Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
28 views

What type of security does Gazzang zNcrypt provide?

We have just planned to implement the same in our organization, and I believe this will encrypt files and data on disk. I have two questions: Does it provide column level encryption in database (if ...
1
vote
1answer
48 views

Can DUKPT BDK be 192 bits?

All examples seem to be with 128 bits. Can it be 192 bits?
1
vote
2answers
60 views

secure notebook options [closed]

How can I secure my notebook with highly sensitive information stored in a spreadsheet. I am keeping the following options in mind: Password protect & encrypt BIOS Full disk encryption Password ...
1
vote
1answer
70 views

Sketchy traffic from port 3030?

I am running tests on a server that is ran by a close family friend, who agreed to allow me to do so in exchange for the experience I will gather (I am currently a computer science student). On ...
1
vote
0answers
104 views

WhatsApp Password generation [closed]

Is it known how the WhatsApp-Servers generate the password for the user? My Google-Fu is not strong enough to find it out by myself. For reference (Step 6 / 2, I mean the step in which the server ...
0
votes
0answers
49 views

Hashed master password and generated encryption key in a password manager program

I'm writing a WPF password manager application to practice programming, so far this is the scheme I intend to use to store master password and individual site password: Master password: Generate a ...
2
votes
1answer
27 views

Does endianness affect encryption keys and initialization vectors?

When encrypting (specifically when using AES) content, will endianness affect how the key (and/or initialization vector) should look when encrypting/decrypting content? And could this depend on the ...
0
votes
1answer
193 views

Decrypting .P7M File with Key (.pem) using OpenSSL

My knownledge about security is limited so I need some help here. The Question I want to Decrypt a .P7M file using its private key (.pem). I would prefer to use OpenSSL for this. Tried so far ...
10
votes
2answers
366 views

Are there any meta-formats for crypto?

Are there are any (properly specified) meta-formats / schema formats for describing cryptographic message structures? I'm looking for a way to describe the format (where some channels might want ...
0
votes
0answers
106 views

Is facebook to facebook (mobile application call ) encrypted?

I understand facebook uses WebRtc to send voice data packet in network if any one end client is on the browser. Use of DTLS packets can be seen in captured (wireshark) file. But in case of mobile app ...
0
votes
1answer
57 views

Is SESSION is safe for transferring encrypted email and password in PHP

I am working on a project where I am using PHP_SESSION, Somewhere I heard that PHP_SESSION are quite unsafe for passing valuable data so I have to know what are the security flaws, how it can be ...
0
votes
1answer
84 views

iOS 8 encryption vs Android Lollipop encryption

iOS 8 includes encryption that is enabled by default, whereas in Android it is optional. Do both operating systems decrypt everything on boot and then the PIN is used to unlock it until it is turned ...
2
votes
1answer
159 views

How to tell if my OpenPGP public key is self-signed?

I recently read: You should sign your PGP public key immediately after generating your public/private key-pair. And now I wonder how I can check whether I already did that. So my question is: ...
2
votes
1answer
41 views

Best practice of deprecating old OpenPGP subkeys when migrating to a new subkey pair?

I've been using GnuPG with an offline master + online subkey setup for a while now. All my email is signed with the signing-only subkey and encryption is done with the encryption-only subkey. The ...
-6
votes
1answer
80 views

What encryption is this? [closed]

7c4a8d09ca3762af61e59520943dc26494f8941b This is 123456, I don't know what kind of encryption it is and all the passwords are saving as it in my database so i need to know
-1
votes
2answers
92 views

How is encryption broken [duplicate]

The title describes pretty well what I want to ask, because I just can't wrap my head around it. I understand the basics of breaking encrypted data with the method of kind-of-bruteforcing where you ...
3
votes
1answer
90 views

Why is plain dm-crypt only recommended for experts?

I am curious about the following claim from the Cryptsetup FAQ: 2.4 What is the difference between "plain" and LUKS format? First, unless you happen to understand the cryptographic background ...
0
votes
2answers
105 views

Can I VPN a phone's connection to my home network, and then apply my home firewall to my phones network connections?

I have a decent firewall/router at home, and I was wondering whether it would be possible to use my home firewall for the connections that my phone makes, even when I'm not at home. It would mean ...
2
votes
1answer
122 views

VoIP call security: How does encrypting signalling protocol (SIP) protects RTP?

Checking the data packets from many VoIP applications shows that SIP packets are encrypted with TLS. So the captured session shows no SIP signals at all, just simple TCP and TLS/SSL packets. But ...
0
votes
2answers
29 views

Advantages of Enabling Firmware Password Protection

What security advantages, if any, would be gained by enabling Firmware Password Protection on a mac that allready has filevault encryption for the disk?
1
vote
0answers
60 views

If someone hacks our server, how can we prevent them from decrypting data stored in Vault?

I have been tasked with evaluating Vault in our company and the first question asked by an architect was: If someone hacks our server, how can we prevent them from decrypting data stored in Vault? ...
0
votes
1answer
70 views

Server full disk encryption protection from malware

A group of LINUX servers is using dm-crypt to encrypt data. The servers do not store data long-term but are only temporary stopping points for data before it is sent to other systems. The time the ...
-1
votes
4answers
129 views

What mail applications use crypto?

I just read that everyone in the world can ready my mails (if intercepted in traffic by eavesdropping?). Also, it reads that current versions (book's from 2004 so I assume that new versions adopt ...
0
votes
4answers
327 views

Is end to end email encryption possible without unique domain/subdomain for each user?

Lets say Alice@gmail.com wants to send message to Bob@secureMail.com Alice <--> gmail.com <--> secureMail.com <--> Bob We know gmail.com can read the unencrypted message. Is it possible for ...
3
votes
2answers
222 views

RSA public key and private key lengths

I'm having a problem understanding the size of an RSA public key and its private key pair. I saw different key sizes for RSA algorithm (512, 1024,... for example), but is this the length of public ...
2
votes
1answer
62 views

GPG: Can't encrypt DSA 3072 keys

I would like to ask this question as I'm not the first person which has this behavior. I'm trying to encrypt a simple message using GnuPG using a public key I've received from a friend, he's using ...
3
votes
0answers
55 views

How to encrypt and authenticate large amounts of data with NaCl

In a current project the NaCl-library crypto_box function has been used to encode and crypto_box_open to authenticate and decode data. However the library does not seem to support de- / encoding of ...
3
votes
1answer
105 views

RC4 encryption of torrents safely

Torrent clients offer encryption of traffic using RC4, and people consider this very safe to hide traffic information from ISP. Now since I have a website with SSL encryption, I know that RC4 has a ...
1
vote
1answer
64 views

Security concerns of browser injected JS

To employ end-to-end encryption, I am using a small tool that encrypts contents that is then posted and stored on our servers. While there are several concerns on client based encryption, I think it ...
2
votes
2answers
112 views

Are hashes of hashes used for password storage in practice? Why/why not? [duplicate]

A naive developers might store a password in the database directly, which would then be compared directly with the password sent from a client. A more security conscious developer might instead store ...
3
votes
1answer
53 views

Is it safer to store valuable information on a unsecure client or send the data through the internet?

Background: I'm creating a secure web app with the purpose to act as a no-knowledge storage for small data (we're talking a few bytes). Since all the encryption and decryption happens client-side, ...
37
votes
9answers
4k views

Is full disk encryption on a server in a secure data center pointless?

I am having a debate with several people regarding how much protection full disk encryption provides. dm-crypt is being used to encrypt data which is required by my company to be encrypted at rest. ...
1
vote
0answers
53 views

What is the difference between XOR and poly-XOR? [closed]

What is the difference between XOR and poly-XOR in encryption?
14
votes
1answer
2k views

PayPal encrypted with obsolete cryptography

My Chrome just complained from PayPal's security, similarly to this issue: Google Chrome "Your connection to website is encrypted with obsolete cryptography" The identity is verified, but ...
3
votes
3answers
125 views

How do I deal with browsers complaining that my MediaWiki website has unsecure resources? [closed]

I recently bought a subscription to a NameCheap shared hosting plan, and I plan to primarily run MediaWiki on it. I've managed to setup everything fine except for the SSL encryption. When I visit my ...
-2
votes
2answers
171 views

Cryptowall encryption files

This is a question concerning the way the Cryptowall ransomware encrypts files on the victim's computer. Someone knows if it is possible to recover the encryption key comparing the encrypted file and ...
4
votes
2answers
94 views

Can the intended recipient be derived from a public-key encrypted ciphertext?

Assuming you have a list of possible recipients' public keys, and a ciphertext encrypted with one of those public keys, would it be possible to determine which public key?
3
votes
1answer
123 views

toy OpenPGP encryption with manually generated keys

I've been playing around with OpenPGP encryption for a little while. Here are the steps I've followed: Generate an unencrypted public/private key pair in my keyring with gpg --gen-key. Dump the ...
-2
votes
1answer
96 views

What is encryption by RSA with AES? [duplicate]

By visiting some websites, like bank websites, we can see for example: TLS_DHE_RSA_WITH_AES_128_CBS_SHA, 128 bits, TLS 1.0 I would like to know: What does mean CBC? TLS 1.0 is an old version, is ...
1
vote
1answer
140 views

Secure socket communication between iOS device and 3rd party server

I'd like your advice on what is the best approach for the challenge in my hands... I'm developing an extension to a 3rd party software. I'm doing my development using Python/Twisted/Autobahn. The end ...
0
votes
0answers
46 views

Designing a security system for road pricing

It's my first semester with Information Security and I still feel a little lost. Sorry in advance for stupid mistakes I may have made. the examples in round brackets below are my own ideas, wrote ...
1
vote
0answers
14 views

using crt for encrypting files/texts [duplicate]

I work with GPGTools under Mac where, after creating a public/private key pair for myself, I usually get .asc from other users, import it and then I'm good to go. Now, I got an actual certificate from ...
1
vote
0answers
122 views

What web browsers support ECC vs DSA vs RSA for SSL/TLS?

We are updating our wildcard certificate and see that we have the option to use both RSA or DSA with Symantec (for free), while Digicert offers 3 options for wildcards ECC, DSA and RSA. Is there a ...
0
votes
1answer
212 views

Decrypting SHA-256 with known plain text

If i have a SHA-256 hash and I know what could be the crypted string is it possible to decode it faster? Lets say I know the string is formed like this : %d-%d-%d-%s %d being numbers from 1-25 %s ...
1
vote
1answer
73 views

SQL Server Asymmetric Encryption Keys

I have used SQL Server database with data to be encrypted and I will use symmetric key for encryption and will encrypt it by asymmetric key now comes the question how to give user permission to ...
0
votes
1answer
39 views

SQL Server Format-Preserving encryption

I have old system with database that has table with column of type char(20) and the customer decided to encrypt that column for some business needs however for some system integration needs the ...
2
votes
3answers
252 views

Completely encrypting virtual machine (for free) [closed]

I know in VMware workstation there's the option to encrypt a virtual machine. Is there a free way to do this without VMware workstation? I'm aiming for the fullest encryption and encapsulation ...
3
votes
3answers
86 views

encryption vs access control comparison

I have a very basic and simple question about two security concepts. Both encryption and access control are used for privacy and to prevent unauthorized users from accessing some object (eg. files, ...
2
votes
0answers
98 views

Was TRESOR integrated in the Linux kernel?

If a computer is switched off, the data can stay in RAM memory for a while; decaying over about 5 minutes. This can be made longer by cooling the chips: ...
7
votes
2answers
152 views

Can symmetric key cryptography provide identification?

I understand that PKI uses digital certificates to link a public key to an entity, but is there anything similar for symmetric cryptography. If, theoretically, PKI didn't exist, how do you know you ...