Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

5
votes
1answer
2k views

Is 'Forge' Javascript crypto library secure? [closed]

I need a client-side crypto library. I've seen https://github.com/digitalbazaar/forge linked many times on stackexchange. Forge seems to be the most complete and well-documented crypto library for JS. ...
0
votes
1answer
431 views

Serpent cipher technical details in-depth [closed]

Would anyone be so kind so as to describe to me the Serpent-256 cipher? How does it work and how secure is it compared to AES? I have searched everywhere and found scarse info about it. Anything ...
2
votes
1answer
376 views

An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?

I'm trying to simulate a possible attack scenario for my studies. I've got a image, which has a encrypted disk, encrypted by TrueCrypt (confirmed). TrueCrypt is installed on the image itself too. ...
1
vote
1answer
2k views

Safety of TrueCrypt hidden volumes

According to the documentation a hidden volume stays hidden because it appears as free space. In TrueCrypt free space always has random data in it, however in the case of a hidden volume it's not ...
5
votes
2answers
1k views

What is the purpose of the entropy parameter for DPAPI.Protect?

So in Windows, when you make a call to the Data Protection API, you can specify some bytes as "entropy". To me, this sounds like salt. In PBKDF2, the salt is can, and in fact needs to be stored as ...
2
votes
1answer
283 views

HIPAA compliant blob storage architecture

There is a task to design a system to store sensitive data securely (should be HIPAA compliant in the future). It's just a draft - this will not be used in production in a foreseeable future. I have a ...
2
votes
2answers
150 views

Securing data on a server

I have a server which has 'loose' physical security (somewhat easy for the entire server to get stolen). For the sake of the question, let's assume that anyone can access the server physically, what ...
2
votes
1answer
303 views

Stream/Block encryption using XOR and Hash function?

Could a hash function like sha1 or ripemd-160 be used for secure key generation in a stream/block cipher? Obviously a repeated key like "abc123abc123abc123" would be bad, and a one time key pad would ...
3
votes
3answers
787 views

Encrypting Backups on Linux

I'm working on an automated backup solution to protect my files on my Linux servers. However, I'm not sure about how to securely encrypt the resulting archives. I am using 64bit linux, and I am ...
1
vote
1answer
407 views

Knowing Input&Output, How to determine encode method and the passkey that was used in encoding?

I've looked on this site and on SE. but I couldn't get a handle on this. Is there a way to find what type of encoding (and/or encode key) is being used? For example, I am testing a web application(PHP)...
3
votes
1answer
206 views

Clarification on Digital Certificates

I used the makecert tool to create: self-signed certificate client certificate These are the commands I used: makecert -n "CN=MatthewCA" -r -sv MatthewCA.pvk MatthewCA.cer **for self signed ...
2
votes
1answer
564 views

How secure is Vigenere cipher for random data?

Traditional situation It is easy to crack a ciphertext encrypted by Vigenere cipher, if you know the plaintext is in a natural language like English. There are two methods to discover the key used to ...
0
votes
2answers
220 views

I need two separate hidden volumes in disk encryption. What are my options? [closed]

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
1
vote
0answers
1k views

Decrypt “key” that is encrypted with LMK or TMK

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I ...
2
votes
2answers
392 views

Encrypt and Authenticate localhost-traffic?

I have some app-components on the same machine but in different languages which need to communicate. I am using socket communication over localhost to do so. The data transferred is confidential. ...
0
votes
1answer
411 views

How do I determine the algorithm used on an encrypted string? [duplicate]

I have a Microsoft Access database which contains encrypted data: When I copy-paste it, it looks like $ 8F). How can I determine the used encryption algorithm? How can I convert this to readable ...
2
votes
1answer
171 views

Old hardware for encryption and backdoor free

I've read and seen articles on backdoors in the processors or at least the idea of that would render software based encryption worthless. I do know that routers and lots of the newer devices all have ...
1
vote
3answers
426 views

Is breaking a looping one-time pad practical? If so, how?

A one-time pad is known to be theoritcally secure, nothing can break it. However, if the key is reused, the one time pad becomes theoritically breakable. But even RSA is theorically breakable yet it'...
4
votes
5answers
721 views

How does one know when a message is successfully decrypted? [duplicate]

How do people who decrypt encrypted messages know they have decrypted to the correct message? Do they just keep decrypting until the message is in English (or any other language), or is there a ...
1
vote
3answers
1k views

will google detects tor browser?

Usually while we browse Google through our i.p we will be redirected to respective countries,i normally use tor browser for anonymity,today while i browse google i got redirected to encrypted.google....
0
votes
1answer
222 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
7
votes
3answers
694 views

What can a web application developer do to protect user information from powerful adversaries like the NSA or China

Some well funded intelligence services with potentially untrustworthy employees intercept and store encrypted data for years, in hopes of cracking it with future technology. What can I do to make this ...
0
votes
2answers
223 views

Asymmetric Data Storage+ No-Hash Password Storage?

Edit: removed a part of the original question; I'll break it down in a different post. I am following @Polynomial's answer to store information in a database. Here are my requirements: Only the ...
1
vote
0answers
160 views

Passing Encryption Key Across Session for Symmetrically-Encrypted DB

I'm building a database that symmetrically encrypts user data. Nothing super sensitive, I'd use a third-party if it was. The data is encrypted with a surrogate key; the user must enter a password to ...
1
vote
2answers
348 views

Ubuntu LVM LUKS Encryption

I've been reading about Ubuntu LVM Encryption, and I understand that it supports the use of Linux Unified Key Setup (LUKS) during installation, which is a block level encryption that encrypts the ...
2
votes
0answers
53 views

Storing Tenants Cloud Keys In a Database

Imagine you are building a public service where you need to store the customer's cloud credentials(like their aws secret and access keys) in your database to regularly use by your backend services in ...
3
votes
1answer
282 views

Can we trust encrpytion when the random number generator is compromised?

How can we trust our encryption methods if our random number generators are to be [assumed] compromised? Does encryption also depend on the random number generators of our hardware? I forgot to also ...
19
votes
6answers
1k views

Is there anything standing in the way of email encryption going mainstream? [closed]

PGP has been around for almost 20 years, but email encryption is not used by most 'regular people'. At the moment, with Snowden's NSA revelations (which should not be a huge surprise to anyone), the ...
12
votes
1answer
2k views

TextSecure protocol

Is anyone aware of an analysis of the TextSecure protocol? https://whispersystems.org/blog/simplifying-otr-deniability/ https://github.com/WhisperSystems/TextSecure/wiki/Protocol It is a ...
0
votes
1answer
332 views

Multi user symmetric key encryption

I realize SIMILAR questions have been asked before but I'm looking for certain specifics I can't seem to find elsewhere. The following question closely resembles mine but falls short for me on details:...
1
vote
2answers
108 views

What cryptographic protocol is appropriate for the case where user needs access to a binary and encrypted configuration files?

This is a very newbie IT security question... I have to quickly implement a solution for our application that works like this... We have a binary executable that is given a configuration file. I need ...
8
votes
2answers
10k views

Securing remotely accessible IP cameras that do not support HTTPS

I have some IP cameras set up on my home network, which is WPA2 protected. These cameras are setup to be accessible from the Internet thru my router's DDNS address, and port number. So for example, ...
0
votes
2answers
201 views

Is it safe to use a ECDSA public key as a password seed for GCM/AES?

Two peers already exchanged their ECDSA (curve secp256k1) public keys using a secure channel. They want to establish an authenticated encrypted channel between them. They will use CCM mode and with ...
2
votes
0answers
103 views

Can HTTPS or VPN connection be sniffed through UTM device? [duplicate]

Someone told me that if my device communicates with a server on Internet via VPN connection or HTTPS, all the contents that I have sent can be sniffed and decrypted by the UTM device (or more ...
5
votes
3answers
1k views

Asymmetric Key Encryption in Group Chat

I am working on a chat application which supports both single user chat as well as group chat. We planned to encrypt messages in single user chat by public key of receiver and decrypt it using ...
-1
votes
1answer
99 views

AES Key Generation?

I am generating a random number and using the random am generating the AES key of 256 bit. If I use the same random number again, whether it will generate the same AES Key again ? If not means why ? ...
2
votes
2answers
308 views

Wifi Sniffing Prevention

I share my wifi with my brother. Recently I came to know he is sniffing on my browsing. Is there a way I can prevent him from sniffing on my browsing? PS: I can't afford VPN.
1
vote
1answer
201 views

When does S/MIME require the other party's certificate and when is their key enough?

Trying to understand S/MIME implementation, I see that sometimes you must have the other party's certificate, and sometimes its enough to just have their public key. I'm confused as to when you need ...
2
votes
1answer
2k views

Storing encryption keys on a server using Node.js and MySQL

I am writing a web backend/api for an iOS application using Node.js and MySQL. In my database I have a table for posts. I would like the posts content to be encrypted. Let's say I'm using this AES for ...
0
votes
1answer
226 views

Encryption and Decryption in stateless manner

I want to store some user's security information in cookie, but I want to encrypt it so that nobody can see what is really inside it. And when client makes request, I want to decrypt it. What ...
0
votes
2answers
528 views

Secure Way of Encrypting Your Bash Shell Script [duplicate]

How can I encrypt my bash shell script on Linux server The shell script contain credentials of other servers for remote access. The problem is I do not want others with same level of access to view ...
0
votes
2answers
384 views

Encrypting files in .NET?

I am in a situation where I would like to encrypt audio and text files for an application I am working on. I did some looking around and from what I have seen the Rijndal encryption algorithm would ...
5
votes
1answer
5k views

What block ciphers and algorithms are now safe? [closed]

I work for a large non-US based international organisation. Regarding the recent leaks about the NSA breaking most encryption on the internet, we now know the US and UK governments are actively ...
2
votes
1answer
738 views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
5
votes
1answer
5k views

Why is GPG file encryption so much slower than other AES implementations?

Correct me if I'm wrong: When encrypting a file, GPG creates a one-off AES encryption key and encrypts that key using RSA. This is supposedly to take advantage of AES's superior performance when ...
1
vote
1answer
56 views

Encrypting multiple blocks with an asymmetric scheme

I have a general question how asymmetric schemes are usually implemented. Typically, there is a parameter in an asymmetric scheme which limits the message length. For example the modulus in RSA. I ...
-2
votes
1answer
623 views

How to decrypt javascript code extracted from PDF

I analyzed PDF, and extract javascript code. But javascript code is encrypted. I can't decrypt it. Please advise me. javascript code \040\040\040\040\146\165\156\143\164\151\157\156\043\164\151\...
1
vote
0answers
304 views

Storing private messages in a database

I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
2
votes
2answers
162 views

How do password suites store and encrypt their metadata and prevent attacks based on that knowledge?

If someone uses a password manager and tries to organize the credentials well, doesn't that make attacks easier? Let's assume an attacker has the encrypted credentials available for offline attacks, ...
1
vote
1answer
112 views

Why is the read write speed of a Protected DVD so slow?

I got a DVD with copy protection enabled on it, but the problem I am facing is that it loads extremely slow. I have seen such happenings with other kinds of protected DVD's as well. Can anyone tell ...