Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

2
votes
2answers
434 views

Pre / post disk encryption wipe?

When dealing with full disk encryption a lot of utilities I've worked with will provide the option to fill the disk with random data to make distinguishing the encrypted contents harder to identify. ...
0
votes
4answers
1k views

How could I totally secure a connection between two nodes?

I'm building an authentication server in python, and was wondering about how I could secure a connection totally between two peers totally? I cannot see how in any way a malicious user wouldn't be ...
5
votes
1answer
553 views

AV boot disks and Truecrypt encrypted drives

I was wondering if there were any "how-to" guides on what is needed to modify AV boot disks, such as Sophos, kaspersky, AVG etc in order to load the decryption drivers/bootloader for Truecrypt before ...
11
votes
3answers
1k views

OpenSSL generates 1032bits when I request 1024bits

When I enter the command-line openssl dhparam -text 1024 the resulting safe-prime is 1032 bits instead of 1024 bits. It seems like the 1st byte is always 0. Why is this?
2
votes
1answer
371 views

Unknown encryption string [closed]

I'm trying to learn about encryption and decryption methods when I faced this string: {MD5}JfnnlDI7RTiF9RgfG2JNCw== MD5 is 16-byte string, so anyone know what type of encryption is this and why ...
5
votes
1answer
2k views

When do I use NIST AES key wrapping?

Key Wrap constructions are a class of symmetric encryption algorithms designed to encapsulate (encrypt) cryptographic key material. The Key Wrap algorithms are intended for applications such as (a) ...
-1
votes
1answer
877 views

How to encrypt by AES-Twofish-Serpent

I was wondering how to encrypt by doing a AES-Twofish-Serpent encryption. Does this mean I encrypt in AES first then after that in Twofish, and after that in Serpent (three separate encryptions). ...
1
vote
0answers
148 views

Formatting before encrypting [closed]

Is formatting a device before encrypting more secure as opposed to encrypting the device without a formatting?
1
vote
2answers
196 views

Name of security system

This is a security system that I would like to know the name of, here is a description: I have heard that some people will use a separate computer for decrypting messages. When they revive a message ...
6
votes
1answer
1k views

Whats the best custom compression method to use when I have SSL?

Suppose I have an application which does encryption using SSL and provided you cannot control what cipher suite is being negotiated, and assuming that I have some custom compression over the data ...
7
votes
1answer
23k views

Getting “SSL: alert [”write“]: fatal : bad record mac” during openssl Handshake

I am getting SSL: alert ["write"]: fatal : bad record mac from the OPENSSL logs during the handshake and Client is not sending the Application data and its creating the handshake again and again. ...
3
votes
2answers
2k views

IS TDE PCI-Compliant?

According to PCI PAN can be stored in the database as long as strong cryptography is used. I couldn't find which cryptography is considered strong according to PCI. Here's the issue: I have PAN ...
23
votes
3answers
47k views

Secure Configuration of Ciphers/MACs/Kex available in SSH

Following on the heels of the previously posted question here, Taxonomy of Ciphers/MACs/Kex available in SSH?, I need some help to obtain the following design goals: Disable any 96-bit HMAC ...
1
vote
2answers
568 views

Can AES-256 encrypted data be changed?

I have a file that supposedly contains AES-256 encrypted data. The file was created using a proprietary program that claims to use AES-256. I have tested decrypting the file with an open source ...
4
votes
2answers
630 views

Preparing for a stolen physical server

What would be the best ways to protect sensitive data stored on a server/drive that gets stolen? The confidentiality of the data is what is important, not retrieving it. Obviously, physical means are ...
-5
votes
1answer
455 views

Encryption algorithm encryptable by md5 of key and decryptable by key [closed]

Is it possible to make an encryption algorithm that can be encrypted by the md5(or any other one way encryption algorithm) of the key and decrypted by the key? The purpose of this would be for the ...
1
vote
2answers
388 views

best place to store backup encryption key [closed]

I have a server on which I keep an encrypted backup of some data. The server updates the backup once a day if the data has been changed and is physically accessible to many people. Further, I would ...
6
votes
2answers
2k views

If encrypted data in a database are accessed by application, does that mean that the application has the decryption key?

I'm using an application linked to a database which holds confidential data (numbers). According to the developer, this data is encrypted. However, i can easily generate a report that will show the ...
3
votes
2answers
2k views

Deduplication of Encrypted Files

Let's assume I have an 18GB database that is backed up nightly by dumping the database and then encrypted using a modern algorithm such as AES-256. This database has a daily update of rate of ...
19
votes
3answers
18k views

Is Signal a secure and secret way to communicate via voice calls?

Signal (former RedPhone) provides end-to-end encryption for your calls, securing your conversations so that nobody can listen in. But really, how is the probability that a voice conversation is ...
1
vote
1answer
669 views

Is decryption using Java+JSF safer than using JavaScript?

First off, this is in addition to using SSL! I am building a web application that receives encrypted data from a server. The data is to be decrypted client-side. I've read enough posts here to see ...
-3
votes
1answer
3k views

How do I unencrypt emails from a pst file without a digital certificate? [closed]

I saved a pst file on a CD. It contains a lot of email that was sent to me using a digital signature. I am now in a lawsuit and need to print out those emails but no longer have access to my digital ...
-5
votes
3answers
565 views

PHP web application security [closed]

I am building a PHP web application, that needs enhanced security, due to the fact that it contains very sensitive information (in a database). I think that I want to use self-signed SSL ...
3
votes
2answers
2k views

Encrypt web.config file using Data Protection API

I have encrypted part of my web.config file using the Data Protection API. Now, my question is, what does a hacker need in order to decrypt the web.config file? Does he require physical access to ...
57
votes
2answers
39k views

How secure is Ubuntu's default full-disk encryption?

How secure is the encryption offered by ubuntu (using the disk utility)? What algorithm is used underneath it? If someone could at least provide a link to some documentation or article regarding that ...
26
votes
2answers
9k views

stronger encryption for SSH keys

I configured my server to encrypt user passwords using 500,000 rounds of SHA-512. The question is, how does the standard AES-128-CBC encrypted SSH private key stack up to that, provided the same (or ...
5
votes
5answers
756 views

Encrypted disk at risk if laptop stolen while turned on but locked

If I have a laptop with full disk encryption it's turned on, the screen is locked and it gets stolen. How would an attacker get my data? It's not encrypted at the moment because it's turned on but the ...
5
votes
2answers
5k views

I am always Hibernating my System, is there any risk for my Encrypted drive with BitLocker?

I am Always Hibernating my Laptop, for faster booting, I encrypted sensitive drive by BitLocker, what if my Laptop stolen and attacker knew that it was in hybernate mode, can he decrypt my hard?
4
votes
1answer
117 views

Are there any public examples of an encrypted attribute in a Verisign-issued certificate?

This Credentica- UProve paper describes how Verisign issues (or did issue in the past) certs with encrypted attributes: "VeriSign issues certificates that contain encrypted attributes that can be ...
2
votes
3answers
5k views

Is there an alternative to TCP/IP that encrypts end-to-end?

If there was a communication protocol that encrypts at the very low-level, this would solve the problem of wiretapping entirely and for all.
1
vote
1answer
381 views

NTRU java attack implementation

I'm researching NTRU cryptosystem and started research based on source code from sourceforge and bouncy castle(java language). Currently I'm reseacrhing attacks on NTRU, based on CVP and SVP. But I'd ...
8
votes
2answers
17k views

Ubuntu LVM Encryption

I recently installed Kubuntu and I noticed the option for having an encrypted LVM. The behavior suggests it's full disk encryption since I need to put in a password before I can boot. This article and ...
5
votes
2answers
409 views

Security of PGP for Long-Term Storage

How secure are PGP/GPG encrypted mails? I realize that it's probably fine for regular e-mail scenarios, but what about the security over longer time periods (>30 years)? Is the 4096 bit limit for ...
1
vote
1answer
213 views

The basics of cryptanalysis [closed]

There are a lot of books on encryption. Is there a must read intro, something like Smashing the Stack for Fun and for profit, that more or less everyone reads?
7
votes
2answers
9k views

Building a web app with encrypted MySQL database entries?

I have some experience in building PHP based websites with MySQL access, storing encrypted user details, but all other fields being plain text. My most recent project will require sensitive data to be ...
2
votes
2answers
912 views

Least insecure way to encrypt a field in the database so that it can still be included in queries

I have a table where all columns need to be encrypted (aside from the PK). This will be achieved using AES at the application level. However there is one particular field that needs to remain ...
3
votes
1answer
1k views

Can you make a digital signature using the receiver's public key?

My question is, can you make a digital signature using the receiver's public key and then have the receiver verify the signature using his private key? I always thought that in order to create a ...
5
votes
2answers
154 views

Is there a reason to encrypt an encryption key with a certificate before storing it?

Suppose my .Net application which is installed in the client encrypts a data. I want to use a different key generated randomly for each client so each client doesn't know the key of the other. Someone ...
3
votes
1answer
853 views

Why does broad based malware use XOR obfuscation?

As per title... The malware can easily be de-obfuscated if it was obfuscated using common and known XOR techniques. Why don't malware authors use any other method that make it much harder to ...
5
votes
3answers
4k views

How to detect whether my network's key is being attempted to be cracked?

I use WPA2 encryption. But I know even that can be cracked with the aircrack suite. And a lot of users may not use strong passwords. I've read that while cracking WIFI keys the only noticeable ...
1
vote
1answer
305 views

End to end cryptographic methods/solutions

I want to implement secure communication for my application. The A sends a message/data and B receives it. The message should be encrypted so the internet provider would not be able to read it even if ...
3
votes
2answers
451 views

Is it possible to automate use of passphrase-encrypted private keys?

Suppose I have a public/private keypair, which I would like to use to serve HTTPS from a webserver. The part I'm worried about is this: the private key is encrypted with a passphrase, so that if an ...
-3
votes
1answer
199 views

US Export Laws (Encryption Cloud Service) [closed]

Okay - so I have been extensively looking into US export/import laws relating to encryption software (5D992), however I have a few questions about the laws and their applicability. So, the laws ...
10
votes
4answers
631 views

How can I audit which type of Block Mode encryption is being used when no source code is available?

Given that there are clear advantages to using some block modes of encryption over another, and I would like to ensure that all software used in the enterprise uses a certain "level" of security I'd ...
16
votes
5answers
10k views

SSL/TLS - Distinction between self-signed cert and self-signed CA, and other questions?

I have a small personal website which I wish to serve securely over HTTPS. At the moment I do not wish to use a third party CA to sign my certs. I was reading this document on generating a self-signed ...
7
votes
5answers
11k views

Encrypting All Network Traffic

For a corporate network, is there a way to possibly encrypt all network traffic on the local network? I would like to ensure that there is nothing left for chance to be packet sniffed. Not even e-...
3
votes
1answer
5k views

How to encrypt a short string to a short ciphertext using an asymmetric encryption?

I am using RSA to encrypt some text, so my system has already generated private and public keys. These keys I would like to use to encrypt/decrypt a short text (16 chars). The main condition is: ...
1
vote
1answer
1k views

Using Apple NSKeyedArchiver class without encryption to save score data locally

first of all I'm sorry for my bad English! I have a question about the security of NSKeyedArchiver, a subclass of NSCoder of Apple Foundation.framework (https://developer.apple.com/library/mac/#...
8
votes
3answers
1k views

Is it possible to prove which public key was used to encrypt a message?

Pretty much the title: If Alice sends a message to Bob that she encrypts with Bob's public key, is it possible for Eve to prove that the ciphertext was encrypted with Bob's public key, that the ...
3
votes
4answers
898 views

Would a predefined shared secret key be good here

I'm a software developer working with hardware devices that are deployed on the field. Every now and then, I would need to update the hardware's firmware (upgrades, patches, etc) I'm thinking of now, ...