Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
1answer
152 views

How Does Telegram's Identity Verification Work?

Note: please refrain from commenting on Telegram's design of OTHER parts, as it will distract from the stem of the question. Background: Signal (Previously, TextSecure) is the de facto standard of ...
1
vote
2answers
63 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
1
vote
3answers
239 views

Using a stolen certificate on a server

Yesterday I asked the following question regarding what would happen if you placed a stolen certificate on your own server and edited the 'host' file so that the DNS name matched: Could a stolen ...
0
votes
1answer
79 views

Add SSL on top of existing TCP connection

This may sound as basic question for some but I have never done such thing. Imagine I basically have simple TCP client implemented on C# (e.g. TCPClient class) and simple TCP server implemented using ...
4
votes
2answers
84 views

Should I worry if I have tried to ssh into a 'fake' dyndns.org site? (with ssh keys)

I often ssh into servers for work and play using dynamic dns with ssh keys that are password protected. Twice now (shame on me!) I have mistyped the dyndns.org part of the address and been greeted ...
0
votes
2answers
62 views

Public key - private key question

I have a query about public/private key encryption that I hope someone can answer. So as I understand it: Client connects to server and server responds with certificate Client pulls the public key ...
2
votes
1answer
131 views

How do programs like keepass protect their data even when it's loaded into RAM?

After noticing the feature in Keeppass having the option to "Enable in memory protection" I began wondering, how can memory be encrypted and still be useful? Without going into homomorphic ...
3
votes
0answers
60 views

Is ECB secure if I can guarantee that I never encrypt the same block twice?

After reading about modes of operation for block ciphers, I've found that basically all discussions about ECB end with: "never use ECB". For example this security stachexchange answer. However my ...
1
vote
1answer
61 views

Encryption that service provider themselves cannot decrypt?

I recently saw the following message verbatim on an online application I use. The login is simply a login/password combination. There is no oauth, no two factor authentication, etc... This sounds ...
3
votes
1answer
143 views

How do Cloud Encryption Gateways and CASB work?

Cloud Encryption Gateways (CEG) and Cloud Access Security Brokers(CASB) are becoming popular to ensure the security and confidentiality of the data leaving to Cloud Service Providers. How do they ...
2
votes
1answer
303 views

How is an ODBC connection encrypted?

Most conversations about ODBC are Microsoft centric, but the protocol is often used in heterogeneous environements, such as a Windows client connecting to a database on an *nix server. While my ...
5
votes
1answer
58 views

Dynamically decrypting files

Is it possible to store (video) files encrypted (using AES or similar) in the cloud and have clients' browsers download those files and dynamically decrypt them to start viewing them whilst they are ...
1
vote
3answers
331 views

Prevent or detect key copy

This question can be classified as somewhat two interrelated questions - or two goals. Main aim is basically to authenticate client to server, but remain secure even if someone steals the key from ...
0
votes
2answers
114 views

RSA: Do private keys have to be private?

I was thinking about using RSA, but in reverse. Where everyone has the private key, and only the server has the public key, so that all the clients can decrypt a message from the server, and the only ...
0
votes
1answer
55 views

Passcode and encryption

Does a passcode encrypt data on a device? Do additional steps need to be taken in order to encrypt the device, even when a passcode is already set? Or does having a passcode mean the data is ...
1
vote
1answer
72 views

Safe to store encrypted data with (password protected) pfx file

I have created a self signed certificate using Powershell's New-SelfSignedCertificate, with the intention of encrypting and storing a username / password in public. Specifically using - ...
1
vote
0answers
19 views

E2E Encrypted group calls and messaging (plug'n'play solution) [closed]

I'm looking for something similar to Skype I guess. Here are the important main features that I need: Easy "plug'n'play"-like solution (like Skype for example) Safe end to end encryption for calls ...
3
votes
1answer
41 views

User password as offline encryption key

I want to store a file encrypted on the user's device for offline access. Since they don't have an internet connection, they can't sign in with their username/password and receive a secret key, so my ...
2
votes
1answer
102 views

Properly generating RSA+AES keys

For learning purposes, I'm creating a chat application where the connections are done via SSL/TLS, and the messages are encrypted using AES-CBC-256 and the AES keys are encrypted with RSA-2048. The ...
2
votes
1answer
41 views

Why aren't mixed-content connections allowed on localhost?

Recently I had to redo something at work. It involved a servlet on Tomcat that accepted requests from external users (Connection A), which in turn connected via SOAP to a Web Service on the same box ...
1
vote
0answers
43 views

How to decrypt RSA cipher text? [closed]

How can I decrypt an RSA cipher text in which I am only provided with a public key and the cipher text. The person who encrypted it made a mistake in taking the exponent.
2
votes
1answer
98 views

iOS encryption and performance

iOS file encryption deploys many layers of encryption; There is the AES-256 accelerator encrypting general flash memory with the per-file-, UID-, and GID keys. There is Data Protection on the software ...
2
votes
1answer
81 views

How does SSL inspection work on personal devices without deploying a trusted custom certificate?

My (limited) understanding of SSL inspection is that the process involves deploying a certificate to each host that SSL inspection will be monitoring. In an enterprise environment, I can understand ...
4
votes
4answers
154 views

Must an encrypted hash value be bigger than the password it was generated from?

I was reading a book called Introduction to network security theory and practice, and I found the following paragraph: Rainbow Tables A rainbow table is a table of two columns constructed as ...
3
votes
4answers
59 views

Retrieving passcodes through forensic discovery

If you encrypt a device using a passcode, the data stored on the device cannot be retrieved using forensic discovery. What about the passcode itself? Is that encrypted too? Can forensic analysts ...
1
vote
1answer
40 views

Application vs Device - Data encrypted at rest

I have a mobile device that does not have the device's encryption settings enabled. Therefore, data stored on the device is not encrypted at rest. I have installed an MDM containerised application ...
2
votes
1answer
37 views

Use asymmetric encryption once to exchange symmetric key

I'm developing a json API that should be able to handle a huge amount of clients. To make this work I need to reduce the overhead as far as possible. One of the ideas I have is to use https only in ...
1
vote
0answers
23 views

LZO compression of OpenVPN insecure? [duplicate]

I read about the CRIME attack against TLS, that it's avoidable by turning off the TLS compression in the browser. Does this also apply to OpenVPNs comp-lzo option, so that it should get turned off?
3
votes
1answer
52 views

What CryptoPP APIs Output Round By Round Results for AES Encryption/Decryption?

I created a program using CryptoPP APIs to implement AES ECB mode with a 128 bit key for encryption/decryption of user input plaintext. I know that ECB is the least secure AES mode but it is ...
3
votes
1answer
57 views

FileVault and Sleeping mode

I have FileVault activated on 10.10. (Mid 2012 MacBook Pro - MPB) I relaized already that there are different sleep modes. autopoweroff and normal Standby. Whenever the MBP goes into Hypernate mode, I ...
5
votes
3answers
174 views

How do Windows services access folders encrypted with NTFS EFS

If I understood correctly, when I enable NTFS encryption (EFS) for a specific folder in Windows, it uses specific account's user name/password (salted) to create asymmetric keys for data encryption ...
3
votes
2answers
113 views

Most secure way to deliver web app for offline access [closed]

Having built a web app based on a PHP stack which is deployed on a server, I would like to have a way to provide access to it offline. There's a database of patients and appointments that needs to be ...
3
votes
2answers
73 views

Managing the public keys and certifications of S/MIME protocol

I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the ...
1
vote
1answer
112 views

Is it possible to recover a Diskcryptor volume password?

Must admit to being dumb: I have encrypted one partition from my external hard drive with the AES-Twofish-Serpent algorithm and used a key file with a password. My PC ran into a problem and now the ...
1
vote
1answer
70 views

Can you do a client and server side encryption [duplicate]

I am creating a PHP website where users, among other things, can login and do administrative stuff. For their passwords i use password_hash($password) and to later verify with it, I use ...
4
votes
2answers
143 views

SSLStrip still HTTPS

I did all the configuration right. IPtables, port forwarding, ARPspoof, everything. However, in the browser websites like Facebook and Twitter are still HTTPS. What am I doing wrong?
2
votes
3answers
55 views

Stacking Encryptions (Stream over Block)

I am reviewing the code for a product our team developed where credit card information is stored in a local database in the event of no internet connection and came across the encryption methods. The ...
0
votes
1answer
35 views

Can I modify a ciphertext created in AES with OFB mode?

Suppose a service uses AES to encrypt Cookies, of the form user=username+padding,tmstmp=timestamp where tmstmp is the expiration time and +padding is a series of zeroes to make the total length be ...
-1
votes
1answer
36 views

Quantum Computation and its threats [duplicate]

Since Quantum Computers has potential to become super computers of next generation. will that make cryptography obsolete..?
3
votes
0answers
46 views

Could RSA be used as a block cipher?

I always thought that the reason we couldn't use it was because it required too many CPU cycle. But an answer from @TomLeek indicated that this was not the case : ...
0
votes
1answer
76 views

Why does initial encryption take so long? [closed]

I am encrypting my new 1 TB drive using VeraCrypt and AES encryption. It estimates 9+ hours just for the outer volume to be encrypted. I assume the inner volume will take just as long. Why does this ...
0
votes
2answers
89 views

should I add a sha256 signature to an AES_256_CBC encrypted token?

currently I generate a token for an mobile app the way below. I decrypt the token to process the request and assess the user is logged in. I'm on TLS RSA 2048 bits connection. I was wondering if ...
5
votes
1answer
158 views

Is there an equivalent of an Apple cryptochip in Android devices?

Apple has a cryptochip which, beside managing the encryption keys, tunnels authentication and provides throttling of failed attempts, as well as the ability to trigger a device wipe after several ...
3
votes
3answers
73 views

Decrypt SSL Connections established by a Host I have adminsitrative privileges on

I want to decrypt a SSL connection that is established by an unknown binary file on a Windows 7 Computer. This binary doesn't exist on any other computer on our network and establishes SSL encrypted ...
2
votes
1answer
115 views

One-Time Pad authentication & Information-theoretic security

I'm trying to create a "Information Theoretically Secure" cryptosystem, inspired on the One-Time Pad. Now I'm facing the obstacle of authentication... How good is this solution (that uses the "Encrypt ...
5
votes
2answers
841 views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
2
votes
1answer
65 views

Security risks of symmetric encryption with compression for database data

I would like to compress data before encrypting and storing it in a MySQL database to reduce especially bandwith requirements. In the future, the DB may be accessible via a web interface. Various ...
0
votes
0answers
159 views

Secure REST API using Public/Private keys?

I was having a conversation with some programmer friends about securing an API without server modification. Only SFTP access to the filesystem is allowed and OpenSSL extension is installed, the admin ...
60
votes
2answers
7k views

Why has the NSA had a hand in deciding on encryption standards?

The NSA has had a large hand in the design of at least two significant encryption standards: the Digital Encryption Standard, and its successor, the Advanced Encryption Standard. Because of their ...
4
votes
1answer
66 views

Can I tell Linux not to swap out the data space of a specific process?

I need to be able to write a program that uses a secret value that I want to ensure never gets written to disk during a page swap. The value is securely entered when the program starts, and gets ...