Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

8
votes
3answers
1k views

How practical/important is the Lucky Thirteen TLS attack?

I was reading this article which talks about a new attack against TLS being called Lucky Thirteen. It claims to allow repeatable MitM attacks against HTTPS connections. It's described as being fairly ...
0
votes
1answer
125 views

Auto encrypt chunks of content for backup, best practice?

I'm just curious and it's more like a mind game, I'm not into cryptography. How would one encrypt data that's constantly generated? Put the data automaticly into chunks encrypt the chunk and send it ...
1
vote
2answers
173 views

Need a time consuming symmetric encryption

I have a database with millions of entries, each entry encrypted with a (different) password. Normally, only one entry is needed at a time. If somebody steals the database, I want to make it hard for ...
3
votes
2answers
458 views

Securing Time Sensitive Data

I have a number of time sensitive, embargoed pieces of information that I need to distribute over the Internet and have received at a precise time. I'm currently dealing with the problem by uploading ...
5
votes
5answers
248 views

How to avoid to lose data encrypted because it was encrypted by no longer supported software?

How can I avoid losing data that is encrypted using methods that may become obsolete? I have valuable family records I wish to secure, so I plan to encrypt them before putting them in long-term ...
2
votes
1answer
362 views

Credit card data - sharing and storage [duplicate]

What is the industry standard for sharing credit card data between client (thin & thick) and server?
3
votes
0answers
240 views

Utility to hide several encrypted messages in single file [closed]

I am interested, are there existing utilities/projects under way devoted to combining encryption and steganography. I would like to - combine two or more messages, encrypted with separate ...
6
votes
5answers
3k views

Does a binary executable have to have some critical plain-text components?

When companies package binary executables, they are often encrypted, compressed, scrambled, and otherwise made so that your lazy hacker can't simply open the program up in Notepad++ and see the code. ...
2
votes
2answers
272 views

Slow down symetric encryption

I'm developing a program in Java. In one step data should be encrypted and exported in a file. As of now we are encrypting in AES-256 I want to slow down a possible brute force attack as much as ...
4
votes
1answer
391 views

Saved passwords (use case)

I have a program in which a user enters a password, and the user data is stored encrypted using AES-128. The data and passwords must be stored together. Both the data and the password are encrypted ...
-6
votes
1answer
598 views

Secure Web application Password vault/manager [duplicate]

I would like to build an open source online password vault which allows users to securely store their passwords, like Keepass or roboform, but where a user can access their passwords through a website....
4
votes
3answers
1k views

Determine hashing algorithm only with known input and output

Given the input: test A system generates the following output hash: 0x001F41B6A0534D3B851D69EFE6237F550100000010D5F4FC65E64BCFDBF2590212E4411C44942C6C734C00ACFE13B958DCAB3614 I do not know ...
4
votes
3answers
956 views

How to secure a truecrypt container allowing access with multiple SSH public keys?

I would like to create a TrueCrypt container which can be accessed by multiple people. The container itself can be stored anywhere, e.g. in a shared folder in Dropbox or Google Drive, ... I would ...
1
vote
1answer
2k views

Picking an encryption algorithm for auth tokens passed via AJAX

I'm looking for a low CPU intensive encryption algorithm, to pass around session authentication tokens. As an example: The user will login in to the website (via OAuth, whether by the site as ...
12
votes
1answer
2k views

How to study the packets sent by a keylogger

One of my friends runescape account got hacked through key-logger. He downloaded a runescape gold generator from a file sharing site and tried to use it. I have a strong doubt that it is a key-logger. ...
9
votes
3answers
3k views

Encrypting user data using password and forgot my password

I am planning to do a web application which stores a lot of personal stuff (info, photos...). And to give users a sense of protection, I want to encrypt the data before storing it to the database. So,...
4
votes
1answer
2k views

How to make a secure key distribution scheme/protocol?

We are building a data processing platform on Amazon AWS. We are going to store sensitive data in the S3 (encrypted) and then the Amazon EC2 node is going to be utilized to process this data. We are ...
3
votes
1answer
2k views

How to secure or (Ensuring Integrity) of Web Data in transit and in store?

Consider (usual scenario) You own a Shopping Cart Website and hosted on Internet, now, your hosting company provides you database to store your data. If talking about security, we need it for: ...
9
votes
3answers
23k views

AES CBC padding when the message length is a multiple of the block size

Assuming that a 32-byte plaintext is encrypted by AES 128 CBC - is it mandatory to add 16-byte padding, according to the different padding schemes?
3
votes
4answers
1k views

Can an attacker reuse stolen SSL private key to recreate that domain on his server

Say my domain (https://example.com) SSL private key has been stolen and was not protected by a passphrase then. Can the attacker uses that key and certificate to host the same domain on different ...
0
votes
2answers
2k views

“Premium SSL” vs “Stanard SSL” certificates - Any reason why I would want a “Premium SSL”? [duplicate]

Possible Duplicate: What are the advantages of EV Certificate? besides the green URL bar and free security scan and whatnot. Our website does NOT accept any personal info other than email ...
4
votes
2answers
3k views

What are the differences between ssh generated keys(ssh-keygen) and OpenSSL keys (PEM)and what is more secure for ssh remote login?

I have learned there are 2 methods to make SSH remote login easier and secure , those are; ssh generated keys (using ssh-keygen)OpenSSH Keys PEM (.pem) keys usually generated with OpenSSL (Amazon ...
2
votes
2answers
153 views

Which hard disk encryptions schemes are tied to the original hardware?

When using a laptop, an encrypted HD/SSD can be an important security measure. However, laptops are prone to accidents (fluid spills, dropping on the floor, etc) that may mandate some or all of the ...
4
votes
2answers
1k views

How to correctly implement AES in a backup application

I am writing a back-up application which should have the feature of encrypting the back-up. It must encrypt file data, paths and filenames. The application is being written in C# (.NET). Target is ...
4
votes
3answers
455 views

Completely mimimise the possibility of my web hosting account being hacked

I've just moved web hosting providers and I want a fresh, secure start. To a certain extent, I don't mind what I have to do I'm just fed up my account being hacked or infected. I just wondered how to ...
4
votes
3answers
381 views

jasypt message integrity

I've been looking into ways to encrypt an authentication token that I need to pass from one site to another. Things i have learned so far are use a high level library. don't use ECB use a HMAC to ...
1
vote
3answers
535 views

RSS Feeds: restrict access

"We are a bunch of journalists and we share much of the information via e-mails. This has become tedious now. Hence we found out a way to share, by just having to share our private blog posts via RSS(...
13
votes
2answers
14k views

Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?

is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks. If it can, how, but if not, is there another ...
3
votes
1answer
2k views

How to implement authenticated encryption using pycrypto or a python library?

I'm using pycrypto to encrypt files that will be stored in the cloud. I expect the user to enter a password to decrypt files, but encryption shouldn't require a password (to allow the script to be run ...
1
vote
6answers
2k views

Is SHA-1 encryption?

I have read that SHA-1 is a cryptographic hash function. On an exam, SHA-1 was given as a possible one-way encryption algorithm. Does SHA-1 require a key as input? Is a key required to qualify as "...
5
votes
1answer
3k views

Security of bcrypt/sha256 key used with AES to encrypt a file

I'm looking to encrypt files using secure hashing and encryption algorithms in Python. Having used bcrypt in the past, I decided to use it for my passphrase calculator, then pass the output through ...
1
vote
1answer
221 views

Need advice on Cryptography digital files project

I have to choose a topic for my end-of-year school project and I need some advice. I was thinking of implementing an online tutorial materials (digital files) project. I have been researching on ...
7
votes
1answer
16k views

How can I tell if a PPTP tunnel is secure?

PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly. As an end-user, is there a simple way for ...
11
votes
4answers
14k views

How secure is the new Mega-site encryption?

The new Mega site, sucessor of Megaupload, claims that all information is encrypted with a symetric key that only the user has access. The general terms are listed here: All files stored on MEGA ...
3
votes
2answers
391 views

Is a random keyfile more secure than a derived key?

I'm devising an encryption layer for some proprietary cloud storage API. Basically this should act as a transparent adapter that encrypts whole binary blobs (files) on upload and decrypts them on ...
0
votes
1answer
256 views

Tracking information on HTTPS connection

My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
0
votes
1answer
1k views

Is TLS secure when full eavesdropping on the network occurs? [duplicate]

Possible Duplicate: How is it possible that people observing an HTTPS connection being established wouldn’t know how to decrypt it? Alice connects to Bob's site via a TLS secured connection (...
-1
votes
1answer
133 views

GnuPG implementations are not cross-compatible? [closed]

Let's say I made my private key using Enigmail. Then I imported it into a Windows program called GPG4USB. When I want to decrypt a message it asks for my encryption password but it doesn't accept the ...
45
votes
5answers
52k views

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

The main difference being TrueCrypt creates containers and 7-Zip encrypts the file itself, so file sizes can be guessed. Now let's just talk about the strength and breakability of the encryption. ...
7
votes
3answers
741 views

Is it a good idea to have a “master” password?

Though I do have a good memory of passwords, it is quite impossible to have one password per application. Yet, it should be... My current way to deal with passwords is to have five passwords and to ...
-3
votes
1answer
2k views

is there better email, file, disk encryption than PGP? [closed]

Currently, I am using Symantec's PGP desktop whole disk encryption for my Mac. After hearing that FileVault was insecure and supposedly easily crackaable. However, PGP has been around for a long time,...
2
votes
2answers
931 views

How does Chat monitor work,if we use encrypted service like gtalk

i have heard that there are software like this http://formessengers.com/mdetect.htm that monitor Chats and can see the chat logs,but how do these kind of software work if we are using services like ...
5
votes
3answers
6k views

How easily could be truecrypt and EFS cracked in this scenario

I suspect some info was subtracted in the past months from my laptop. Therefore Im looking for methods to encrypt my data. I want to try using truecrypt for the sensitive files folder plus EFS for the ...
2
votes
1answer
477 views

Securing Isolated AWS Deployments to comply with HIPAA/HITECH

HIPAA Security Hounds...How would you view an AWS deployment that included a set of systems deployed together at AWS (within a single, secured Virtual Private Cloud), using a key to encrypt all ...
3
votes
3answers
2k views

Hash Function Xor

For a hash function what is the best secure method, XOR or Concatenate: h(data1 XOR data2 XOR data3 XOR data4) ? or use h(data1||data2||data3||data4)?
1
vote
1answer
425 views

Is it possible to decode xor encoded string from N copys?

Let's say, I've got N strings encoded with "random" bytes using xor. If I know that the information encoded is the same everywhere, is it possible for me to get at the information itself by doing ...
3
votes
3answers
7k views

How to store banking information,collected on website, securely and implement encryption?

So I have this website in which I will ask users to input the following banking information. Bank account holder name: Bank account number: 9 digit routing number: I need these information from ...
1
vote
1answer
251 views

Implementation review - Independent key, admin side and user side

The admin of the website needs to read user data. So, if the key is derived from the user pass, then the admin has to know the user pass, not exactly a good idea. The following encryption scheme was ...
20
votes
1answer
16k views

What changed between TLS and DTLS

What did the DTLS (TLS over UDP) authors have to change so that it could run without TCP? Bonus points: Do any of the protocol difference affect the way it should be used, both in terms of interface ...
1
vote
1answer
56 views

Safely transfer UserID among different Subdomains

Scenario : Application a.mydomain.com redirects its users to application b.mydomain.com for Account Creation. b.mydomain.com creates the account, and redirects the user back to a.mydomain.com with ...