Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
12 views

Ensuring security of web based games and contests

I have previously analysed an online contest and found that it was trivial to reverse engineer the handshake process since it was all done in javascript. As a result, it was possible to code an ...
2
votes
3answers
70 views

Can a form submission be encrypted even though address bar shows HTTP?

I was going to apply for a Student ID card through ISIC, but noticed that the form where they ask for payment (such as credit card number) details is not available through HTTPS. The URL to their ...
1
vote
0answers
16 views

SSL certificate expired on laptop what does that mean?

SSL certificate says it is expired on my laptop. What are the implications.
0
votes
1answer
111 views

Securing user postal address in a database?

I've been assigned a web project that deals with shipping goods between two parties. I am unsure what a secure database scheme (if any) would be for storing the recipient's postal address and whether ...
0
votes
2answers
45 views

Lock And Unlock Files Using USB Key

I am looking for a way to make a set of files only able to be read when a USB key is plugged into the system. For example, if I have FILE A on my C drive and I try to open it, it will say something ...
1
vote
1answer
97 views

All users can write only one can read system

The system I want to implement has the following requirement: All users can insert some sensitive data, but only one, master user, can see it. There is any known, already implemented solution to this ...
3
votes
1answer
64 views

Session Management for Private Key Passphrases in a Web Application

Use Case I would like to encrypt data in a database for a Web Application. The following requirements exist: Decryption should only be possible when a user provides a passphrase Encryption should ...
1
vote
0answers
29 views

Understanding Java Security Providers

I'm hoping to use the below issue we came across recently to better understand Java's security providers, ciphers and encryption in general. We got the following error during an SSL Handshake (using ...
2
votes
1answer
151 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
11
votes
10answers
16k views

Techniques for Writing Encryption Algorithms (Exclusively For Personal Use)

I'd like to preface this question by stating that I fully understand the dangers of writing your own encryption algorithms, and I would never, ever, use homemade encryption to secure the data of ...
2
votes
1answer
35 views

Do I need to save the IV generated to the database?

I see plenty of answers for what and how to use IV. But is it important to keep the IV saved for decryption? I would think so, but I haven't seen anyone saying anything about this. If you want a ...
21
votes
4answers
3k views

How would you store a 4 digit pin code securely in the database?

I'm familiar with password hashing, using salts, bcrypt etc. But it doesn't seem like this would work to store a 4 digit pin code since the attacker could try all 10,000 combinations quite quickly. ...
5
votes
4answers
151 views

Are there any disadvantages to encrypting the password hash?

Is encrypting the password hash in database more secure than storing only the hash? Suppose we store encrypted SHA-256 result with AES instead of hash directly. Is this a good protection from a ...
0
votes
3answers
147 views

How strong is a simple XOR encryption with random IV?

I'd like to implement some kind of simple (yet as strong as possible) encryption for my client-server application network traffic. Data to be encrypted can be both textual, and binary. Now I'm ...
0
votes
4answers
86 views

Basic question about why it's useful to have VPN encrypt traffic

There may be a basic flaw in my understanding of how the internet works so sorry if this is a simple question. What type of attack does VPN protect against? For example if a local area network (let's ...
1
vote
0answers
33 views

should I encrypt a certificate used only for automation?

I have a PEM file used only for automatic builds and tests on amazon. My project is open source and I am keeping all information on github. If the information is sensitive, I encrypt it and still ...
0
votes
1answer
276 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
0
votes
1answer
26 views

PCI DSS Compliance for a Level 4 organization

We are a small company and process less than 500 Credit Card transactions each year so we fall under Level 4 category merchants. The company heads wants to make sure that we are PCI compliant at all ...
11
votes
4answers
10k views

Is RedPhone a secure and secret way to communicate?

RedPhone provides end-to-end encryption for your calls, securing your conversations so that nobody can listen in. But really, how is the probability that a voice conversation is wiretapped still? ...
2
votes
6answers
2k views

How are ProtonMail keys distributed?

There is a service called ProtonMail. It encrypts email on the client side, stores encrypted message on their servers, and then the recipient decrypts it, also on the client side and the system ...
2
votes
1answer
26 views

SIP Provider stores credentials, is it required for some SIP phones?

My SIP provider stores my SIP call time password as AES encrypted in stead of hashed. I understand that SIP authentication has the capability to NOT store the password, and in stead store a ...
9
votes
3answers
2k views

Suitable cipher for SMS encryption

I would like to create application for encrypting SMS messages. After long enough discussions I decided to use symmetric encryption, since handling public/private keys issue is too difficult for most ...
0
votes
3answers
68 views

Does Wifi encryption create a private tunnel between the adapter and the accesspoint?

When non HTTP/S data is sent over Wifi, can that data be seen by other machines that happen to also be connected to that same access point? Does the privacy of the HTTP data depend on the encryption ...
1
vote
1answer
66 views

encryption of Google's android apps

Does Google use encryption on it's Android apps like Gmail, drive, Google Play, docs, others in authentication and transit? What the type of encryption is it? Is it secure? I have tried searching ...
1
vote
2answers
85 views

Encrypted retrievable password

I have a password conundrum. I need to store an encrypted password in a DB table but in such a manner that would allow me to retrieve the password as plain text afterwards. Please note that this is a ...
0
votes
1answer
57 views

Can a botnet be used to effectively break encryption keys?

Can a botnet amass and coordinate enough computing power to break encryption keys that are typically considered to be secure (through brute force)? If this is the case, do we need to make our ...
-1
votes
1answer
34 views

Calculating the breakability of a given encryption method

I will soon be doing a very important project for school. The main goal of my project is to find a mathematical way to calculate the breakability of a given encryption method of ciphertext. Is there ...
0
votes
2answers
67 views

Legality of cookie(set by other sites) tracking

I have created a website A which asks username & password, there exists another closed source website B which again asks for login credentials. A user uses both these websites .I want to ...
3
votes
2answers
195 views

how to know which encryption is been used [duplicate]

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format."azOwKPoUYP4=" is ...
12
votes
6answers
11k views

Where does SSL encryption take place?

I checked the data transmission of an HTTPS website (gmail.com) using Firebug. But I can't see any encryption to my submitted data (username and password). Where does SSL encryption take place?
3
votes
4answers
189 views

How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.

I've been battling bureaucracy at my community college for months on this issue; a few months ago, they changed security on the SSID for students; It used to use EAP, allowing students to enter their ...
-1
votes
0answers
32 views

Configuration file with 12-character XML-encoded passwords [on hold]

I have received a configuration file with 3 passwords I'm trying to crack. However, I'm having a hard time determining what hashing/encryption mechanisms are used for the passwords. The cipher ...
0
votes
1answer
159 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
-2
votes
1answer
96 views

Who can help me decrypt [closed]

There is a string: 51141010379856000173550010000111151512908026 which after encryption becomes: l4yAOVWeHlk4tnNu3HlJnxMUppeOWCpIqmRKkUPQHlgNawdYMDK2mnieDazPkJuI ...
1
vote
1answer
71 views

NaCL: Encrypt file to multiple recipients

I am trying to understand the Networking And Cryptography Library (NaCL). Consider i have a file that i want to send to multiple recipients. PGP or S/MIME supports multiple recipients by encrypting ...
0
votes
2answers
129 views

How safe is it to use older/unknown Encryption methods for plaintext?

When mailing or chatting with people, it had crossed my mind, what if, for simple communication, someone would use an older encryption method (i.e., ENIGMA), to encrypt their message? Would because ...
0
votes
0answers
69 views

How to demonstrate disk encryption? [closed]

I'm having security classes and in one of the works I need to create a fictitious Company and demonstrate one security tool/improvement. I have two Windows Virtual Machines. (And Kali, Mint, Fedora ...
2
votes
1answer
225 views

Making a bitcoin-like secure mail protocol, how to tackle public keys?

I'm making a new mail protocol (probably already exists, but I've learnt a lot of things about security and privacy on the way). Here's the summary(much simpler if you know bitcoin's inner workings): ...
7
votes
1answer
255 views

Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?

Got a Surface Pro 3 today (it's awesome BTW!) and noticed in it's EFI that it's got TPM enabled, "Secure Boot" enabled (unsure what such an umbrella/catch all term actually covers) And then in ...
2
votes
5answers
168 views

Can we have https without certificates?

I apologize in advance if I am fundamentally misunderstanding something, but is it possible to have encrypted communication protocols (https, I suppose) without resorting to a certificate system? ...
-2
votes
2answers
87 views

Find DES encryption key having input and encrypted output

Having the source string: S3nh4#1 And the generated encrypted string: csf7259aT07Rw Using this script, it identified the algorithm used to encrypt as DES(Unix) I wonder if it is possible (in ...
-2
votes
1answer
119 views

What kind of encryption is this? [closed]

I'm trying to discover what type of encryption was used to generate this strings: Qo94v0JpPaL59LS6U3xfEB4nVgc= +3ZaEliGZ7DWte+LaviHvOlcg9A= v44x/KnS/JyOVDtbmbkFkJEgkWs= y75nHoG/yXwutlixBX7/jRXsv+o= ...
1
vote
1answer
73 views

Will ios8 encryption fail on forced shutdown?

I understand that IOS 8 data can be encrypted when the phone is locked, and decrypted for use when the phone is unlocked. But let's say the phone was unlocked (and thus the data is decrypted), and ...
0
votes
1answer
51 views

How come PBEWITHSHA256AND128BITAES-CBC-BC violates the 128bit key limit?

In my Java application (which use StandardPBEStringEncryptor by jasypt), when i use the PBEWITHSHA256AND128BITAES-CBC-BC algorithm instead of something weaker such as PBEWithMD5AndDES, i get an ...
2
votes
2answers
1k views

How secure is GnuPG conventional encryption (with defaults)?

How secure is the encryption of files when using GPG this way? gpg -c personal.zip It will not use any keys or other lines. And how good is it compared to TrueCrypt? Note that I will upload ...
6
votes
3answers
2k views

Does Android encryption really prevent law enforcement access?

Google recently announced that in Android L encryption would be turned on by default: For over three years Android has offered encryption, and keys are not stored off of the device, so they ...
1
vote
2answers
171 views

Certificate security in intranet environment?

We have this topology in our company: A new rule says that each document being sent by Outlook should be encrypted. We decided using PGP. We already have a certificate (self-signed). The problem ...
3
votes
7answers
245 views

What are the benefits of encryption for everyday people?

In addition to the fact that encryption systems like PGP are notoriously difficult to use, and that encryption doesn't always jive with cloud-based services like webmail, the fact is that most people ...
4
votes
3answers
2k views

Bittorrent Sync encryption

Sync, a new product from BitTorrent, Inc., has been cited as a viable alternative to other cloud-storage platforms. The Sync FAQ indicates that an encryption scheme is being used, but does not comment ...
1
vote
2answers
72 views

Storing AES password for verification

I was wondering if such practice would be safe: I have a table that stores encrypted notes Every note has a data field and a password field When a password is entered, i want to select all notes, ...