must mail relays always indicate the use of encryption in the “Received:” header field?

When an email message is sent with transport encryption, you can tell it from the “Received:” field the receiving mail relay adds to the message header. > Received: from [...].google.com ([...]) by ...
2
votes
1answer
115 views

Can I use more than one encryption program to encrypt my computer files or will it cause conflicts?

I encrypted my Ubuntu Linux Operating System in the installation process using the default encryption in Ubuntu if my computer is encrypted with one program can it be encryption with another at the ...
0
votes
1answer
94 views

HSM Software Vs HSM Hardware

Can I have a software version of an HSM? I have a client that requires me to connect to its HSM, but I don't have any. Can I get software to do this job? The spec document speaks of MAC key & PIN ...
2
votes
2answers
101 views

Using mutiple keys to encrypt the same text with the password as a key but someone changes their password

I want to make a messaging social network but am worried about the NSA wiretapping all my members at once without merit like they wanted to do with Lavabit. I've found a way to encrypt messages using ...
0
votes
2answers
224 views

What is the best way to encrypt a json object in Java?

I have a Json array JsonArray people; which holds JSON objects representing people. Currently I am saving them as plaintext in a json file. try { OutputStream out = new ...
0
votes
2answers
108 views

How can I make locally stored data unreadable unless connected (logged in) to server?

I have a chat application built in Java. The chat app stores a log of the user Jimmy's chats locally on his machine. I want this chat log to be encrypted so if someone uses the computer (authorized ...
-4
votes
1answer
64 views

What encryption is this? Thinking it's not web-based [closed]

I'm not too familiar with encryption and I was hoping someone could tell me? Thanks for any help. 9A84EE2C1DD3218B4BABACA0916E7E1335C5299E
0
votes
1answer
62 views

EFS encryption in Windows

I'm trying to combine EFS encryption with VeryCrypt, system encryption. With EFS I can choose specific files/folders instead doing a whole drive encryption, so that is the reason I use it. I haven't ...
3
votes
2answers
86 views

Encryption in peer to peer chat

For a homework assignment I'm developing a chat service that will be able to communicate within a single network. The communication channel should be encrypted with RSA. Should I generate keypairs ...
0
votes
1answer
72 views

Questions on the variations of RSA keys

I've built a simple application that reads in an RSA key, checks the header and starts identifying properties of the RSA key to make sure it is valid (Using child_process in express to run $ ...
2
votes
1answer
96 views

Data Leakage Prevention tips for regular home users

I am a "power user" with a limited knowledge of information security. I frequently store confidential documents on my computer. How can I protect these against a rootkit that gives an attacker ...
2
votes
1answer
36 views

Encryption algorithm selection in IPsec Phase 2

My question is, in which payload (transform or proposal) does the initiator specify the encryption algorithm to be used in Phase 2. Let us assume that PFS is turned off in this case for simplicity of ...
4
votes
0answers
250 views

Why does Java allow AES-256 bit encryption on systems without JCE unlimited strength policies if using PBE?

It's fairly standard knowledge that due to the cryptography export controls, Oracle JRE ships with "limited" cryptographic strength enabled as listed in the JCA Documentation. For AES, the default max ...
5
votes
2answers
89 views

How to avoid local caches when I open encrypted files

For personal usage I tend to keep things that I want to hide or protect in rar archives encrypted and protected with a password. Today I launched an antivirus scan, and as result it found malware in a ...
-4
votes
1answer
115 views

which is the best way to encrypt internet? [closed]

i want to know which is totally end to end encrypted methods for internet surf ..? like vpn .. i heard that nsa cracked vpn .. is there any other method for private internet surfing?
2
votes
0answers
78 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
0
votes
0answers
30 views

xls RC4 encryption password from key

I asked this question on stackoverflow, but thought it may be more appropriate here. I have a key from a RC4 encrypted excel sheet (xls), along with the salt, and hash, etc. and I have decrypted the ...
2
votes
2answers
77 views

Is this a secure Digital Signature + Encryption method?

I am trying to wrap my head around Digital Signatures and how RSA Encryption supports them. And which order to do them along with what specifically to encrypt. So say we have Alice and Bob and a ...
1
vote
1answer
78 views

Storing encrypted data readable only by user but created by server

Context I'm actually creating an automated security scan application, meaning that every user will be able to scan their own website (the property verificationpart is done) and get flaws found in ...
0
votes
3answers
156 views

JavaScript encryption for websites delivered via IPFS

I would like to encrypt user data in JavaScript in a browser before it gets sent out for storing. I read that this is generally a bad idea but considering the following points at least most of the ...
0
votes
0answers
29 views

Smartcard authentification: encrypt/decrypt or ECDSA?

I'm implementing a simple door access control with smart keyfobs. At the moment I send a 32 byte message to the keyfob which it signs with ECDSA and I verify the authenticity with the public key. ...
1
vote
0answers
82 views

Securely storing users PIN on Android with fingerprint authentication

I am have an Android app where the user can enter a pin specific to a particular phone to save them entering the full password. I'm now looking at the new fingerprint reader API on Android M where I ...
0
votes
1answer
53 views

Transfer of packets in a VPN connection

I am trying to figure out how a computer communicates with a website when using a VPN connection (specifically, how packets are transferred) as compared to a computer that's not using a VPN ...
2
votes
5answers
99 views

Searching encrypted text with encrypted queries

I'm interested in building a service that stores client-side-encrypted text-documents. Would it be possible to implement a search where the user inputs a search string (this search string would also ...
0
votes
1answer
110 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
0
votes
2answers
53 views

Secure data storage using password derived key. How to deal with lost password?

In order to securely store data for a logged-in user, I derive a key from his password when he connects and use it to encrypt the data stored locally for this user. Without the user password, which ...
1
vote
1answer
70 views

Steganography concept - How to check my implementation? [closed]

I have written my own software to do Steganography. Basically, I am dividing the message (text) into bits and then hide them into pixels in jpg. After that I am saving the bitmap into .png (because ...
3
votes
2answers
46 views

Storing Bank Account information or third party services providing data store and payout service

I am going to launch a website in India which would need users bank account numbers and IFSC for me to pay some money to them. I am concerned with the security and safety in storing such information. ...
3
votes
1answer
65 views

Securely read encryption key from NVRAM of TPM 1.2

I have configured a disk encryption in linux using LUKS with TPM with secure boot. The encryption key is loaded from TPM from NV memory using command TPM_NV_ReadValueAuth. The problem is that it is ...
3
votes
1answer
60 views

Use of RC4 on real time application

I need to use a stream cipher in my application. I know using the same key for many messages is not a good practice for stream ciphers (RC4). But I also dont want to make a new key all the time so I ...
1
vote
1answer
66 views

Are there any potential complications with these secure baseband ideas?

So I have been working on some ideas for securing cell phones from baseband level exploits and I was wondering if there are any potential complications with these solutions such as practicality or ...
-1
votes
1answer
56 views

Which encryption method is that? [closed]

I have seen it lots of times around the web, but I don't know how it's called. It has a numeric secret key, and the output is composed only by this characters; ".,:;!%&#". I searched all the web ...
3
votes
2answers
85 views

Can slightly lowered encryption standards remain secure? [closed]

State security agencies argue that lower encryption standards, but "secure enough" to resist mundane, everyday interception, would allow security agencies to defend against terrorist attacks. Would ...
-2
votes
2answers
31 views

Public Key Cryptosystem uncertainty

Can a party send plaintext (unencrypted i.e not ciphertext) to another party? Does all communication need to be encrypted as ciphertext?
1
vote
2answers
53 views

Public Key Infrastructure: Sending data securely to CLIENT?

Ok, so been looking up public key encryption and using it a bit around some of my web applications. From some testing, I understand that the server contains two keys and sends the public key to the ...
10
votes
4answers
1k views

Possible to read strength of encryption?

With the recent talks of governments trying to weaken encryption, I had a question about how they would implement it. For example, let's just say that the government banned anything above AES-128. I ...
1
vote
2answers
73 views

How to encrypt data in email body sent by (offline) app and decrypt on server

I've build an (offline)app (HTML/JS). The app allows the user to write a report (event when he is offline). The data from the report is sent via the body of an email to the companies special email ...
0
votes
1answer
77 views

SAM and SYSTEM file copying to another PC

Can I copy a SAM file and a SYSTEM file of a laptop and just change my SAM file and SYSTEM file on my own PC? Will my PC then have the password of the laptop? Or is there another way I can copy the ...
48
votes
9answers
12k views

Writing my own encryption algorithm [closed]

I am currently studying IT at college (UK college aka not University) and the coursework is boring me to death. I have been coding for quite a while now mainly in OO languages such as C# and Java but ...
1
vote
1answer
181 views

Crack 512-bit RSA encrypted messages without a private key?

I was wondering if it would be possible to crack a message that was encrypted with 512-bit PCKS1 encryption with the public key. I am doing a project for our science fair type thing at school and have ...