Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

3
votes
1answer
84 views

Security of cellular-connected devices

The EFF Secure Messaging Scorecard lists a number of apps that meet all of its security criteria. So assuming that end-to-end encryption is accessible for the majority of people in countries in which ...
2
votes
1answer
178 views

OpenID Connect: Why use authorization code flow?

I have a question about implementing OpenID Connect I was hoping I could get some help on. I understand the different flows and get that the authorization code flow is good because it allow client ...
2
votes
0answers
9 views

Does Oracle's GuardedString protect sensitive data against heap or memory dumps?

Oracle's org.identityconnectors.common.security.GuardedString states this in its documentation: The GuardedString class alleviates [the problem that string data is kept in memory as clear text] by ...
1
vote
1answer
49 views

Sensitive files in the Cloud: Automated mounted TrueCrypt volume

My current setup currently I'm using Boxcryptor Classic 1.x (still compatible to EncFS) to mirror some files with SyncBack Pro into the virtual Boxcryptor-Harddisk. Those get then encrypted by BC ...
2
votes
5answers
161 views

How secure is a password protected file?

I have a password-protected excel file that stores other personal passwords. Obviously there have been a number of ways to crack the password. community.spiceworks.com Where do you guys store ...
0
votes
2answers
47 views

Asymmetric key encryption that can have a public decryption key, but encryption key cannot be computed from that [duplicate]

Is there a way where I can distribute a public decryption key, but the encryption key cannot be computed from that key, so that anyone who reads one of my encrypted message, he/she can be quite sure ...
-2
votes
1answer
43 views

Decrypting keys at the software application level [on hold]

Does anyone know what the most common method of decrypting data is? I.e., if something is hashed and not decrypted at the firewall, how is it usually decrypted within a system? Is it integrated into ...
-4
votes
0answers
31 views

How do I decrypt this unknown cipher text? [duplicate]

I got this unknow cipher text. Can you solve this? This looks like encoded PHP with base64/str_rot13/gzinflate eval. nI31RZG+Rxb1RZGzRMfsOdNql2K9RsesRLDVOdNqnLWtOdNqRtJtRtm1RZG8OdNrmxb1R/...
4
votes
3answers
538 views

Is sending a password encrypted or as SHA1 any safer than clear text?

It seems to me that if an attacker can intercept my login request (sent with HTTP POST), then he can replay it later, no matter whether I try obfuscate it or not. What am I missing?
3
votes
1answer
25 views

Is using PGP/MIME or PGP Inline more secure?

Using Enigmail for Thunderbird, the setup wizard automatically sets itself to PGP/MIME and also disables HTML formatting. I am looking for security and have no idea which to use, though I do know HTML ...
3
votes
2answers
62 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
0
votes
1answer
277 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
0
votes
4answers
168 views

Encrypting text data by replacing characters?

I have been thinking on this method but did not really get into it because I thought it was stupid to do for some reason, maybe because I've never heard of it and it's pretty obvious. But today I got ...
0
votes
2answers
46 views

How would I brute-force a Bitlocker recovery key?

I have imaged a hard disk and used passware, but to no avail - it says Encryption key External key, and not the actual key. How do you think I would go about brute forcing it? Lets assume I had ...
3
votes
0answers
29 views

Laptop Encryption variables

If you are running such an operating system as Ubuntu among others, you would of seen that it gives you the polite option to encrypt your Home directory OR Whole hard drive with a robust AES 256bit ...
1
vote
0answers
5 views

GEA3 direction clarification

GEA3 (and 4) stands for GPRS Encryption Algorithm. It's specified in 3GPP TS 55.216 (at least used to, until some idiot forced them to hide it because of "export restrictions" or some crap like that). ...
0
votes
0answers
6 views

Where partially homomorphic encryption schemes like BGN are used?

Schemes like Boneh, Goh, and Nissim are interesting, because of support of polynomially many additions and one multiplication. The algorithms are indeed simple https://eprint.iacr.org/2010/182.pdf ...
67
votes
16answers
10k views

Ensure that a file can only be decrypted after a specific date

Are there any cryptographic schemes/protocols that would allow me to encrypt a file, make it publicly available, but ensure that it can only be decrypted after specific date? I assume it would be ...
1
vote
1answer
37 views

Why aren't there FIPS level 4 devices on the market?

While searching for a secure USB to use, I came across the Aegis secure key, which has FIPS Level 3 (140-2) security. I believe that it's the securest flash drive on the market. I found that the ...
4
votes
2answers
198 views

How to decrypt the below encrypted messages? [closed]

My friend was experimenting with the encryption methods (self-made) to encrypt text using ASCII map. He wanted to try this idea whether this encryption can be broken and so shared an encrypted text ...
6
votes
0answers
52 views

Can I use disk encryption and track my device at the same time, in case it's stolen or lost?

I would like to encrypt a single user profile but have been told EFS isn't the solution. I have a laptop that I leave in my bag and use for work and private purposes. I want to secure data in case my ...
4
votes
1answer
156 views

Bidirectional encrypted server to server communication using TLS

I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I've been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would ...
2
votes
0answers
24 views

Recommended Crypto Security Setup (Implemented Algorithms)?

Firstly I'm not a crypto expert, however I know how to use algorithms that other people have defined before in practical usages, that is, as long as they live up to their promises. The thing is that ...
4
votes
2answers
559 views

Keepass Dictionary Attack Protection Strategy

Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong. When ...
5
votes
3answers
911 views

How are private keys stored on disk?

I have a public and secret key pair in my .ssh folder. How is the secret key being stored on disk? What I mean is .. Is it possible for someone to hack into my computer, steal the secret key and use ...
-1
votes
2answers
794 views

How to minimize your fingerprint, or become invisible on the web? [duplicate]

With all of these news stories about the government reading emails and snooping information from other sources, what are ways to minimize or eliminate an organization's ability to actually track and ...
0
votes
1answer
45 views

How authentication tag is calculated in AES-GCM-256

I have a sample code,which encrypt and decrypt a string using AES-GCM-256. I am unable to understand,how authentication tag is being generated on encrypter side and how is that being used on ...
3
votes
1answer
60 views

Question about AES-CBC IVs

I'm writing a Java program that encrypts strings with AES-CBC encryption. (Eventually I'm going to add steganography functions too). As you are well aware, CBC needs an IV in order to encrypt the ...
1
vote
0answers
61 views

How to safely store/process secret key for JWT

After reading this: http://stackoverflow.com/questions/30089604/jwt-whats-a-good-secret-key-and-how-to-store-it-in-an-node-js-express-app, on how to store "secret key" to assign JWT tokens. I had ...
1
vote
2answers
56 views

Key-exchange over the network with more than two peers

Me and my team is developing a multiplayer videogame with a Client/Server-Topology. This secures the match from clients who have the intention to cheat because of server authority but still allows the ...
0
votes
0answers
15 views

How can I create many-to-one keys in Doctrine/Zend/PHP?

I'm using Zend with Doctrine 2 to store data in a database. For a given user, I encrypt the data with a randomly-generated key specific to that user, and encrypt the key with that user's password ...
0
votes
1answer
38 views

PDF encryption anomaly; version 1.5 using AES

I'm not sure if this is the correct forum to ask this question so please accept my apologies in advance if this is the wrong place. (I have already posted this in the Programmers section but I've yet ...
1
vote
0answers
110 views

Ansible Vault - what is it doing?

I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher ...
-1
votes
0answers
31 views

Encrypting the data in C# using Java generated RSA key (public) [closed]

Need urgent help on how to encrypt the data in C# by using JAVA generated RSA public key. PFB the information to be used as reference. Public Key: ...
2
votes
2answers
152 views

number of ciphertext-plaintext pairs needed in double encryption

So I know in single encryption you would simply require at least 1 pair of plaintext-ciphertext, to carry out an exhaustive key search; you continue trying different keys until one is found that ...
2
votes
1answer
202 views

access to mounted luks partition by non-root user

Recently I searched substitute for truecrypt and played a bit with cryptsetup. The steps I did: mkfs -t ext4 /dev/sdb1 sudo cryptsetup open --type luks /dev/sdb1 enc_vol sudo mount /dev/mapper/...
0
votes
1answer
26 views

Is it possible using a file level encryption in addition to TDE in Microsoft SharePoint?

For Microsoft SharePoint, TDE is a great encryption solution to keep databases encrypted. I've tried to find a possible solution to encrypt the files once more using an other level of encryption on ...
-1
votes
0answers
39 views

How do I set up confidentiality on files after download in Microsoft SharePoint

I'm currently working to setup a solution for a SharePoint server. Looking further into the possibilities for confidentiality on files after download I found a dead-end about what is used. My company ...
-5
votes
0answers
35 views

What encryption does CyberRoam use for Registry entries? [closed]

I am unable to guess the type of encryption Windows Registry uses to store CyberRoam password, for example 1466151978000123000091000040000139000203000019 is some encrypted value for 6 digit password.
1
vote
0answers
19 views

What do I need to do in order to use Enigmail on more than one PC? [migrated]

I've already imported my keys from pc1 to pc2, but on pc2 I always get this error message: Error - no matching private/secret key found to decrypt message; click on 'Details' button for more ...
0
votes
3answers
126 views

Random characters and letters form obsfuscation

I know that this question has been asked many times, but would JavaScript encryption work if I just added 100 random numbers and letters to the password? That would be hard to reverse engineer, ...
-6
votes
1answer
86 views

How to detect if a crack is cracked only or cracked and binded with other executable? [closed]

Viruses are often spread using cracks. I want a quick and dirty way to know if the cracks are not binded with other executables The process goes like this. The program is installed using the ...
10
votes
4answers
8k views

Secure way to transfer public/secret key to second computer

I created a public/secret key using Seahorse (GNOME managing tool for encryption keys). I haven't had issues encrypting and decrypting files from the computer the keys are located in but I'd like to ...
12
votes
1answer
1k views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...