Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

17
votes
6answers
939 views

What needs to happen for email encryption to go mainstream? [on hold]

PGP has been around for almost 20 years, but email encryption is not used by most 'regular people'. At the moment, with Snowden's NSA revelations (which should not be a huge surprise to anyone), the ...
1
vote
1answer
33 views

Why is GPG file encryption so much slower than other AES implementations?

Correct me if I'm wrong: When encrypting a file, GPG creates a one-off AES encryption key and encrypts that key using RSA. This is supposedly to take advantage of AES's superior performance when ...
1
vote
1answer
16 views

Encrypting multiple blocks with an asymmetric scheme

I have a general question how asymmetric schemes are usually implemented. Typically, there is a parameter in an asymmetric scheme which limits the message length. For example the modulus in RSA. I ...
-2
votes
1answer
24 views

How to decrypt javascript code extracted from PDF

I analyzed PDF, and extract javascript code. But javascript code is encrypted. I can't decrypt it. Please advise me. javascript code ...
1
vote
0answers
21 views

Storing private messages in a database

I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
9
votes
4answers
2k views

How do I encrypt the source and destination IP address, along with various parts of an email?

If the subject makes no sense to you, that's fine, it makes no sense to me. I've been tasked with securing emails sent from some devices, and I'm looking for advice on intelligent questions to ask to ...
0
votes
2answers
67 views

How do password suites store and encrypt their metadata and prevent attacks based on that knowledge?

If someone uses a password manager and tries to organize the credentials well, doesn't that make attacks easier? Let's assume an attacker has the encrypted credentials available for offline attacks, ...
1
vote
0answers
12 views

Storing encryption keys on a server using Node.js and MySQL

I am writing a web backend/api for an iOS application using Node.js and MySQL. In my database I have a table for posts. I would like the posts content to be encrypted. Let's say I'm using this AES for ...
1
vote
1answer
66 views

Why is the read write speed of a Protected DVD so slow?

I got a DVD with copy protection enabled on it, but the problem I am facing is that it loads extremely slow. I have seen such happenings with other kinds of protected DVD's as well. Can anyone tell ...
2
votes
1answer
81 views

Encrypt Android app data and send to web service

I want to develop an Android app that may contain sensitive personally identifying information (national ID number, phone number, etc.) among other data that will be stored in an Android phone. Let's ...
1
vote
1answer
53 views

Cracking encrypted SQB databases

I've recovered a .SQB SQL database backup file from a backup server and do not have the password. As I do not have the password available to me, I'm looking to determine what type of encryption is ...
2
votes
1answer
862 views

What is a stub?

Would someone please explain in depth what a stub is? I understand it as a file created by a crypter to keep a program encrypted and undetectable by anti-virus software. It is attached to the ...
1
vote
0answers
31 views

Pattern extraction [on hold]

I got a DB (152.4 million users) (My own fake one).I did not hash the passwords, but encrypted them. So anyone that uses the same password, lets say, "123456", will have the same encryption/cipherkey. ...
3
votes
2answers
545 views

Token authentication and storage / websocket issues

My application is running an API authentication that uses tokens rather than cookies. This leads me to ask a few questions : What is the most secure way to store the token ? By using random ...
5
votes
2answers
263 views

TPM- Symmetric key storage

I understand that the TPM can be used to store an unlimited number of keys. However I am left with a few questions: Presuming the TPM is connected on the LPC what protects the data travelling across ...
3
votes
2answers
113 views

Using public key infrastructure or hashing for personal identification privacy?

I've been reading about identity theft recently, and I'm wondering about some possible solutions using the techniques of asymmetric/symmetric/hashing in encryption. My idea is going to cross those 3 ...
3
votes
0answers
100 views

Decrypt Passwords based on using a user's password

I am creating a database to store our client's information at work (a heritage center specializing in DNA based genealogy). Once the results of a test come back, we have people that use the ...
0
votes
1answer
136 views

How do I determine S/MIME encryption used?

From what I understand it seems that S/MIME uses PKCS #7 which can handle various different types of encryption. How is the choice of encryption method made by the e-mail client and how do I know what ...
2
votes
2answers
35 views

When using PGP/GPG, is it safe to use the same public/private key pair on multiple computers for the same person?

It seems somewhat unsafe to move the private portion of one's key around to multiple machines...but it also seems odd to have multiple identities floating around.
1
vote
3answers
97 views

Decrypting Engima messages

Not really computer related, but I hope someone has the answer. How do people decode messages from an Enigma machine? I understand that if you knew the rotors, rotor positions, and plugboard the ...
3
votes
1answer
49 views

How to minimize security risk when having to work with decrypted (plain text) passwords due to 3rd party API design

I'm developing an application (C#) for Microsoft SharePoint platform that uses SQL Server's (2008 R2) Remote BLOB Storage (RBS) technology. To accomplish certain client-side tasks, I must obtain ...
1
vote
1answer
20 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
0
votes
1answer
87 views

I need two separate hidden volumes in disk encryption. What are my options?

C: for system (Windows) D: for my files Makes much more sense to me than packing everything on the same volume, right? Is there a disk encryption utility capable of doing this? I don't know much ...
0
votes
3answers
209 views

How could i totally secure a connection between two nodes?

I've posted this question on stack overflow a bit earlier and lazy functor redirected me here. Thank you ! I'm building an authentication server in python and was wondering about how i could secure ...
0
votes
1answer
82 views

Would encryption bypass some firewall rules?

Would an encrypted connection be able to bypass a firewall? A firewall is working on layer 1-4 of OSI model, the encryption and decryption is done in presentation layer (layer 7 of the OSI model). Can ...
5
votes
4answers
1k views

Heartbleed: OpenSSL v 0.9.8o and OpenVPN v 2.1.3 Reporting Vulnerable

According to the OpenSSL project the version in use on a server we control is not vulnerable: 0.9.8o. According to OpenVPN v 2.1.3 is also not vulnerable (also in use). These are running on Debian ...
1
vote
4answers
222 views

Advantages of one time pad

I always hear that one time pad'ing something is so great because you won't know if you've successfully decrypted the data. I understand the idea that you can XOR any bits just the same as any other ...
3
votes
3answers
496 views

Encrypting passwords?

I am planning on creating a text file to store my passwords, so I only need to remember 1 password (at the moment, I have about 20 long/complex passwords in my mind, and am worried that I might forget ...
0
votes
2answers
72 views

Secure Way of Encrypting Your Bash Shell Script [duplicate]

How can I encrypt my bash shell script on Linux server The shell script contain credentials of other servers for remote access. The problem is I do not want others with same level of access to view ...
1
vote
0answers
57 views

Ability to decrypt intercepted encrypted SSL traffic when having private key [duplicate]

I was reading some blog posts about the Heartbleed vulnerability (who's not nowadays) and was thinking about the following. Situation A If I would use a regular SSL/TLS connection the handshake will ...
0
votes
1answer
115 views

are there serious weaknesses in this free password management system?

I want to protect my passwords for free and store them on a machine that might get stolen but have the passwords very securely backed-up in the cloud, again for free, and minimize the total lifetime ...
2
votes
0answers
61 views

HIPAA compliant blob storage architecture

There is a task to design a system to store sensitive data securely (should be HIPAA compliant in the future). It's just a draft - this will not be used in production in a foreseeable future. I have a ...
15
votes
5answers
18k views

Asymmetric vs Symmetric Encryption

I am currently taking a principles of information security class. While talking about different encryption methods a large number of my classmates seem to believe that Asymmetric Encryption is better ...
5
votes
2answers
360 views

Encrypt user data when they log in with Facebook, Gmail, etc

I made a login system. The user can login by: using a normal email / password (bcrypted). using a service like facebook, gmail, etc. So far so good. Now I want to store sensitive information (ftp ...
2
votes
2answers
132 views

How to encrypt entire HDD without any password prompts?

Before you dismiss this as silly, let me explain :) The only purpose of this encryption is to make the data inaccessible if the drive breaks down and I want to send it off for warranty replacement. ...
3
votes
4answers
182 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
0
votes
0answers
21 views

What are some of the threat models that affect key mangement? [closed]

I am currently trying to to conduct some research into traditional key management and how we can apply these techniques to use them in the cloud. What are some base threat models I should be trying ...
2
votes
1answer
53 views

Does TRESOR protect against attacks like HeartBleed

I was wondering if the linux TRESOR module (http://en.wikipedia.org/wiki/TRESOR) would protect a webserver against HeartBleed or other similar attacks.
0
votes
2answers
23 views

Why is 3DES not used to store passwords?

I'm sure its obvious, but I was wondering, what is the primary reason 3DES encryption is not used for storing passwords in the database? My understanding is that 3DES is a strong encryption? So I ...
0
votes
2answers
68 views

Doesn't the same string encrypted with the same key generate the same encrypted value?

This is my page and class to encrypt the string entered and saved in database. Each time, the Key__c is the same, as I take it from custom settings. But when I enter abc and save two times, the ...
1
vote
1answer
77 views

Secure sensitive data but still allow admin access

I need to store some sensitive user data in an SQL database and am looking into how to best secure it. From what I've read here, the obvious way to do this would be to encrypt the data using the ...
0
votes
1answer
48 views

is there any 100% secure way for form authentication and sending information from client side to server side over internet pages? [closed]

i think for acquiring 100 % secure data transfer between forms on client side and c# code on server side ? my tools : i use IIS as my server and i wonder how can i reach for latest security that ...
1
vote
1answer
44 views

How does the Perspective addon work?

I've just installed the Perspetive addon in firefox. When I'm vistit, for example google, Perspective says the following message: Warning: Perspectives has NOT seen this certificate consistently. ...
0
votes
0answers
326 views

Decrypt “key” that encrypted with LMK or TMK

Newbie here, new to HSM (Thales payshield 9000), i'm working on DUKPT algorithm, i manage to derive the IPEK(encrypted either under LMK or TMK), but i need to inject a plain text IPEK in to a end ...
0
votes
2answers
61 views

Are SSL encrypted communications through a company network safe?

If I'm using Skype, Facebook, or another type of communication at my work, can the network administrator see my Skype and Facebook conversations, although its encrypted with SSL? I found this text: ...
1
vote
3answers
170 views

Is it safe to back up passwords to the “cloud”

I have a small Truecrypt volume that contains just my password data (using Bruce Schneier's Password Safe application). I'd like an offsite, secure, backup of that Truecrypt volume. Currently, I am ...
6
votes
4answers
199 views

Relationship of password strength and key strength

I have just started educating myself about cryptography, and while it is mostly making sense, a few things are still eluding me. One being: In systems that take a user's pass-word/-phrase in order to ...
12
votes
7answers
2k views

Encrypting files on Google Drive

It's my understanding files kept on Google Drive are not protected. I would like to have them encrypted so that to be able to view or modify them one must enter a password. I foresee a potential ...
21
votes
7answers
2k views

Why Say IP Addresses Are Harmless?

Whenever I see someone on the internet ask the question, "Can someone find out my IP Address from my tweets/my tumblr/facebook posts/whatever else", the response I always see is, "Who cares! An IP ...
2
votes
1answer
56 views

Safety while ciphering data

Say I wanted to encrypt some sensitive information with a symmetric algorithm using a program on a computer. Is it possible that a hacker could retrieve the data,salt, iteration, cipher, keysize while ...