Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
116 views

Sending Group Keys over network

For multicast encryption one user creates group keys on his local (Symetric and asymetric). If we encrypt these with other group user's public keys and send over networks . Is this acceptable? Can ...
1
vote
0answers
77 views

Android Rooting and Evil Maid Attacks

I'm trying to learn more about full disk encryption (in the context of a Linux based server) and what schemes offer true security and which only offer the illusion of security. As I understand it, ...
0
votes
2answers
60 views

Replacing files with infected files on anonymous ftp server

I am creating a new question as i now have another question which was raised from a previous answered question post. What im trying to figure out is would this scenario be possible. I have an ...
75
votes
5answers
13k views

What kinds of encryption are _not_ breakable via Quantum Computers?

There's the recent article NSA seeks to build quantum computer that could crack most types of encryption. Now I'm not surprised by the NSA trying anything1, but what slightly baffles me is the word "...
3
votes
1answer
122 views

Is there readily available encryption algorithms for current computers, that is safe from quantum computers?

Is there readily available encryption algorithms for current computers, that is safe from quantum computers? I know a bunch of currently popular encryption algorithms that are safe from current ...
2
votes
1answer
462 views

Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?

EFS is not an option for me because I'm using Windows 7 Home Premium. I am looking for folder encryption, not drive encryption.
2
votes
1answer
82 views

Is storing passwords encrypted with GnuPGP on an anonymous FTP server safe?

I would like some advice on a method of storing passwords to a database on my anonymous FTP server. Basically I have login details for a few trusted users to a database server stored in a text file ...
1
vote
1answer
82 views

What is the best practice to secure an unattended Raspberry Pi?

I'm working on a project which involves mounting a Raspberry Pi on a self-moving vehicle. I'm looking for the best way to encrypt the Pi (entire file-system, swap, etc.), with the minimum possible ...
7
votes
3answers
1k views

What are the disadvantages of using public key cryptography when encrypting files? [duplicate]

I am wanting to encrypt a file with my public key, my friend told me that this is not a good idea but did not explain why. Can someone explain please.
0
votes
0answers
50 views

SQLCipher and PRAGMA key on iOS

I'm a bit confused as to how SQLCipher handles the PRAGMA key provided for encrypting the SQLite database For background: I'm looking at options for encrypting application data at rest. From the ...
4
votes
1answer
71 views

Transport Layer Encryption vs. Application Layer Encryption

Can anyone tell me the key differences between Transport layer encryption and Application layer encryption and outline example use cases where each are most appropriate? The research I have done so ...
2
votes
2answers
446 views

What is the problem with multiple encryption and how do you know if you have decrypted a cipher?

I have 2 questions that are somewhat related: When you try and guess the key in a program (in a brute force way), how does the program know if it got it right and it had deciphered the message (I'm ...
0
votes
1answer
90 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
1
vote
0answers
77 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
3
votes
1answer
141 views

Authenticate tracking device with TCP server

I am building a tracking device and am looking for a secure authentication method to use when the device wants to establish a connection to the server. The server is a TCP server that we open a ...
3
votes
4answers
2k views

For someone who has a key and ciphertext, is it possible to find out what encryption algorithm was used?

For someone who has a key and ciphertext, is it possible to find out what encryption algorithm was used?
3
votes
1answer
142 views

How is encryption different for Windows yet they are identical?

I right clicked on C:\Users\USERNAME and did advanced -> enable encryption. On one laptop it turned green. The other it shows an icon on the files with a lock. What is the difference between these? ...
2
votes
2answers
147 views

How does an encryption master key work

Apparently the 'secure' cloud-encryption service BoxCryptor supports master keys for encrypted files. Decrypt every file which is accessible by any member of your organisation. How would a '...
2
votes
2answers
119 views

How to know when an OpenSSH rekey occured, and how to trigger one?

I have a twofold question about OpenSSH rekeying. I use OpenSSH 6.4 on the server side and the connection between client and server is a SSH2 connection. The questions: How do I know when a rekey ...
-1
votes
1answer
183 views

CRC-96(ZIP) decryption

Is there a way to decrypt CRC-96 encrypted string? I am testing a web application which stores the password in the database in CRC-96 encrypted format.
7
votes
5answers
218 views

Secure application data transmission via SMS channel

There are mobile banking applications that use SMS channel to communicate with their server. Some of them offer both internet and sms channels which the customer gets to choose from. While there's ...
-5
votes
1answer
85 views

What is AES 256 bit encryption? [closed]

I was looking through some apps to store my passwords in on the App Store when I found one that boasted an "AES 256 bit encryption system". Now that sounds all very good and well, but that doesn't ...
5
votes
3answers
73 views

Asymmetric encryption and signature performed by hand

There are some methods of encryption so easy that you can do them be hand, but is there an easy(ish) method of private & public cryptography and signing that a human can perform it by hand? The ...
5
votes
3answers
130 views

Encrypt Items With Single Key or Use KDF+Salt To Encrypt Each Item?

I'm currently planning the development of a system where extremely sensitive information for individual users would be stored. There are currently two approaches being discussed. In order to make it ...
0
votes
1answer
40 views

Hashing and signing partial data in payload

I'm hashing and signing part of a payload prior to HTTP Posting from a mobile device to server side. The payload contains of about 7 data elements and only 3 of them are hashed/signed using a private ...
1
vote
1answer
87 views

Client-side encryption using public-key

My situation: Login password from a POST request is left in browser memory in clear text as long as cache is not cleared (manually/closing browser). Connection is HTTPS. Possible Solution: ...
1
vote
1answer
114 views

AES step by step

I can't seem to find an AES tutorial that starts from Unicode to Cipher text. All of the tutorials I found starts with 128 bit block already. Also, where do I start or what topics do I have to start ...
3
votes
2answers
212 views

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack them,...
22
votes
3answers
16k views

Encryption and compression of Data

If we want both encryption and compression during transmission then what will be the most preferable order. Encrypt then compress Compress then encrypt
0
votes
1answer
34 views

AES-CTR with PBKDF2 for IV for file archiving at server. Is this ok?

I have tried to grasp enough of encryption/hashing to be able to implement a secure storage for files, server side. Once I have it down to reasonably safe I'll go over it with an expert. There is no ...
3
votes
1answer
183 views

Does the use of JavaScript make ProtonMail insecure?

I like the look of ProtonMail. However, what has stopped me from signing up is that JavaScript seems to be used at various points in the site, and for someone to read your email they must click on a ...
3
votes
4answers
173 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
1
vote
1answer
66 views

How to test TLS handshake process?

I need to test the handshake process of TLS. I thought to use inter-process communication in Linux. Is it possible or not? If not, what simulator could be used for this purpose? If yes, what do I ...
3
votes
2answers
1k views

How to store an encryption key on shared hosting?

I am designing a simple online patient management system that is running on shared hosting. According to national regulation sensitive data should be encrypted when used online, so I have encrypted ...
0
votes
1answer
76 views

What's Google Inbox request/response obfuscation skill? [closed]

I Inspected Google Inbox network resources via Chrome Developer Tool. I saw some request/response payload and result. This object type is not readable for human. I've never seen this kind of ...
39
votes
2answers
32k views

Where to store a key for encryption?

I am looking for a way to store a key used for password encryption. I am using a MySQL database which would store a user name and a password encrypted with AES_ENCRYPT(str,key_str). Where can I safely ...
1
vote
0answers
60 views

Key Hierarchy and key Encryption

If i have two 56-bit DES keys, and I use these two key to encrypt a 256-bit AES key. Like this: K_AT encrypts K_BT and K_BT encrypts K What is the effective security of key K? Is it 2 X 56 Bits?
3
votes
1answer
76 views

Creating accounts on sites with no security?

I'm sort of confused about security on some sites. Here on stackexchange.com, for example, seem to have no security normaly, but as you log in or create an account, it uses keyexchange and an ...
1
vote
0answers
32 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
0
votes
0answers
91 views

Should I blur the cached snapshot of my app?

I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. ...
6
votes
1answer
277 views

Are RSA Key Pairs unique?

I generate RSA key pairs mostly using the following command: ssh-keygen -t rsa -b 4096 -C "someemail@hostname.com" which produces a public-private RSA key pair. If I run this command again and ...
2
votes
1answer
210 views

What kind of encryption or obfuscation is this? [closed]

I found this script on a web page who attempted to change my router's DNS configuration. But I can't understant what kind of encryption or obfuscation is used. Here, a sample of the code on the page:...
1
vote
2answers
78 views

Is it possible to find the salt?

I have this PHP code with me : $auth = md5($username.$password.$salt); I have a dummy value : $username = user $password = password And I also have the resulting MD5 Hash : ...
1
vote
0answers
16 views

Does windows still use it's software based user keys when TPM-based EFS is enabled?

I have an infineon TPM installed, with ownership taken, and EFS enabled with the TPM taking control of EFS for me. I do know that regular EFS uses the windows user cryptography/login password to ...
0
votes
0answers
75 views

For multiple clients it's better symmetric or assymetric encryption?

I'm a newbie in the encryption world so I'm here for asking which is the best solution between Symmetric and Asymmetric encryption. In our use cases, we have multiple clients that must be ...
0
votes
1answer
42 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
-6
votes
6answers
199 views

Relative merits and risks of encryption and OS security [closed]

There are many aspects to computer security and many threats to address: poisoned DNS, worms, trojans, viruses, rootkits, firmware malware, etc. One of the biggest software vulnerabilities is buffer ...
5
votes
1answer
125 views

Wasn't WhatsApp messages already encrypted?

According to this article, which was written in 2014, WhatsApp had partnered with Open Whisper System to make its (text based) messages encrypted. So what's the big change now that Whatsapp's ...
3
votes
2answers
162 views

Is it safe to reveal AES encrypted password?

Please correct me if any of my statement is incorrect. It is probably more good practice to not show any hint of the password. However, AES encrypted passwords by itself cannot be used to decrypt ...
0
votes
1answer
67 views

Difference between Hybrid encryption and Diffie-Hellman key agreement?

Can someone explain me the difference between the Diffie-Hellman key agreement (DH encryption) and Hybrid encryption? As to my knowledge DH key agreement uses public and private keys to generate a ...