Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
22 views

Securing decentralised cloud scaling

Approach Require a certain percentage (quorum) of nodes to agree in order for my decentralised multicloud to grow. Benefits Reduced likelihood of growing too quickly (e.g.: 2 new nodes created ...
1
vote
0answers
44 views

Hiding symmetric key inside encrypted data

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
3
votes
1answer
120 views

Asymmetric / end to end encryption for web messaging app

Background I'm trying to design a secure and sustainable web app for messaging. The purpose is to learn how to create secure web application. The application is suppose to be written in Javascript ...
16
votes
9answers
3k views

Hide the fact of e-mail communication

Bob has a mistress. Her name is Alice. Bob`s wife Eve knows Bob is unfaithful, but she does not know who the mistress is. Alice does not know Bob is married. Bob needs to communicate with Alice over ...
23
votes
7answers
38k views

How secure is a Windows password protected zip file?

I need to send some sensitive information to a client. I thought I would email a password protected zip file I created using Windows XP and then call them with the password. Presuming I pick a good ...
3
votes
0answers
102 views

Generate secure one-time codes containing information

I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance. The user would pay for a code which would then ...
2
votes
0answers
60 views

OpenID Connect: Why use authorization code flow?

I have a question about implementing OpenID Connect I was hoping I could get some help on. I understand the different flows and get that the authorization code flow is good because it allow client ...
4
votes
0answers
46 views

Is there any reason to use AesManaged over DPAPI in this scenario?

I have a situation where my web application is going to be deployed on multiple web servers, and I'll be wanting to store some securely encrypted data on the DB servers (each web server has a DB ...
0
votes
2answers
155 views

Is this the most secure encryption/hashing system? [closed]

I've been doing some research regarding password security and after reading several topics and the Kerckhoff's principle. I came up with what I believe is a really secure system regarding online ...
14
votes
3answers
4k views

Smartphone / GSM Sniffer

This question would be in the category of SmartPhone Sniffers. So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
11
votes
1answer
1k views

Why can't I use the same key for encryption and MAC?

I wrote a simple file encryption program as an example of how to do encryption correctly, but after reading a questions about encryption + MAC, I think I made a mistake by using the same key for both. ...
0
votes
1answer
82 views

Safely encrypting data received through HTTPS

I am receiving sensitive data over an HTTPS connection and need to store this on disk, encrypted so no one can tamper with it, but for reading later on. Each user in the system has a password. The ...
2
votes
2answers
134 views

Which hard disk encryptions schemes are tied to the original hardware?

When using a laptop, an encrypted HD/SSD can be an important security measure. However, laptops are prone to accidents (fluid spills, dropping on the floor, etc) that may mandate some or all of the ...
2
votes
2answers
212 views

Converting ECC Private key to PKCS#1 format

Is there any way to convert an ECC private key to RSA PKCS#1 format? I have tried converting it to PKCS#8 first using OpenSSL: openssl pkcs8 -topk8 -nocrypt -in EC_key.pem -out pkcs8_key.pem This ...
3
votes
1answer
455 views

Why does GnuPG shrink my file after elgamal encryption?

I would like to run GnuPG elgamal encryption for at least a few minutes. The only way I can think of is to create a large file to be encrypted. So I created my file like this: dd if=/dev/zero ...
1
vote
1answer
83 views

What is the safest way to encrypt a password that can be decrypted at a later time?

In a web app I'm building, I need to use Apple's AutoIngestion tool for iTunes Connect. In this tool it seems the only way to use it is to send a password in plain text. What would be the best ...
29
votes
4answers
21k views

How does PGP differ from S/MIME?

Is S/MIME an abstracted system for general MIME type encryption, whereas PGP is more for email? Why would I want to choose one over the other, or can I use both at the same time?
3
votes
1answer
168 views

Has the POODLE SSL vulnerability ever actually been used?

Is there any evidence that the the POODLE SSL or TLS has actually been proven to be a risk for file transfer like SecureFTP etc...? ...or is it just a theoretical exposure?
0
votes
1answer
55 views

Security at application layer

Originally asked on http://crypto.stackexchange.com/questions/24430/security-at-application-layer but was suggested to ask here instead. I saw lots of questions asking about encryption over http, ...
2
votes
2answers
1k views

What are the security implications of the POLi Internet Payments technique?

POLi Payments is an Australian based online payment provider which has begun trading in New Zealand. They are supported as a payment option on some large eCommerce websites in New Zealand, including ...
14
votes
4answers
14k views

Is RedPhone a secure and secret way to communicate?

RedPhone provides end-to-end encryption for your calls, securing your conversations so that nobody can listen in. But really, how is the probability that a voice conversation is wiretapped still? ...
2
votes
2answers
63 views

Does changing the default number of iterations in KeePass (or other encryption applications) increase security?

Inspired by this question about the difficulty of cracking a KeePass database, I'm wondering if changing the default number of iterations in an encryption application (e.g., KeePass) increases ...
5
votes
3answers
28k views

CryptoWall 3 - how to prevent and how to decrypt?

My father's computer is now infected with CryptoWall 3, according to the link below. http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information#CryptoWall Is there a way to ...
1
vote
1answer
52 views

What's the value of data partition encryption for database files on a postgres database server?

We're in the process of rolling out a postgres based web app, and I'm trying to understand the value of encrypting the entire database. In postgres's case, the only way to do this is store the ...
4
votes
1answer
75 views

Is it possible to prove the content of an encrypted message without disclosing the private key?

Suppose that I sent Bob a message saying, "The meeting is cancelled", and encrypted it with his public key. Could he share the plaintext with other people, without disclosing his private key (and ...
0
votes
1answer
135 views

Why my files that Encrypted with EFS in Windows 8.1 shown in Linux ubuntu?

i Encrypted my files with EFS in windows 8.1 so i logged in ubuntu and without any warning , its shown my files actually not Exactly the file but shown the path of file and the name and i can ...
3
votes
4answers
9k views

Is diskcryptor really secure?

Diskcryptor is an open-source competitor to TrueCrypt for Windows. It has an edge over Truecrypt for system encryption, because it allows for more than one independently encrypted system partition, ...
51
votes
4answers
6k views

What kinds of encryption are _not_ breakable via Quantum Computers?

There's the recent article NSA seeks to build quantum computer that could crack most types of encryption. Now I'm not surprised by the NSA trying anything1, but what slightly baffles me is the word ...
5
votes
1answer
243 views

What are the security differences between SMIME email and PGP email? [closed]

Outside of key distribution, and specific to the technical details relating to encrypted email data (message body), what's the difference between SMIME and PGP? Example comparisons Security ...
13
votes
6answers
5k views

Why encrypt data in memory?

I saw that KeePass not only encrypts its password-database-file, it also can encrypt the passwords it holds in memory. This is just an example. I thinking of a new project dealing with sensitve / ...
2
votes
1answer
51 views

Is there any College, State or Government ID that transmits a offline verifiably encryptable data blob?

I'm looking for any way to digitally verify a user, ideally with a photo and link PII to that user. My use case is that a user will extract and send an encrypted data blob (say from a passport) to my ...
16
votes
4answers
3k views

Is it dangerous to publicly share ciphertext?

Alice wants to share a message with Bob, but Alice and Bob can never be in the same place at the same time. We can assume they both know each others public keys (or agreed on a shared key, if that ...
0
votes
1answer
63 views

WPS and WPA2 connection methods

Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange? If the latter, it's possible for ...
2
votes
2answers
250 views

What is a current best practice example of basic encryption and decryption in PHP?

I have a good working knowledge of basic security best practices (password hashing, preventing sql injection, CSRF, etc.) but am completely at a loss for finding a solution to common-case encryption ...
18
votes
1answer
498 views

How to encrypt in PHP, properly?

How do I encrypt data in PHP, properly, using symmetric-key encryption? I have a message M and a secret S. I'm looking for a solution that uses cryptography properly without making any of the usual ...
0
votes
1answer
129 views

rainbow table for AES 256 CBC knowing IV, cipher text and plain text

I'm in a situation where I know that I have to decrypt a file encrypted using AES 256 CBC and I've the following details: I know the first 16 bytes block in plain text I know the IV (static 128 bit ...
14
votes
8answers
15k views

Encrypting files on Google Drive

It's my understanding files kept on Google Drive are not protected. I would like to have them encrypted so that to be able to view or modify them one must enter a password. I foresee a potential ...
1
vote
1answer
39 views

Using scrypt to encrypt data in a session variable

Let's say I want to store some data in the node's session, for example, like an authenticity token. Obviously I want to store it in an encrypted way if it's going in a cookie, then decrypt it on a ...
240
votes
7answers
189k views

RSA vs. DSA for SSH authentication keys

When generating SSH authentication keys on a Unix/Linux system with ssh-keygen, you're given the choice of creating a RSA or DSA key pair (using -t type). What is the difference between RSA and DSA ...
1
vote
1answer
60 views

Message and Key Security

I'm reading Post-Quantum Cryptography, and in the page 106 in the beginning of the Section 3 it says: In this section we consider the message security (opposed to key security) of code-based ...
1
vote
1answer
93 views

Is End to End encryption possible for all servers across the whole infrastructure?

Running into a possible situation where a client I am working with is requesting that all data that leaves the servers should be encrypted and here, we are talking of hundreds of Linux servers ...
2
votes
0answers
53 views

How is Tresorit client-side encryption key stored and managed?

I am using Tresorit on Mac OS X and iPhone. When I am using it there is always applied client-side encryption before posting the file to cloud. The key used for encryption is AES-256 and CFB mode of ...
0
votes
0answers
25 views

Cryptsetup using TPM? [duplicate]

Does cryptsetup uses TPM? or CPUID to identify the hardware environment in order to prevent it from stealing and crack it on other PC.
0
votes
0answers
20 views

Why encrypt client<->server on top of TLS? [duplicate]

I want to implement TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 between my client and my server. However, someone advices me to add my own encryption&digital signature on top of it (adding a suite of ...
0
votes
0answers
96 views

“gpg” vs “openssl rsautl” (asymmetric keys) for credentials storage

I'm working in a PHP project and need a better solution to store credentials to a client's database, and I'm thinking about encryption, I put to work both gpg and openssl using asymmetric keys, but ...
1
vote
1answer
91 views

How to keep a reasonable level of entropy in an encrypted file?

Encrypted (or random) data, by nature exhibit a high entropy value and non unencrypted data will exhibit a low entropy value. From an attacker point of view the precense of this high entropy value in ...
0
votes
1answer
50 views

Feasibility of creating an in-memory web app (that runs from a CD-rom on a web server) for sharing self-destructing messages

This question is about a hypothetical in-memory web application that is used for exchanging encrypted messages that passively self-destruct in X amount of minutes. Here the messages would be stored ...
1
vote
2answers
123 views

How to secure sensitive information on cloud from administrator (end-to-end encryption)

When I use end-to-end encryption to secure documents and sensitive information on cloud or on computer, there is always a risk of accessing these information by administrator. For example if you use ...
0
votes
1answer
72 views

Security tradeoffs while designing a mobile Web Service API

I'm not a security expert but I want to ask about tradeoffs in a web service API I'm designing for mobile apps. It is an API which tracks users' locations so yes, the data is reasonably sensitive. ...
2
votes
1answer
201 views

Is ENCFS secure for encrypting Dropbox?

I've encrypted my dropbox-folder with encfs according to a few tutorials I found on the web, advocating this approach. But I've found the following critical statement concerning encfs'security in ...