Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
1answer
951 views

How are TLSv1.0 ciphers negotiated as TLSv1.2?

I'm a little confused about something I am reading in Bulletproof SSL. "TLS 1.2 is the only protocol that allows suites to define their PRFs. This means that for the suites defined before TLS 1.2 ...
0
votes
2answers
202 views

Using different algorithms to slow down GPU password cracking [duplicate]

I have some job related files I have already compressed with 7Z. I have protected each with good 10 character passwords consisting of upper, and lower cases, numbers and special characters. And I ...
0
votes
3answers
134 views

What's the most secure way to send information from one device to another?

I need to send sensitive information from one piece of hardware to another. I was thinking wifi, but if someone obtains the password, it wouldn't be encrypted. I don't think you can use ssl unless ...
0
votes
2answers
154 views

How to combine a key and a password in practice

Alice wants to encrypt her data. She is not comfortable with using only a password. While she prefers to use a properly random crypto key, she isn't confident she can protect the key file from theft ...
0
votes
2answers
170 views

Is server-side access control sufficient or should I encrypt querystrings

I've got an ASP Classic system that passes around sequential ids corresponding to keys in the database. I had gotten an encryption module (chilkat, an activex control) that I was using to encrypt and ...
0
votes
1answer
106 views

A folder lock/encryption program that can do this? [closed]

I am looking for a program that can lock or encrypt folder, but in case if my laptop is stolen and C drive is reformatted and reinstalled, and i have locked folders on D drive, these folders to remain ...
0
votes
1answer
179 views

GPG encryption and signing

Why don't the commands gpg2 --armor --sign file.txt and gpg2 --clearsign file.txt have the same output? Also when I use just --sign I get a bunch of binary gibberish surrounding the message in ...
0
votes
1answer
121 views

What Linux software can I use to explore entropy of a file?

I've heard of tools that could be used to graph entropy of a file. Is there a graphical Linux program that I could use for this job that would let me conveniently explore which blocks of a file have ...
0
votes
1answer
68 views

Identifying stream cipher algorithm based on encrypted content

Is it possible to identify the algorithm used for the stream cipher based upon analysis of an encrypted stream?
0
votes
1answer
1k views

Using ECC like RSA, to Encrypt/Decrypt

Is there any way to implement encryption/decryption using ECC, like RSA does? For example, say some user wants to send a message containing a symmetric key to user X. Then, in RSA, I could just ...
0
votes
2answers
230 views

Are files hosted on cloud servers/websites/databases manually checked by people?

I was wondering ... when I upload a file to, say, Dropbox, does anybody personally check it to see what it is? Say I upload a copy of my Blu-ray movie to cloud storage ... will anyone check, and ...
0
votes
1answer
82 views

What is the strategy used by the itunes store and Google Play to protect and securely install applications on eligible devices?

The requirements for a system like itunes store or google play are as follows; identify and authenticate the user determine if the user has paid for a given app if s/he has, securely transmit the ...
0
votes
1answer
182 views

Securing user postal address in a database?

I've been assigned a web project that deals with shipping goods between two parties. I am unsure what a secure database scheme (if any) would be for storing the recipient's postal address and whether ...
0
votes
1answer
128 views

Gmail Voicemail Encryption

I want to listen to my voicemails in a secure but convenient fashion. I plan do this by having my PBX encrypt the voicemail using openssl aes 256 cbc with salt and a single static password. The ...
0
votes
2answers
89 views

Security of this account login system

I have an idea to implement a account system using email and passwords for games. Im intending to have the account creation and forget password systems on a webpage. So if users will have to access ...
0
votes
1answer
484 views

TrueCrypt alternative (encrypt partition)

I need to encrypt a partition, truecrypt could use keyfiles, (images and other) Is there any other encryption tool with GUI which can encrypt entire partitions and not only files/folders?
0
votes
1answer
185 views

Hipaa Compliant Server

I have an instance in Amazon EC2 and need to be HIPAA compliant. I have two questions, Should I need to do a block level encryption of the database storage. Should I need to encrypt sensitive data ...
0
votes
1answer
112 views

How can I tell if my ISP account password is encrypted?

How can I be sure my ISP encrypts my account password? I found out accidentally that mine did not. I had called to report an interruption in service, and in the process of "troubleshooting", the ...
0
votes
4answers
3k views

What are the advantages/disadvatages of hashing over encryption?

I know that hashing is a one way function and encrypted messages could be retrieved if you know the corresponding key to which you encrypted the message. Other than the ability to retrieve, what ...
0
votes
2answers
103 views

Encryption in Linux: covenience and security [closed]

I was using TrueCrypt until recently, until one of two options has happened: either it was discontinued or its web-site truecrypt.org was hacked. Any option implies that I don't trust it anymore. So ...
0
votes
1answer
220 views

How to secure an embedded linux image

I'm building an image with openwrt sdk and i want to secure my image (by encrypting filesystem for example).. How can i do that to prevent anyone from seeing my sscripts or programs running ?
0
votes
2answers
184 views

Asymmetric Data Storage+ No-Hash Password Storage?

Edit: removed a part of the original question; I'll break it down in a different post. I am following @Polynomial's answer to store information in a database. Here are my requirements: Only the ...
0
votes
1answer
491 views

How to do Rijndael MixColumns step

I am trying to go through all of the the steps in the Rijndael Encryption Algorithm using pencil and paper. I have been using ...
0
votes
1answer
205 views

Multi user symmetric key encryption

I realize SIMILAR questions have been asked before but I'm looking for certain specifics I can't seem to find elsewhere. The following question closely resembles mine but falls short for me on ...
0
votes
1answer
112 views

Encryption and Decryption in stateless manner

I want to store some user's security information in cookie, but I want to encrypt it so that nobody can see what is really inside it. And when client makes request, I want to decrypt it. What ...
0
votes
1answer
257 views

are there serious weaknesses in this free password management system?

I want to protect my passwords for free and store them on a machine that might get stolen but have the passwords very securely backed-up in the cloud, again for free, and minimize the total lifetime ...
0
votes
1answer
127 views

Multiple user encryption-key store

Let's say I have an application that accesses an encrypted datastore, and I want the admins to be able to unlock the datastore upon application startup (and then the application will have access to ...
0
votes
1answer
193 views

Get PGP Private Key from RAM analysis RSAKeyFind

For an experiment, I'm trying to open a 2048-bit RSA encrypted mail on a image. Using this fresh image, I made a memory dump and analysed the dump for RSA keys. Now, several RSA keys have been ...
0
votes
1answer
220 views

What kind of encoding/hash it is [closed]

I have email which is stored in Cookie : %2FGl%F8%7E%06%F1S%FEF%10%E0T%B3%95%82BK%D9%D3%94%BC%AE%E1 which is sth like this after convert it with this tool : ...
0
votes
1answer
380 views

Which approach to encrypting data on a per-user basis is more secure?

As a bit of a thought experiment, I've been thinking through how one might design a web application where a user's data (say, from a form on a webpage) is stored, encrypted, on the server, using a ...
0
votes
1answer
49 views

Generate Passphrase from the data & encrypted data

right now I'm thinking about how to secure some data inside an Application... Now i have the following problem: Is it possible to generate the passpharase from a decrypted message and the same ...
0
votes
1answer
196 views

How do I identify a DES encryption key in a dump file using winhex?

I've created a C# program that encrypts and decrypts a file. The encryption method is DES. The program is exactly the same as in the following link, except that the part that removes the key from ...
0
votes
1answer
132 views

Are there software solutions take encrypted credit card data taken straight off a square credit card reader and insert them into a standard web form? [closed]

Does anyone know how you can take the encrypted output of a square card reader and insert it directly into a standard web form?
0
votes
2answers
695 views

How do you protect strings in code from users decompiling them and seeing them [duplicate]

For an example say we have an application such as a client based application which connects to an API using an api key. We are saying for this purpose there is no OAuth. How would a string or in this ...
0
votes
1answer
49 views

Does restarting an encrypted session increase security and deter attacks?

When a user initiates a SSH connection for example, keys are exchanged and a session is established with a new "passphrase" each time. If an attacker were to attempt to brute force this connection, ...
0
votes
1answer
318 views

Should I encrypt Long-lived Facebook Access Token when storing them in my DB?

I own an application that grabs some Long-Lived Facebook Access token, in order to be use later according to the corresponding logged user. Should I need to encrypt them before storing them, to avoid ...
0
votes
3answers
312 views

How does a third party file encryption get along with OS native file encryption?

I sort of understand what is meant by no security level beyond "cannot break it" but I have a much more involved question about having more than one form of encryption on a computer at once. Suppose ...
0
votes
1answer
161 views

Key-Exchange Algorithms VS Local Key Generation?

I was wondering the difference in term of Security, Computational cost and Network overhead between the use of : A Key-Exchange Algorithm (e.g. Diffie–Hellman) to set up a symmetric key. The ...
0
votes
2answers
381 views

What are the Standard Practices for Securely Storing Encryption Keys in Databases

I have a requirement for storing multiple symmetric encryption keys in a database. What I want to know is, are there any standard, accepted practices for storing these keys in a database ? To add a ...
0
votes
1answer
909 views

Hash the signing key of an authentication token in database

I have clients which are all browsers. All clients render just a single page application getting data from a Web API. The design of the API follows REST principles. I use token-based authentication ...
0
votes
2answers
65 views

Encrypting user details

This isn't really language specific, but I'm wondering if anyone has any suggestions for a security model securely storing some user details in a way that could be accessed in an automated fashion. ...
0
votes
2answers
120 views

DHE Verification

I'm just struggling to get my head around this. In certificate signing with static Diffie Hellman the public key and certificate information is sent to the CA who verifies the certificate ...
0
votes
1answer
248 views

A Question about Database Encryption [closed]

I've been looking around for an answer to this for some time now and I felt that this place would be a good venue to ask this. How can one improve the security in a MySQL database? The database that ...
0
votes
1answer
238 views

Building an VM with Vagrant and connecting with ssh+2FA to protect a bitcoin wallet?

I would like to try to build a Virtualbox image to use with Vagrant. This is the features: Login with SSH + 2FA (Google Auth) No X No internet connection Copy unsigned transaction, sign it and ...
0
votes
1answer
192 views

Protecting user data via encryption

I am working on a fitness app, and it is going to have the following user data: email, first name, last name, birth date, height, weight over time, Body Mass Index over time and heart rate over time. ...
0
votes
2answers
63 views

Challenges in authentications

I have a case where I have a set of low compute capable processors connected to a gateway processor. I need a way of authenticating these processors to gateway processor. The main things are: I need ...
0
votes
1answer
314 views

Encrypting content using same secret key as hash?

OK - I'm trying to design a system that can provide personalised/differentiated content at minimal expense to the server. One of the designs I'm currently exploring is where the request is somehow ...
0
votes
1answer
49 views

PPTP and Split Routing

If I uncheck the "use default gateway on remote network" to be able to browse local shares and the internet at the same time, does that void encryption?
0
votes
1answer
154 views

vsftp encryption algorithm

I want to configure VSFTP for ftps protocol and it has some choices to select the encryption type: tlsv1, sslv2, sslv3. I read that tls version 1 has some security issues but in the man page it says ...
0
votes
1answer
476 views

How do I determine S/MIME encryption used?

From what I understand it seems that S/MIME uses PKCS #7 which can handle various different types of encryption. How is the choice of encryption method made by the e-mail client and how do I know what ...