Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

1
vote
1answer
8 views

Secure Connection between two devices

I've a Device A which will communicate with multiple devices on a network (BLE and/or NFC). All the devices will be handled a Token upon authentication which somehow needs to be transferred over to ...
0
votes
1answer
38 views

How to send secure messages from a microcontroller circuit?

I have an Arduino with a GSM shield. This enables me to send short arbitrary messages to any server. What do I need to do to enable sending "secure" messages (that cannot be intercepted and have a ...
0
votes
1answer
138 views

Storing encrypted data for offline use

A user downloads a file from a server. I want to store that file locally on the user's machine so they can view offline. For protection, it should be encrypted while not being viewed. My theory is ...
-1
votes
3answers
92 views

If TLS 1.2 is considered unbreakable, why do the NSA and other agencies invest in supercomputers? [on hold]

If a 2048-bit RSA key and a 256-bit AES key are considered to be unbreakable within the foreseeable future by any kind of computer, why do the NSA and other intelligence agencies invest in ...
3
votes
0answers
97 views

Is it possible to break enigma code with a todays laptop [migrated]

I have a 500 characters enigma encoded text. Random rollers were used (not the ones from wikipedia). I know of this flaw. I can guess some words that sould be in the text, but this probably doesn't ...
1
vote
3answers
127 views

Does Wifi encryption create a private tunnel between the adapter and the accesspoint?

When non HTTP/S data is sent over Wifi, can that data be seen by other machines that happen to also be connected to that same access point? Does the privacy of the HTTP data depend on the encryption ...
1
vote
1answer
26 views

Is it possible to convert a gpg key to a different encryption algorithm

Maybe the answer to this question is a simple and unequivocal "No", followed by "How can you possibly think that this is possible?". And if I think about it rationally this seems to be the only ...
0
votes
2answers
86 views

Is all encryption compromised? [on hold]

Assuming that what I read about the Nazi enigma encryption being broken in ww1 and ww2, where the code breakers hid the fact that they had broken the code, allowing the world to feel that the code was ...
4
votes
2answers
331 views

Should IBAN and bank details be considered private data and encrypted?

To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe. As far as I know (see also this question) these details can not be used ...
1
vote
2answers
225 views

Two-factor port-knocking via SMS (TXT)

It seems to me that a useful alternative or supplement to traditional port-knocking, fwknop, etc, for a system requiring only occasional access, would be to: Set up a one-time pad of keys, and a ...
4
votes
2answers
233 views

Linux kernel entropy - does it matter to /dev/urandom and what is a minimum?

This question had been asked several times, but still something's not clearly understood from other answers I have a few servers running with a custom built linux kernel (minimal driver modules etc), ...
-1
votes
0answers
22 views

Where can I get Comparative Surveys with Statistics of Usage of the existing Biometric Template Protection Techniques? [on hold]

I am looking for survey papers or research papers with comparative statistics of usage of the currently existing biometric template protection techniques among biometric systems developers / biometric ...
-2
votes
0answers
49 views

Copyright Issue? [on hold]

Few months ago, I have created a few icons for my app and after copyrighting them, I published them on my website. I clearly stated on my website that it is illegal to use my icons for commercial or ...
4
votes
2answers
391 views

TrueCrypt vs BitLocker

I would like to ask which one of these TrueCrypt or BitLocker is safer to implement and encrypt the data in a small business environment (Windows 7, 8.1 and Windows Server 2012r) I read about ...
0
votes
1answer
466 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
2
votes
1answer
160 views

Is this a sensible way to encrypt user data?

I want to make a site for storing sensitive user data, that retains per-user data encryption in the event that the database is compromised. This is the model I was thinking of, to give the best ...
2
votes
1answer
86 views

Protecting a statistics endpoint

When we download an application - it asks us whether it's ok to submit statistics, error reports to the vendor. Since this data is sent from the application to server endpoint - I am wondering how ...
3
votes
5answers
209 views

A secure way to encrypt a connection between 2 clients securing against both passive and active adversaries

Recently I got interested in encryption and the methods behind them. So for a fun / school project I am building a program in python to encrypt data between two clients (chat and files). I'm just ...
25
votes
9answers
9k views

Do secure phone lines exist?

I could be out of context here about security, but , I would like to know if phone lines or phone calls over VOIP could be made secure . I know that Skype and other VOIP service providers have to ...
3
votes
1answer
2k views

Token authentication and storage / websocket issues

My application is running an API authentication that uses tokens rather than cookies. This leads me to ask a few questions : What is the most secure way to store the token ? By using random ...
2
votes
1answer
155 views

linux hidden OS

I have been reading about hidden volume OS with truecrypt, and now with its successor, VeraCrypt. https://veracrypt.codeplex.com/wikipage?title=VeraCrypt%20Hidden%20Operating%20System But Couldn't ...
2
votes
1answer
69 views

Plain text password emailed back during registration [duplicate]

I would like to ask if the passwords in the database are not encrypted if during registration I am receiving plain text password with username.
2
votes
1answer
36 views

What is the default cipher algorithm for GnuPG?

I know, that one can force GnuPG to use AES256 for encryption with gpg --cipher-algo AES256 or with a special setting in ~/.gnu/gpg.conf. But, what is the default cypher algorithm for GnuPG, if I ...
2
votes
1answer
80 views

Is it necessary to encrypt nonce in cryptographic communication?

Server and client have a pre-shared key K. Assuming that that pre-shared key is safe, so nobody other than server/client can encrypt/decrypt. Client sends a nonce N to server, server then sends back ...
3
votes
0answers
50 views

How does Silverlight protect the AES keys it gets from PlayReady? [on hold]

I'm doing some research about how Silverlight protects AES keys. Here is the scenario: There is a smooth stream live encrypted channel service. When i log in to the service and tune the channel, ...
2
votes
0answers
53 views

How do I allow for anonymous encryption? [on hold]

I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
2
votes
1answer
22 views

How is ECIES available in FIPS Validated libraries?

ECIES is Elliptic Curve Integrated Encryption Scheme. Both Certicom's SecurityBuilder and RSA Data Security BSAFE provide ECIES. Both are FIPS 140 validated, and both clearly list ECIES in their data ...
-3
votes
1answer
26 views

data flow management steps [on hold]

i am having queries on data flow management.what is the sequence flow using to transmits & receives data.? by using below techniques 1.encryption 2.decryption 3.message digest 4.splitting ...
1
vote
2answers
110 views

Encrypting short data with RSA only?

I have a case where I need to create recovery accounts and I want to create them so that nobody knows the password to them until/unless necessary. Hence, I thought that I would do it using RSA - when ...
0
votes
1answer
81 views

What are the best practices to store payment processor dev/API keys?

I am integrating with multiple payment processors which have their set of public/private keys. This would be used in conjuction with per user keys, to bill clients. I was wondering what is the best ...
0
votes
2answers
54 views

Determine Security Of A PDF File [closed]

How do I find the exact encryption on a PDF file? I can't seem to get a direct answer on the net. For example how do I tell if a document is PDF 1.1 - 1.3 (Acrobat 2 - 4), PDF 1.4 - 1.6 (Acrobat 5 - ...
7
votes
2answers
311 views

An analysis of storing hints for passwords?

What are the security implications of asking users to provide password hints? What are best practices for storing user hints? What research has been done on using user-supplied password hints to ...
1
vote
1answer
132 views

What are the risks of encrypting a database with a single symmetric key

An application is required to store sensitive data* on each user. Additional columns are added to the database which store cyphertext encrypted on the application server. The algorithm of choice is ...
2
votes
1answer
317 views

Requiring 2 keys to access a content

I need to use an external service that can only be accessed by password. I don't like the idea of storing the plaintext password on the server, but AFAIK there's not much I can do. Considering this ...
1
vote
0answers
31 views

Total, initial, hard drive encryption speed with VeraCrypt [migrated]

Context: I decided to encrypt a 2TB Internal Sata II hard drive I use for personal files (photo collections, tax prep PDFs, hosting a synced Dropbox folder, some non-HD video files, driver install ...
52
votes
7answers
14k views

How hard is it to intercept SMS (two-factor authentication)?

A lot of two-factor authentication mechanisms use SMS to deliver single-use passphrase to the user. So how secure is it? Is it hard to intercept the SMS message containing the passphrase? Do mobile ...
1
vote
3answers
141 views

Is this approach to backups secure?

I've got an existing (personal) backup service which I'm rewriting from the ground up to be secure. At present, I just store files (and diffs) in AWS S3 with no encryption. It works fine but I'd like ...
0
votes
1answer
84 views

Is it dangerous to use the same key (RSA) for both encryption (PGP) and authentication (SSH)?

Alice wants to send an encrypted message to Bob, but she also wants to connect to Carol's server. Are there any dangers associated with using the same RSA key for both PGP and SSH (other than a lack ...
0
votes
0answers
23 views

How does the Blowfish algorithm key initialization work [migrated]

I'm having some trouble understanding the Blowfish encryption algorithm. From the Wikipedia article... "The secret key is then, byte by byte, cycling the key if necessary, XORed with all the ...
7
votes
9answers
19k views

Is Windows BitLocker secure?

Naturally I feel that I have to ask this question, since it's a built-in feature in Windows. Let's say someone has physical access to my PC, is there an easy way for them to access a BitLocker ...
4
votes
3answers
205 views

Is AES 256 secure enough for putting Backups to AWS or Dropbox?

How long would it take with current hardware to hack an Disk Image which was encrypted with AES 256? I ask because i want to backup personal files (contracts, tax-things, code, keys, private ...
-4
votes
2answers
224 views

Problem with Encryption Protocol

I have a question about a encryption protocol, if it is good or not. Bob and Alice communicate over an insecure channel( a possible attacker can listen). An expert suggests the following protocol to ...
1
vote
1answer
37 views

Reading encrypted data before sent to remote server

I'm developing a mobile app (Android only for now) to provide a disposable e-mail service to users. Users will be given temporary e-mail addresses so they can receive and read e-mails for a certain ...
1
vote
1answer
20 views

What is the “segment size” when using Cipher FeedBack (CFB) chaining mode?

When using CFB chaining mode with AES, I see instructions that the "plaintext length (in bytes) must be a multiple of segment_size/8" (also mentioned here). What does that mean?
7
votes
2answers
1k views

When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?

When you take ownership of a TPM in Windows 7 you encounter a screen like this: Based on this document, it is my understanding that completing this dialog box somehow results in the generation of ...
1
vote
2answers
251 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, and I want to make sure that each phone's service isn't abused. To that end I need ...
2
votes
1answer
18 views

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

I want to use DNSCurve (for privacy) to a trusted DNSSec resolver (for integrity), and want to ensure that I can tell a recursive resolver (like 8.8.8.8, or OpenDNS) that I only want DNSSec queries. ...
1
vote
3answers
340 views

How to intercept and analyze mobile SSL application traffic?

What is the best way to analyze requests sent by a mobile application over SSL? The communication protocol is not necessarily HTTP/S so intercepting them with BURP/ZAP/Fiddler or any other HTTP proxy ...
0
votes
2answers
76 views

What options exist for authenticated full-disk encryption?

Title says it all really. I'm toying with the idea of storing some disk images in "the cloud", but am concerned about the possibility of an attacker manipulating cipertext to do evil things once it's ...
0
votes
1answer
49 views

Using randomly generated numbers to authenticate with a Relay server

I'm developing a public VoIP relay server, that will help bypass internet firewalls by allowing two clients to connect with it and then it will relay data between the two. Both clients will connect ...