Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

4
votes
2answers
106 views

Managing the public keys and certifications of S/MIME protocol

I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the ...
0
votes
0answers
9 views

RSA Encryption parameter not work

I try to encrypt with RSA algorithm with the parameter p=2353 q=3167 e=13 d=1145605 and the encryption field even on small number. the parameter hold all the condition. why it field, what wrong with ...
4
votes
2answers
177 views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
0
votes
1answer
42 views

Using ChaCha20 without Poly1305

Doing some lecture to choose a good configuration for my SSL certificate for my website (using a regular LAMP configuration), I'm wondering what are the possibles and secure alternative to poly1305 ...
0
votes
0answers
13 views

PGP key transision: Strong RSA subkey under weak DSA masterkey?

I have a DSA/ElGamal 1024/2048 PGP key and want to migrate to a stronger set. I see two options but I'm unsure which is smarter. a) Keep DSA 1024 Masterkey, generate 4096 RSA subkey b) Ditch the ...
1
vote
1answer
59 views

Sensitive files in the Cloud: Automated mounted TrueCrypt volume

My current setup currently I'm using Boxcryptor Classic 1.x (still compatible to EncFS) to mirror some files with SyncBack Pro into the virtual Boxcryptor-Harddisk. Those get then encrypted by BC ...
0
votes
0answers
75 views

Encrypted cloud backup - NDA [on hold]

I have signed an NDA which forbids sharing certain data with a third-party. On my personal computer I use a software which locally encrypts data and stores it in the cloud. This backup software is ...
-1
votes
1answer
68 views

Best option for DDoS protection on DigitalOcean server?

I would not like to use CloudFlare since they effectively act as a man in the middle and handle unencrypted data. Is there a CDN that mitigates the security risks that CloudFlare imposes? If not, is ...
2
votes
3answers
777 views

Where to store a key for system wide encryption/decryption?

I have a web application where (among other things) customers can upload files and administrators can then download those files. The uploaded files are stored on ServerA and the web application used ...
0
votes
1answer
14 views

Mode of operation are availables with Camellia

What cipher mode of operation are available using Camellia in a SSL certificate context ? I'm mostly interested if XEX (Xor-Encrypt-Xor) or related mode (LRW, XTS...) can be used because they seem ...
3
votes
1answer
64 views

Which host key algorithm is best to use for SSH?

When you first connect to an SSH server that is not contained inside your known_hosts file your SSH client displays the fingerprint of the public key that the server gave. I found from this question ...
0
votes
1answer
340 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
19
votes
4answers
15k views

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite. Here is an image of the default cryptography settings ...
0
votes
1answer
48 views

PCI CVV requirement - encrypt prior to authorisation?

Technically, according to PCI SSC you can hold onto CVV and other sensitive authentication data until authorisation has occurred. In other words the restriction on storing sensitive authentication ...
0
votes
1answer
25 views

SecureData even for admins with external login

Given: A WebService which stores user Data and a server with a database. A Administrator which can acces the sever wit hthe webservice and the server with the database. Foreach user is a ...
2
votes
2answers
65 views

Way to combine encrypted tar and encrypted symmetric key with which tar was encrypted?

We are using Beaglebone Black (AM335x) based custom board, so for firmware upgrades of the board we will be using an encrypted firmware image. As you would have already guessed, we will be using ...
-1
votes
0answers
79 views

How secure is Wire?

I have stumbled upon this replacement for Skype, which claims to take privacy seriously. They recently open-sourced their client-side code. Is Wire secure? What data can be intersected and read by a ...
0
votes
2answers
111 views

Encryption - RSA vs. AES

I have a question regarding encryption and whether to use symmetric or asymmetric encryption. The idea is to implement a form of data encryption in a variety of software. This data will be exchanged ...
5
votes
1answer
184 views

Bidirectional encrypted server to server communication using TLS

I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I've been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would ...
25
votes
7answers
7k views

How to securely send private keys

What is the recommend way and best-practice to send private keys and SSL private keys? I was thinking of zipping up the files, then using gpg: gpg -c thefile.zip The problem then becomes how do you ...
18
votes
9answers
4k views

Is it possible to construct a passively self-destructing message?

Is it possible to construct a message that passively degrades over time without requiring an external factor to destroy it? Things that are similar, but not what I mean: A hard drive that degrades ...
1
vote
1answer
32 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
0
votes
2answers
102 views

As a user, is using MD5-encrypted passwords on websites a good practice? [duplicate]

Disclaimer: This is from a user standpoint. We'll thus assume the target website (say, Paypal or Netflix) already uses a strong hashing algorithm with salts (bcrypt of pbkdf2, for example) and accepts ...
2
votes
4answers
4k views

Understanding AirCrack output in Backtrack 5

First let me clarify that I was trying to crack WPA2 in my home for educational purposes. I followed some tutorials and the message I received was: key found! [ilovegod] I know that this is not ...
4
votes
3answers
865 views

How to store passwords in a text file in USB securely?

I am planning on creating a text file to store my passwords, so I only need to remember 1 password (at the moment, I have about 20 long/complex passwords in my mind, and am worried that I might forget ...
0
votes
0answers
21 views

Level of security TPM2.0

How secure is it to seal only to PCRs 0 and PCRs 2-7 with fTPM 2.0? My device does not support Intel TXT, so I am unable to extend the chain of trust to implement DRTM, and thus cannot use PCRs 17-22....
0
votes
0answers
10 views

How can I decrypt data stored using the android KeyChain API? [migrated]

I have an android application that stores secrets using the KeyChain API. I have root access, and I know all of the credentials for the device. I should theoretically be able to decrypt the files ...
2
votes
2answers
158 views

number of ciphertext-plaintext pairs needed in double encryption

So I know in single encryption you would simply require at least 1 pair of plaintext-ciphertext, to carry out an exhaustive key search; you continue trying different keys until one is found that ...
4
votes
4answers
569 views

UEFI and security implications for encryption

After my old PC kicked the bucket I now own my first UEFI board and I am already having trust issues. I utilized Truecrypt's system encryption for years now and really got used to it. My new board has ...
15
votes
3answers
2k views

How secure is “Firefox Hello”?

The new "Firefox Hello" feature promises easy and safe video conversation. It is not nescessary to create an account, you simply share a link with your partner to start the conversation. The ...
2
votes
1answer
266 views

access to mounted luks partition by non-root user

Recently I searched substitute for truecrypt and played a bit with cryptsetup. The steps I did: mkfs -t ext4 /dev/sdb1 sudo cryptsetup open --type luks /dev/sdb1 enc_vol sudo mount /dev/mapper/...
3
votes
1answer
37 views

Security of “secure messaging” services

There are multiple vendors that offer so-called "secure messaging" services, designed to allow secure e-mail without the need for technology such as PGP, S/MIME or strict TLS between mail servers. The ...
0
votes
1answer
29 views

Is it possible using a file level encryption in addition to TDE in Microsoft SharePoint?

For Microsoft SharePoint, TDE is a great encryption solution to keep databases encrypted. I've tried to find a possible solution to encrypt the files once more using an other level of encryption on ...
-3
votes
0answers
31 views

How to achieve end-to-end security in a Browser-Server architecture?

Let's assume a typical web application with a back-end and a front-end(e.g. a MVC framework using PHP or Python). As far as I have studied and please correct me if I am wrong, it is not a typical ...
3
votes
1answer
79 views

Recommended Crypto Security Setup (Implemented Algorithms)?

Firstly I'm not a crypto expert, however I know how to use algorithms that other people have defined before in practical usages, that is, as long as they live up to their promises. The thing is that ...
-4
votes
0answers
337 views

Reverse the encryption (part of the Labyrnith ctf challenge) [closed]

So my friend and I were trying to do this ctf challenge here http://labyrenth.com/ and when we were trying to solve the first part of the "Threat" challenges we stumbled upon a challenge we have no ...
1
vote
0answers
51 views

Create reduction functions in rainbow tables

I have been trying to understand rainbow tables lately and one part is giving me trouble to understand here. Let's say I want to generate a table where the chains are 100 000 hash/plaintext long. I ...
13
votes
1answer
1k views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
2
votes
1answer
89 views

How well does FDE protect against disk firmware malware?

In early 2015 news broke that the NSA was installing firmware backdoors in many hard drives. I was wondering, if there was a BIOS and Hard Drive backdoor how well would full disk encryption protect ...
82
votes
9answers
16k views

Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?

I don't have any experience or scientific knowledge in security, I just wanted to ask if this is possible because I am interested in it. What if I encrypt data and every password decrypts it, but ...
10
votes
2answers
2k views

Why is plain dm-crypt only recommended for experts?

I am curious about the following claim from the Cryptsetup FAQ: 2.4 What is the difference between "plain" and LUKS format? First, unless you happen to understand the cryptographic background ...
0
votes
0answers
24 views

Which symmetric encryption method does PGP use for its hybrid-method?

I'm doing some research on PGP for a class-assignment. I've tried to find out which exact implementation PGP uses for its symmetric encryption part. Finding out about RSA as the asymmetric one was ...
7
votes
2answers
176 views

How can I encrypt my print jobs?

I often print confidential documents over a large intranet to various printers based on where I am in the building. However, since the building is so large, it is highly likely there is a malicious ...
0
votes
1answer
71 views

Securing data passed between two sites via a browser

I need to pass some data securely from one web site to another via a browser. A user visits site A and clicks a link there which takes him to site B; this could be just a link which would produce GET ...
2
votes
0answers
19 views

Mixing Off-The-Record and classic SSL

I am developing some pubsub system on top of Node.js and Socket.io. I decided to implement Off-The-Record (OTR) encryption by default for all of data transfers between clients and server(s). Question ...
3
votes
2answers
801 views

Protecting decryption key on server

What is the most suitable way to encrypt and decrypt sensitive data on a public cloud server disk without storing the decryption key on the server in plaintext? REQUIREMENTS In our SaaS web/mobile ...
1
vote
1answer
63 views

Key rotation benefits of a multi-key hierarchy

I think I have a decent grasp of the problems associated with key rotation, and as I'm working through them determining an approach for key management on an application I keep stumbling up against ...
0
votes
1answer
501 views

Corporation Best Practices for Encrypting Locally Stored Email Data

Since the recent Sony hacks took place, the attackers have published troves of data from users' email accounts. Some of this data is very detrimental to the company's image. I suspect that based on an ...
2
votes
2answers
82 views

Is there such a thing as application-specific encryption?

I am looking for a way to encrypt certain files (.jpg, .pdf, standard file extensions) such that they can only be opened by a certain application (assuming this application will have the relevant file ...
5
votes
3answers
2k views

Digital Signature and Verification?

AFAIK , When Alice wants to write a message to Bob -- she uses Bob's public key and encrypt the message - and then Bob - using his private key - use to decrypt it. So public key is used to decrypt ...