Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
1answer
334 views

Is it safe not to encrypt ping packets?

I am running encrypted communication with ping tacked on after decryption and deserialization is complete. I.e. incoming data -> split into packets -> decrypt -> deserializer -> actual message or ...
7
votes
3answers
2k views

Encrypt WiFi connection per connected user

One of the questions that comes on quite often is about WiFi encryption. Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
3
votes
1answer
99 views

IoT Devices and 39 Month TLS Certificate Life

I develop IoT (Internet of Things) devices on small embedded systems, where it is very difficult to update the local certificate once they have been deployed. It really needs to be avoid if it can. ...
28
votes
6answers
2k views

Encrypting With Passwords - Encryption of Key vs. Data

Many password-based encryption utilities (e.g.: KeePass, TrueCrypt) do something along the lines of... Encrypt data with super-strong random-generated key, "data key". Encrypt data key with another ...
-1
votes
1answer
24 views

Encrypted Traffic Test in Mobile

how to check the SSL/TLS encryption of my mobile application.is there any way to check and watch encrypted traffic in my cell i m using android phone..is there any procedure to check the encryption ...
1
vote
3answers
108 views

Prevent MITM between custom phone app and local server

We're building a Wifi enabled device. The device will be installed locally on each client's office and people in the the small office will connect to this Wifi enabled device, They will send/receive ...
13
votes
3answers
2k views

Is it truly possible to store passwords securely, but be able to see the password?

Every place I looked, people recommended that storing passwords via encryption is like storing passwords in plain text. But every place I've looked, everyone recommends using a password manager like ...
0
votes
1answer
100 views

Analyzing a TLS connection?

Suppose I want a secure TLS communication between me and myschool.edu. Which of the following should I trust to preserve confidentiality, integrity, and authenticity. Here are the options and my ...
1
vote
2answers
59 views

Are there any problems associated with using the same encryption key for multiple systems?

I have multiple computers, tablets, etc. If I have a very secure key, is there any problem with using it to encrypt all of my systems? I can remember 1 or 2 secure keys without writing them down. But ...
0
votes
2answers
808 views

Bitlocker without TPM with both a startup USB and password?

On a Windows 8.1 Pro PC without TPM, how can I use Bitlocker with both a startup USB drive and password? I don't have the option to use both of them, is this possible via command line? Currently, ...
6
votes
2answers
516 views

What are the differences between TPM and HSM?

TPM (Trusted Platform Module) and HSM (Hardware Security Module) are considered as cryptoprocessor, but what are the differences exactly? Does one of them have more advantages than another?
1
vote
1answer
49 views

Internal access to security sensitive data in a company

I'm building a software that requires a lot of security for the data. The user data in essence is very sensitive. So we are building a lot of encryption, 2 step authentication, app call tokenization ...
0
votes
1answer
52 views

Distinguishing between tokens and actual PANs for tokens based on reversible cryptographic functions

I’m researching a possibility of implementing KEK and DEK servers compliant with PCI-DSS requirements. PCI Tokenization Guidelines states: “The tokenization solution should include a mechanism for ...
0
votes
2answers
62 views

Security devices other than firewall and IDS [closed]

I was just studying about firewalls and IDS/IPS and had a doubt. Are these the only two major security devices that a company invests in? or are there other equipment and security controls?
0
votes
1answer
83 views

Risk of temporarily unencrypted data during transmission between systems

I have encountered a situation where sensitive data files are saved unencrypted to server file directories temporarily for 1 to 30 minutes before being sent to a destination application. The data ...
1
vote
0answers
50 views

Possible to use Cellular encryption data to validate Geolocation?

I need offline-verifiable, time stamped, GPS signals or its equivalent. Since cellular protocols include time stamps, encryption keys and other data, perhaps it's possible to re-use this ...
2
votes
2answers
65 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
22
votes
4answers
10k views

Are phone calls on a GSM network encrypted?

When I make a call on my cellphone (on a GSM network), is it encrypted?
43
votes
8answers
7k views

Why can't you work backwards with public key to decrypt a message?

As the title suggests, I am curious to know why you can't work backwards using a message, public key and encrypted message to work out how to decrypt the message! I don't understand how a message can ...
0
votes
0answers
59 views

Is it secure to store EC2 User-Data shell scripts (encrypted using S3 SSE) in a private S3 bucket?

I have an EC2 ASG on AWS and I'm interested in storing the shell script that's used to instantiate any given instance in an S3 bucket and have it downloaded and run upon instantiation, but it all ...
8
votes
1answer
756 views

How long does the system encryption key stay in RAM

The thread title says it, i would like to know how long a system encryption key will stay in RAM or CPU and will be therefore be extractable using boot attacks. I read somewhere that encryption in ...
6
votes
2answers
8k views

How can I recover encrypted files after system reinstallation

I had a file which contains images and videos, I was using the windows 7 ultimate and I had encrypted the file. Now I have copied that file to my hard disk and format that operating system and again. ...
0
votes
2answers
104 views

Crypt-analysis methods for breaking or finding weakness in an encryption algorithm? [closed]

How cryptanalysts work on an algorithm related to diffusion/confusion factors in order to find a weaknesses in an algorithm, for example how cryptanalysts could find weakness on DES? is there methods ...
2
votes
3answers
142 views

Can I initially hash passwords with SHA instead of hashing them with bcrypt to decouple requests from slow crypto functions?

I'm using bcrypt for some web service requests that hash multiple passwords. The problem is that these web service requests can take minutes to complete due to bcrypt. Not very user friendly. My ...
2
votes
5answers
167 views

Does publishing the md5sum of a private key compromise the private key in any meaningful way?

If I have a 4096 DSA private key used for signing binaries, and I want to ensure that a partner has an identical server using the same private key, can I send the md5sum of the private keys over an ...
1
vote
1answer
86 views

How is the username and password captured on this mobile device?

I have a Motorola phone, and I am concerned about my privacy after reading this article : http://www.beneaththewaves.net/Projects/Motorola_Is_Listening.html The poster says: For both of these ...
3
votes
2answers
66 views

Consequences of putting a serial number into an AES key

I have an embedded device with a secure memory of only 128 bits. I have to store the serial number (16 bits) and the AES key (128 bits) into this space. What are the consequences of putting the 16 ...
2
votes
2answers
298 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
0
votes
0answers
41 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
5
votes
1answer
59 views

Can a mobile phone be induced to fall back to 2G comms?

http://techcrunch.com/2015/02/25/gemalto-2/ So, a bunch of SIM card keys were most likely stolen, but Gemalto claims that this would only affect 2G networks. Supposing all that is true, it's still ...
2
votes
3answers
120 views

Maintaining data security in motion with SSL

I am hosting with a HIPAA compliant hosting company, as we are required to do because of the industry I am in. We have a BAA executed with them, and their responsibility terminates at the application ...
2
votes
2answers
170 views

Mount ecryptfs directory via SSH

I have access to a server that I use for backups. I use rsync with the --delete flag to make an exact copy of my backup directory. I have no need for incremental backups. The backup directory on the ...
12
votes
1answer
2k views

How to study the packets sent by a keylogger

One of my friends runescape account got hacked through key-logger. He downloaded a runescape gold generator from a file sharing site and tried to use it. I have a strong doubt that it is a key-logger. ...
5
votes
5answers
235 views

How to avoid to lose data encrypted because it was encrypted by no longer supported software?

How can I avoid losing data that is encrypted using methods that may become obsolete? I have valuable family records I wish to secure, so I plan to encrypt them before putting them in long-term ...
0
votes
1answer
45 views

How are various softwares' files/information kept safe from me, the user [closed]

I started making a simple user authentication program just for fun, and I realised I don't know how to keep safe the files that will store all the usernames and passwords. This got me thinking. What ...
11
votes
0answers
936 views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
-1
votes
2answers
98 views

Is it a secure encoder and hasher?

I want to ask if my code secure or not. if this is not secure please tell me the reason. This code is mixed of Rjindael-256, base64_encode and SHA-512. function xencoder($input,$key) { $salt = ...
1
vote
1answer
43 views

Search Engine security for searches associated with the same searcher [closed]

A number of years ago AOL leaked potentially identifiable information, because all of the searches leaked were associated with the same 'user', and as such they could be put together to identify the ...
7
votes
10answers
4k views

How can I share files with other individuals using the cloud in a secure way?

I would like to use a dropbox because it is easy and convenient. But I want to encrypt the files with the public key of the intended recipient, so he will be the only one who can access the data in ...
1
vote
2answers
140 views

How can an attacker identify the encryption method with only ciphertext?

Assume that attacker only could obtain ciphertext, but knows that method is symmetric. Is there a way to find which algorithm was used for the encrytion? And in general, if attacker knows the ...
4
votes
2answers
240 views

Why does the first call to DecryptUpdate in AES-CBC return 16 fewer bytes?

While decrypting a file by CBC mode of AES algorithm, the output length is 16 bytes lesser than that of the input length. For example if you pass a buffer of 512 bytes it decrypts 496 bytes. It ...
2
votes
0answers
109 views

Proper credit card encryption for use in a blacklist

I have a general encryption question. I have read through many of the encryption related questions here and I can't find any specifically addressing my concern. This is the hypothetical scenario: I ...
4
votes
2answers
53 views

Secure encrypted storage of values that allows DB lookups?

I'm developing a system that has to store Finnish national identification numbers as securely as possible while allowing "does this identification number exist in the system?"-type queries over a web ...
1
vote
1answer
60 views

Encoding Same Message with Different IV (AES/CBC)

Let's say I encrypt a message using AES/CBC twice, with the same key but two different IVs. Is this safe? Or can the resulting ciphertexts be used against each other to obtain information about the ...
6
votes
2answers
791 views

BitLocker Password Change

My team at work was recently working on encrypting some hard drives using Microsoft's BitLocker on Windows 7 hosts. The initial encryption for the 2TB drives took several hours to complete. This is ...
-1
votes
2answers
129 views

when integrity is implemented using encryption arises any problem?

when confidentiality is implemented using encryption arises a problem: "how the receiver knows the message is really sent by the sent as it is claims?". when authentication is implemented using ...
20
votes
2answers
30k views

Secure Configuration of Ciphers/MACs/Kex available in SSH

Following on the heels of the previously posted question here, Taxonomy of Ciphers/MACs/Kex available in SSH?, I need some help to obtain the following design goals: Disable any 96-bit HMAC ...
5
votes
1answer
218 views

Showing bank routing/account numbers, and storing them safely

EDIT: This is for the UK/Europe region. I've been scratching my head reading other posts similar to this one about safely storing bank routing and account numbers. I know that routing numbers can be ...
1
vote
1answer
94 views

Android email encryption [closed]

Is there a reliable (in terms of security), open-source application for handling (send/receive + en-/decrypt) encrypted emails on Android? Something like TextSecure for emails. I just found a command ...
0
votes
3answers
115 views

Please critique my encryption scheme for a very small microcontroller [closed]

I am new here and not an cryptography expert; but I have been using encryption library for a while. My company is working on a small hardware device. It is powered by a microcontroller so memory is an ...