Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

6
votes
1answer
248 views

John McAfee's Explanation of iOS Hack

I'm referring to this YouTube video, and further comment from John: I hope everyone knows that the Apple explanation was VASTLY dumbed down for the press. I know the A7 system chip well, ...
5
votes
3answers
218 views

How can I prove that my software is secure for those who are interested to install it?

I've written a password locker program for Microsoft Windows that encrypts its contents to the local machine. The only way to get the data out is with the encryption key the user knows. It uses the ...
26
votes
3answers
4k views

Use multiple computers for faster brute force [duplicate]

I've watched Mr. Robot lately and can't stop thinking why it was so hard to decrypt files encrypted using AES encryption with a 256-bit key. Let us say the only method to find the key is through brute ...
3
votes
3answers
801 views

Calculate time taken to break AES key

A 256 bit AES key is required to be broken using the brute force method on a 2GHz computer. How long would it take to break the key in the best case and in the worst case situations? Assume that 1000 ...
3
votes
1answer
190 views

Is this encrypted information? Why is it in a URL?

There's a vendor who sends us reports full of links to articles. Some of these links, especially ones that perform what I'm guessing is an HTTP verb of some kind, look like this: ...
0
votes
2answers
85 views

How to have client encryption without server encryption key

I want to build a service where people can message each other via their mobile device so that they encrypt all of their information on their device and not on my server. Basically I want to two people ...
11
votes
3answers
5k views

Pitfalls of SSD encryption

Encrypting an SSD is a process that is sometimes warned should be done with caution. E.g. http://en.gentoo-wiki.com/wiki/DM-Crypt_with_LUKS mentions how the SSD may keep hidden space used for wear ...
5
votes
2answers
528 views

Can you encrypt data using BCRYPT?

Somebody else posted a question about ghostmail (https://www.ghostmail.com/crypto) and whether it looks valid. One of the things that triggered alarm bells for me was the sentence "Account Password ...
0
votes
2answers
49 views

Secure way for bulk mailbox verification to avoid IP Blacklisting

We have built an API that verifies a address existence in the respective MX using RCTP command. Their are many services available out there but we like to do it again since we have few clients who ...
0
votes
1answer
94 views

Momentarily unencrypted Payment cards

Momentarily unencrypted Payment cards I read about the cyber-attacks related to the momentarily unencrypted payment processing data at the point of sales devices. Technically, how is it possible? ...
-4
votes
1answer
111 views

How is it technically possible for Apple to unlock the San Bernardino shooter's iPhone? [duplicate]

If the iPhone of the San Bernadino shooters is locked, how would it even be possible for Apple to acquiesce to the FBI's request for them to unlock the phone? Does that mean Apple has some kind of ...
2
votes
1answer
524 views

What web browsers support ECC vs DSA vs RSA for SSL/TLS?

We are updating our wildcard certificate and see that we have the option to use both RSA or DSA with Symantec (for free), while Digicert offers 3 options for wildcards ECC, DSA and RSA. Is there a ...
3
votes
2answers
875 views

DEK, KEK and Master key - simple explanation

This article is intended to be a simplified explanation sans drill-down for people wanting to understand these concepts/terms. What are DEK, KEK and MEK/Master key?
6
votes
2answers
253 views

Protecting my encryption algorithm if the attacker knows the key

Today our programming professor challenged us to make a text encryption program: we will hand him a program that only encrypts (not the source code), plus a ciphertext generated by it. We win if he ...
1
vote
4answers
186 views

How to know if accessing to a VPN service is safe and won't steal my data

I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself? ...
166
votes
8answers
26k views

Why can't the FBI read the key embedded in the iPhone's secure chip/ROM directly from hardware (silicon)?

As far as I understand, the 4 digit passcode is combined (in some fashion) with a key stored in secure read only memory (e.g. secure enclave chip or similar), where it is directly embedded into ...
5
votes
3answers
318 views

1Password for team how secure it is?

I would like to ask you opinion about how secure is the 1Passowrd for Teams. For someone who doesn't know how 1Password - Personal use - works here a summary: You create a master password (hard to ...
5
votes
3answers
152 views

Securely storing an encryption key on AWS

Regardless of the format of encryption, what is the best way to store an encryption key on an AWS EC2 server? I am storing encrypted information in a MySQL database and my cryptography key is stored ...
45
votes
4answers
4k views

Is this a self rolled hashing/obfuscation method? Can you recognize the pattern?

A system we're introducing into the organization is not using any traditional hashing function that I can find. I've been assigned to "approve" it by black-box testing. I suspect passwords are simply ...
125
votes
5answers
120k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
3
votes
2answers
236 views

Am I encrypting and storing an array of user-details correctly?

I came up with a user-details-storing procedure that was, in the beginning, based on actual security-literature – but then I just kept writing without really doing all the cross-checking I should have ...
28
votes
1answer
1k views

What does this say? It's in MD5 [closed]

Some one sent this to me and I have tried to figure it ouut on my own. But have not been successful. Can you help figure out this, he said it was in MD5... 1ce67f05968d51656eb71f13368f0b2d
-2
votes
1answer
150 views

Decrypt or prevent Teslacrypt [closed]

Has anyone come up with a method to prevent receiving Teslacrypt or a method to decrypt encrypted files? Is there a way to prevent encryption on network attached storage? Is email the main avenue ...
7
votes
3answers
634 views

Is it possible to determine if some given data is not encrypted?

Let's say I'm running a BitMessage node. One possible attack against me would be to upload illegal content to my node, and once someone knows it's there, to tip off the authorities, who would then ...
1
vote
2answers
156 views

Add SSL on top of existing TCP connection

This may sound as basic question for some but I have never done such thing. Imagine I basically have simple TCP client implemented on C# (e.g. TCPClient class) and simple TCP server implemented using ...
9
votes
3answers
11k views

gpg --encrypt fails

When trying to encrypt files, I get the following error in KGpg editor window: The encryption failed with error code 2 On the command line I get: $ gpg --list-keys /home/user/.gnupg/pubring.gpg ...
-2
votes
2answers
56 views

Is there a reason to salt instead of enxrypting data? [duplicate]

Is it more secure to: a) Take a password, salt it, then hash it. b) Take a password, hash it, then encrypt it(Using a symmetric algorithm with a large key)
1
vote
1answer
69 views

How easily could this method of cryptography be cracked? [closed]

Background A couple of years back, in my naivety I dreamt up a method of encrypting information, the result can be seen on my website, I evidentially thought it was pretty neat and I decided to mix ...
0
votes
1answer
70 views

FileVault 2 FDE and BoxCryptor are safe to use together or they have conficts?

Assuming that someone has a Mac and uses FileVault 2 FDE (256-bit AES key) and uses the BoxCryptor (256-bit AES key) for the clouds like Dropbox/GDrive/etc and or some other folders. FileVault 2 uses ...
3
votes
2answers
179 views

How to secure JSON data that is shown on web service page?

I have an iOS app that uses a web service to get data from my server. It grabs the data and echoes a JSON feed to the web page, and the iOS app interprets it. I have SSL so I am not worried about the ...
25
votes
6answers
5k views

What real world benefits does PGP have over sending email with SSL/TLS such as with HTTPS?

I've been learning about PGP, and I asked myself, "Why?" For example, if I'm using https://mail.google.com, then what benefit would adding PGP offer that would justify it being used? I can ...
1
vote
3answers
167 views

Are longer passwords safer even if the encryption/database security used is compromised?

Let me preface this that I am having a lot of trouble wording my question. Hopefully my description will help clarify. I have always wondered if long passwords actually provide you any more security ...
2
votes
4answers
392 views

Protecting personal documents in cloud

I want to keep my personal documents in cloud e.g. Dropbox. But I want some of my documents be encryted and password protected, such that: 1. even if my Dropbox gets hacked, those documents still have ...
3
votes
2answers
222 views

Is Apple’s latest encryption considered to be munitions grade?

According to U.S. Export and Import laws, any device that has a minimum level of encryption is considered as falling under munitions type laws. Does Apple’s latest OS contain that level? And if it ...
4
votes
2answers
161 views

How can Apple claim that a backup of an iPhone made to iCloud is “hackable”/accessible but not the data on the device itself?

So I’ve been reading up on the 2015 San Bernardino attack and the legal/tech issues surrounding the FBI’s request that Apple unlocks the shooter’s phone. This is how I understand the issue: The FBI ...
3
votes
4answers
143 views

TLS and e-mail security

Our client has asked us to send sensitive data via TLS and to install a certificate on our mail servers so that they can verify the authenticity of our e-mails. If I understand correctly, TLS ...
2
votes
1answer
49 views

Does FTPs (FTP over SSL using explicit TLS) support encryption of data channel?

I am exploring the ability of the FTPs(FTP over SSL using explicit TLS) to encrypt the data channel. I read online that the secure data channel can be entered by entering the PROT command. PROT P for ...
3
votes
3answers
64 views

Must mail relays always indicate the use of encryption in the “Received:” header field?

When an email message is sent with transport encryption, you can tell it from the “Received:” field the receiving mail relay adds to the message header. > Received: from [...].google.com ([...]) by ...
2
votes
2answers
477 views

Practical steps for encrypting an encryption key for data stored in MySQL

So I'm working on my first project where user data is stored as encrypted using the user's password as (part of) the key. I have read many similar things about best practices, but the details seems to ...
1
vote
1answer
92 views

Covert, Overt, and side channels

I am really confused between the following three terms: Overt Channel. Covert Channel. Side-Channel. I feel frustrated! I've been searching about them to find a clear explanation but I keep ...
0
votes
1answer
184 views

Why IOS on IPhone cannot be brute-forced programatically? [duplicate]

I am interested in the recent Apple case where FBI wants to get access, but they say it's not technically possible other than creating a new OS (or I guess just modifying the existing one). More ...
1
vote
2answers
57 views

Is an Initialization Vector (IV) required with unique data?

When used to encrypt data that is unique, is an Initialization Vector (IV) still required? For example, Credit Card numbers or Social Security numbers. The ultimate point of an IV is to ensure that ...
1
vote
2answers
141 views

Password may not be similiar to last 5 passwords [duplicate]

SAP NetWeaver has a password policy to prevent your new password beeing similiar to the last 5 passwords. Are the passwords stored in plaintext to verify this? Or is something like a soundex value ...
1
vote
1answer
96 views

How to only let end user to access data in a web app

I've been read a lot about common encryption methods used in a django app. However, my requirements are very different. I am looking for a way to encrypt my web app data so only the owner of the data ...
150
votes
11answers
54k views

Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?

Why can't a password hash be reverse engineered? I've looked into this ages ago and have read lots on it, but I can't find the explanation of why it can't be done. An example will make it easier to ...
19
votes
3answers
17k views

Does Android encryption really prevent law enforcement access?

Google recently announced that in Android L encryption would be turned on by default: For over three years Android has offered encryption, and keys are not stored off of the device, so they ...
0
votes
0answers
11 views

What integrity does the TLS Record Protocol actually provide?

In TLS the "base" protocol is the "TLS Resource Protocol". This protocol is responsible for: securing application data and verifying its integrity and origin. It also uses a HMAC. However this ...
2
votes
0answers
31 views

GPG Public Key changes after removing master key [closed]

Why does my gpg public key change after removing my master key (leaving just my subkeys) from the gpg key ring? I'm doing this so i can move my daily use keys (subkeys) to my online machine while ...
-3
votes
1answer
524 views

What is suspected to be on the famous encrypted iPhone? [closed]

Quite a big deal is being made about Apple's refusal to decrypt an iPhone used in a terrorist attack. What is suspected to be on the device? If the crime has already been committed and the dead ...
0
votes
1answer
20 views

Keeping the same key and iv for encrypting post content

I want to encrypt and decrypt some wordpress posts. Only the content field i care about. Is it safe to use the same key and iv for the process?