Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
33 views

Is there readily available encryption algorithms for current computers, that is safe from quantum computers?

Is there readily available encryption algorithms for current computers, that is safe from quantum computers? I know a bunch of currently popular encryption algorithms that are safe from current ...
4
votes
2answers
92 views

Managing the public keys and certifications of S/MIME protocol

I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the ...
6
votes
3answers
967 views

What are the disadvantages of using public key cryptography when encrypting files?

I am wanting to encrypt a file with my public key, my friend told me that this is not a good idea but did not explain why. Can someone explain please.
0
votes
0answers
7 views

SQLCipher and PRAGMA key on iOS

I'm a bit confused as to how SQLCipher handles the PRAGMA key provided for encrypting the SQLite database For background: I'm looking at options for encrypting application data at rest. From the ...
1
vote
0answers
28 views

Should the RTP feed from a surveillance camera be protected?

I see a lot of camera system and they're either using RSTP over RTP or just RTP. Most of the times they are on straight HTTP for the login, some will be on HTTPS, but unless forced (which I have ...
4
votes
1answer
37 views

Transport Layer Encryption vs. Application Layer Encryption

Can anyone tell me the key differences between Transport layer encryption and Application layer encryption and outline example use cases where each are most appropriate? The research I have done so ...
2
votes
2answers
428 views

What is the problem with multiple encryption and how do you know if you have decrypted a cipher?

I have 2 questions that are somewhat related: When you try and guess the key in a program (in a brute force way), how does the program know if it got it right and it had deciphered the message (I'm ...
0
votes
1answer
27 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
1
vote
0answers
65 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
2
votes
3answers
2k views

Centralized local hosted web based password manager

In our company we have more than 100 employers and everyone use several online applications daily. To access all of this sites they need a password which was now stored very insecurely. so I'm ...
2
votes
1answer
81 views
+50

Authenticate tracking device with TCP server

I am building a tracking device and am looking for a secure authentication method to use when the device wants to establish a connection to the server. The server is a TCP server that we open a ...
3
votes
4answers
1k views

For someone who has a key and ciphertext, is it possible to find out what encryption algorithm was used?

For someone who has a key and ciphertext, is it possible to find out what encryption algorithm was used?
-1
votes
0answers
12 views

How can you figure out which encryption was used just by looking at the data? [duplicate]

I have 1500 lines, which were encrypted (by a random encryption method) and then encoded using base64. Let's say I can easily write code to decode the base64 strings. After that I get the encrypted ...
3
votes
1answer
135 views

How is encryption different for Windows yet they are identical?

I right clicked on C:\Users\USERNAME and did advanced -> enable encryption. On one laptop it turned green. The other it shows an icon on the files with a lock. What is the difference between these? ...
2
votes
2answers
87 views

How does an encryption master key work

Apparently the 'secure' cloud-encryption service BoxCryptor supports master keys for encrypted files. Decrypt every file which is accessible by any member of your organisation. How would a ...
2
votes
2answers
68 views

How to know when an OpenSSH rekey occured, and how to trigger one?

I have a twofold question about OpenSSH rekeying. I use OpenSSH 6.4 on the server side and the connection between client and server is a SSH2 connection. The questions: How do I know when a rekey ...
0
votes
1answer
189 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
3
votes
1answer
69 views

Security of cellular-connected devices

The EFF Secure Messaging Scorecard lists a number of apps that meet all of its security criteria. So assuming that end-to-end encryption is accessible for the majority of people in countries in which ...
-1
votes
1answer
74 views

CRC-96(ZIP) decryption

Is there a way to decrypt CRC-96 encrypted string? I am testing a web application which stores the password in the database in CRC-96 encrypted format.
6
votes
5answers
164 views
+50

Secure application data transmission via SMS channel

There are mobile banking applications that use SMS channel to communicate with their server. Some of them offer both internet and sms channels which the customer gets to choose from. While there's ...
-5
votes
1answer
69 views

What is AES 256 bit encryption? [on hold]

I was looking through some apps to store my passwords in on the App Store when I found one that boasted an "AES 256 bit encryption system". Now that sounds all very good and well, but that doesn't ...
5
votes
3answers
60 views

Asymmetric encryption and signature performed by hand

There are some methods of encryption so easy that you can do them be hand, but is there an easy(ish) method of private & public cryptography and signing that a human can perform it by hand? The ...
5
votes
3answers
73 views

Encrypt Items With Single Key or Use KDF+Salt To Encrypt Each Item?

I'm currently planning the development of a system where extremely sensitive information for individual users would be stored. There are currently two approaches being discussed. In order to make it ...
0
votes
0answers
7 views

Link Layer, E2EE encryption [on hold]

Do you know how I can find out more about link layer and E2EE encryption also with related topics. I hove more network books in my library but I could not find any topics about OSI encryption, in ...
2
votes
1answer
28 views

Is EFS FINRA and SEC Acceptable

I'm trying to search in their manual but there is nothing explicit being mentioned as to what type and how encryption should be done. Can I assume that if I use EFS on the entire USER directory that ...
4
votes
1answer
108 views

Bidirectional encrypted server to server communication using TLS

I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I've been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would ...
0
votes
0answers
40 views

Filelevel encryption - security and stabillity of Encfs 1.8, EXT4 Encryption, and others [on hold]

(I am aware of EcryptFS, which does not (easily) suit my usage case - at least not in the case of the way its employed for home directories on Ubuntu - I want something which root can read once ...
0
votes
1answer
21 views

Hashing and signing partial data in payload

I'm hashing and signing part of a payload prior to HTTP Posting from a mobile device to server side. The payload contains of about 7 data elements and only 3 of them are hashed/signed using a private ...
1
vote
1answer
48 views

Client-side encryption using public-key

My situation: Login password from a POST request is left in browser memory in clear text as long as cache is not cleared (manually/closing browser). Connection is HTTPS. Possible Solution: ...
0
votes
0answers
41 views

How does Signal Protocol, used by `whatsapp` Works?

I want to understand the process of The Signal Algorithm, I have google it, but unable to find any good Article or tutorial. I want to understand the basic definition and functionality of The signal ...
1
vote
1answer
78 views

AES step by step

I can't seem to find an AES tutorial that starts from Unicode to Cipher text. All of the tutorials I found starts with 128 bit block already. Also, where do I start or what topics do I have to start ...
3
votes
2answers
114 views

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack ...
22
votes
3answers
15k views

Encryption and compression of Data

If we want both encryption and compression during transmission then what will be the most preferable order. Encrypt then compress Compress then encrypt
2
votes
2answers
134 views

number of ciphertext-plaintext pairs needed in double encryption

So I know in single encryption you would simply require at least 1 pair of plaintext-ciphertext, to carry out an exhaustive key search; you continue trying different keys until one is found that ...
1
vote
1answer
89 views

access to mounted luks partition by non-root user

Recently I searched substitute for truecrypt and played a bit with cryptsetup. The steps I did: mkfs -t ext4 /dev/sdb1 sudo cryptsetup open --type luks /dev/sdb1 enc_vol sudo mount ...
0
votes
0answers
11 views

USB memory stick automatic encryption [migrated]

Is there any commercially available USB drive (memory stick) that will automatically encrypt any file(s) copied to the drive, without needing to install or execute special software on the connected ...
0
votes
1answer
26 views

AES-CTR with PBKDF2 for IV for file archiving at server. Is this ok?

I have tried to grasp enough of encryption/hashing to be able to implement a secure storage for files, server side. Once I have it down to reasonably safe I'll go over it with an expert. There is no ...
3
votes
1answer
121 views

Does the use of JavaScript make ProtonMail insecure?

I like the look of ProtonMail. However, what has stopped me from signing up is that JavaScript seems to be used at various points in the site, and for someone to read your email they must click on a ...
3
votes
4answers
158 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
1
vote
1answer
51 views

How to test TLS handshake process?

I need to test the handshake process of TLS. I thought to use inter-process communication in Linux. Is it possible or not? If not, what simulator could be used for this purpose? If yes, what do I ...
3
votes
2answers
987 views

How to store an encryption key on shared hosting?

I am designing a simple online patient management system that is running on shared hosting. According to national regulation sensitive data should be encrypted when used online, so I have encrypted ...
0
votes
1answer
69 views

What's Google Inbox request/response obfuscation skill? [closed]

I Inspected Google Inbox network resources via Chrome Developer Tool. I saw some request/response payload and result. This object type is not readable for human. I've never seen this kind of ...
36
votes
2answers
28k views

Where to store a key for encryption?

I am looking for a way to store a key used for password encryption. I am using a MySQL database which would store a user name and a password encrypted with AES_ENCRYPT(str,key_str). Where can I safely ...
1
vote
0answers
46 views

Key Hierarchy and key Encryption

If i have two 56-bit DES keys, and I use these two key to encrypt a 256-bit AES key. Like this: K_AT encrypts K_BT and K_BT encrypts K What is the effective security of key K? Is it 2 X 56 Bits?
12
votes
1answer
1k views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
2
votes
1answer
40 views

How well does FDE protect against disk firmware malware?

In early 2015 news broke that the NSA was installing firmware backdoors in many hard drives. I was wondering, if there was a BIOS and Hard Drive backdoor how well would full disk encryption protect ...
3
votes
1answer
73 views

Creating accounts on sites with no security?

I'm sort of confused about security on some sites. Here on stackexchange.com, for example, seem to have no security normaly, but as you log in or create an account, it uses keyexchange and an ...
1
vote
0answers
29 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
0
votes
1answer
63 views

Is it possible to to encrypt multiple messages with multiple keys and get only one cipher?

I want to have cipher which when people decrypt it with their own key, get different meaningful messages. Is this possible at all?
0
votes
0answers
72 views

Should I blur the cached snapshot of my app?

I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. ...