Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

5
votes
2answers
369 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
0
votes
2answers
72 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
2
votes
0answers
62 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
-1
votes
1answer
189 views

Use openssl key to decrypt file in android/java [closed]

I want to decrypt file encrypted in openssl in java. File is encrypted with private key using openssl and on java side i want to decrypt it using public key. The code: public void testRSA() throws ...
2
votes
1answer
84 views

Is it safer to use a PGP key encrypted with a password than just the same password separately?

I'd like to encrypt some master passwords that I want to store with added security outside of KeePass, instead as just a normal record in the database. I was considering storing these passwords in an ...
2
votes
4answers
154 views

Is it possible to communicate securely entirely over the internet given a global, resourceful man in the middle?

Assuming a global, resourceful man in the middle, is it possible to Securely communicate (I don't mean storing encrypted data off site) completely establishing and sending messages over the internet ...
2
votes
2answers
304 views

How easy is it to crack gpg with private key, but without password

I was wondering if an adversary have your private gpg key but not the password/phrase, how easy/difficult would it be to crack a encrypted file compared to a encryption that only use password and not ...
2
votes
2answers
317 views

PGP as method of sharing AES key?

Would PGP work as a method of sharing the AES key, as shown below, and what would be the flaws with this method of encryption? Server sends PGP public key Client generates (uses as AES key for ...
8
votes
3answers
762 views

Does the SSL encryption strength or validation level of a website really matter?

When looking to get an SSL certificate one is presented with a lot of options. For example lets take Network Solutions since they have a nice comparison chart. Immediately there seems to be 4 major ...
1
vote
6answers
1k views

Is SHA-1 encryption?

I have read that SHA-1 is a cryptographic hash function. On an exam, SHA-1 was given as a possible one-way encryption algorithm. Does SHA-1 require a key as input? Is a key required to qualify as ...
0
votes
1answer
83 views

Hiding existing windows 7 and loading decoy windows 7 instead [closed]

I have windows 7 64bit installed on my computer (NTFS). I wish to hide this installation and create a "decoy" windows 7: When the computer boots up, it will boot to this new "decoy" win 7. If, on the ...
15
votes
0answers
730 views

Understanding HTTPS: why use both symmetric and asymmetric key cryptography? [duplicate]

As a Web Developer I recently realised my understanding of HTTPS is poor and am currently endeavouring to better understand it. After some initial reading I'm left a bit puzzled as to why initially ...
0
votes
1answer
96 views

How to store passwords to a remote web site?

Say I want to build a public API to access a website that doesn't have one. The website is protected by a standard username/password scheme and the API implementation will use scraping to get the data ...
6
votes
4answers
166 views

does using a long delimiter multiple times degrade encryption security?

I need to condense multiple distinct pieces of data into a single encrypted string that can be decrypted and separated out later. Before encrypting, I need to separate the data with some kind of ...
1
vote
2answers
54 views

Is it secure to split information into multiple packets?

I just stumbled upon this SO question. I was wondering if it would be still secure to split the encrypted packet into multiple packets, which are then transferred over the wire separately. Could ...
3
votes
3answers
655 views

Why have export controls for cryptography?

I've always heard someone justify the means for export restrictions with "it's for governmental control/spying". In most reasonable countries, the justice system asks people to adhere to the "spirit ...
23
votes
6answers
3k views

What real world benefits does PGP have over sending email with SSL/TLS such as with HTTPS?

I've been learning about PGP, and I asked myself, "Why?" For example, if I'm using https://mail.google.com, then what benefit would adding PGP offer that would justify it being used? I can ...
2
votes
1answer
198 views

Arduino to Android secure bluetooth connection

I'm using an Arduino Uno and a nRF8001 board from Adafruit to connect to an Android phone over bluetooth. I will be using it to lock and unlock a lock and I need to make sure only verified devices are ...
1
vote
1answer
123 views

All users can write only one can read system

The system I want to implement has the following requirement: All users can insert some sensitive data, but only one, master user, can see it. There is any known, already implemented solution to this ...
1
vote
3answers
91 views

Read encrypted hard-drive after extraction from running computer

If someone unplugs the hard-drive of my laptop while it's running, what contents would they be able to extract from it? I understand that on login, the image of my hard-drive is mounted, but I'm ...
1
vote
2answers
101 views

Broadcast encryption protocol for file sharing service (a-la Dropbox)

I'm building a prototype of a (rather simple) Dropbox-type file sharing service, where users can upload & share file(s) with other user(s). But here's a feature request: I want file(s) to be ...
3
votes
1answer
195 views

Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?

I know that content compression can cause SSL to be vulnerable to the CRIME attack, via changes in the content length when injected plaintext matches existing content. Does this principle carry over ...
-1
votes
1answer
102 views

Corporation Best Practices for Encrypting Locally Stored Email Data

Since the recent Sony hacks took place, the attackers have published troves of data from users' email accounts. Some of this data is very detrimental to the company's image. I suspect that based on an ...
2
votes
3answers
125 views

Encrypt data going through an encrypted connection

If data are passing through a SSL-encrypted connection, is it required to re-encrypt these data? In other words, is it mandatory/useful/worth it to AES/RSA (for example) encrypt data that will be ...
-1
votes
5answers
620 views

What if I develop my own hash algorithm to create strong passwords from easy ones?

I came up with this idea but I cant figure out if it's good or bad, maybe you can help. My goal is: I want to create extremely strong passwords for my main accounts (gmail, skype and so on). I want to ...
4
votes
8answers
347 views

What are the benefits of encryption for everyday people?

In addition to the fact that encryption systems like PGP are notoriously difficult to use, and that encryption doesn't always jive with cloud-based services like webmail, the fact is that most people ...
4
votes
1answer
121 views

How safe are encrypted files error-wise?

If a non-encrypted document has a corrupt byte - we only get a typo. But what about an encrypted file? It seems, and please correct me if I'm wrong, that if the encryption is done right - every byte ...
-1
votes
1answer
297 views

Which PHP encryption method is most incidentally-secure?

just started researching on the latest PHP encryption methods, I've found out my favorite algorithms are compromised. MD5 is no good, SHA-1 has "found flaws", SHA-512 isn't "meant for passwords", ...
27
votes
3answers
4k views

Why can a Tor exit node decrypt data, but not the entry node?

Me -> Node A -> Node B -> Node C -> destination The documentation on Tor always states that only the exit node C can see plain text data. How is this possible without me talking to Node C ...
0
votes
0answers
66 views

Secure password transfer from stdout to another window

I am currently trying to build a little, secure password manager. As of now, I've implemented the encryption. Each website has its own file and each file has a number of fields (Most commonly username ...
0
votes
2answers
96 views

how to encrypt a sensitive model on android and ios

I am writing a mobile app which uses a statistical model contained in binary files. I want to be able to distribute the app freely, but I don't want anyone to be able to use my model files, even on a ...
0
votes
1answer
180 views

How encryption/decryption of RSA private key by passphrase works?

I would like to know how exactly the encryption of private key by passphrase works. I am a software developer with no background in cryptography and I know only some basics. When I open the private ...
3
votes
1answer
302 views

How does firefox sync password recovery work?

According to Mozilla Sync-new-security-model, Firefox servers are not able to decrypt your sync data without your password. So I figured that, the browser generates a key from your password, encrypts ...
-1
votes
1answer
58 views

Emulating Client by sending encrypted hexdump to dB server and getting response back [closed]

So I used wireshark to retrieve a hexdump that has been encrypted with RSA. I need to figure out what the response to that would be when it comes back from the server. How I imagine it would work ...
-4
votes
1answer
116 views

How The Sony Hack Was Traced, and So Quickly? [closed]

What are the steps that are required to locate a source that have routed their traffic through multiple zombie hosts, spanning multiple networks/carrier/nations?
2
votes
1answer
121 views

Does encrypting a file make it larger?

I encrypted a Word document using Winrar by setting a password. Surprisingly the archive was larger than the original file (631 vs 614KB). I then tested to see what would happen if encryption wasn't ...
8
votes
3answers
1k views

Does the entire AES encrypted dataset have to be present to be 'cracked'?

I am implementing an AES 256 algorithm on credit cards and I am wondering if I would be strengthening or weakening the encrypted dataset if I split the dataset and persisted it in two locations. I ...
4
votes
2answers
70 views

What's the best way to transform sensitive account numbers

I work on a web application that manages information about transmission setups and processes client transmission statistics to generate billing charges for the services used by these clients. The team ...
36
votes
9answers
17k views

Are powerline ethernet adapters inherently secure?

I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
12
votes
6answers
15k views

How secure is NTFS encryption?

How secure is the data in a encrypted NTFS folder on Windows (XP, 7)? (The encryption option under file|folder -> properties -> advanced -> encrypt.) If the user uses a decent password, can this ...
1
vote
2answers
211 views

When do I use IPsec tunnel mode or transport mode?

I basically understand how tunnel mode and transport mode works, but I don't know when I should use one instead of another. Among the two parties who want to communicate, if one computer B doesn't ...
0
votes
0answers
105 views

How to securely store SSN details in a database while maintaining searches?

My question is very similar to this one, but in my situation I do not need to recover the real value. My concern with just hashing the value is that since there's a finite and (relatively) small ...
2
votes
2answers
1k views

can I trust Boxcryptor closed source software? Encryption of files for cloud hoster

Boxcryptor https://www.boxcryptor.com is not Open Source. Can I trust this? Is it secure? No government backdoor? Because there is no alternative for OS X and iOS.
2
votes
1answer
209 views

Reverse Engineer this basic Hash using known answer?

Little background: I forgot one of my CCTV accounts password, so used the admin account to create a new one. However I can't access the old one as it's not possible to change a user account password, ...
3
votes
1answer
68 views

Decrypting arbitrary offset of encrypted file

I want to store encrypted files on some storage backend that allows me to fetch bytes X through Y of the encrypted file. I can obviously decrypt the entire file locally and send it back to the client. ...
1
vote
0answers
61 views

Password Encoding/Encryption on ODC connection Strings

I'm interested to understand how passwords provided in ODC (Office Data Connection) connection strings are encoded or encrypted. The format of the connection string is ...
59
votes
8answers
138k views

How to determine what type of encoding/encryption has been used?

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format ...
1
vote
1answer
105 views

PCI DSS - Recorded Phone Conversations

I am using the using the following image from FishNet Security as a sort of guide for the data flow diagram required by PCI DSS as defined by: 1.1.3 Current diagram that shows all cardholder ...
0
votes
1answer
235 views

Can you get someone's IP if you have their Skype number?

I was reading about capturing packets during skype sessions to get the other person's IP address... sounds like you can do this mainly while in a live skype chat / call between skype to skype, but Is ...
2
votes
2answers
83 views

Can a virtual machine be used instead of the host?

I was thinking of using a Debian guest as my main 'host' instead of my actual host (Ubuntu). Do you think this will have any advantages in terms of making it difficult for digital forensics to ...