Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

-2
votes
0answers
33 views

Crypted Virus | Extension spoofing [on hold]

We all know what a virus is. We all know what an anti-virus is. Most of us know what a crypted virus is. I am referring to the encryption of a virus which is used solely for bypassing anti-virus ...
1
vote
2answers
175 views

Understanding Java Security Providers

I'm hoping to use the below issue we came across recently to better understand Java's security providers, ciphers and encryption in general. We got the following error during an SSL Handshake (using ...
2
votes
2answers
100 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
0
votes
0answers
20 views

What speed should I expect to get from an rc4 file encryption program [on hold]

I've made an encryption program for my a-level computing project, it uses the rc4 stream cipher to encrypt files, what sort of speed should I expect from the program I have written in c#? I currently ...
0
votes
1answer
177 views

How to secure my REST API once user authenticates with Google on mobile client?

In my application, I build REST APIs so that user can interact with my application server. Since I do not want to maintain User/Passwords, my iOS app authenticates client using Google. This all ...
-3
votes
0answers
48 views

How can I demonstrate data encryption? [on hold]

If we are doing data encryption with the newest stream cipher algorithm and using HMAC mechanism on that cipher output, how can we show a demo of this?
7
votes
4answers
1k views

Is it possible for a third party to sniff data off the line to an ISP and determine what the user is doing?

Can somebody hack the line between my router and service provider and monitor what I'm doing online and what sites I'm visiting?
1
vote
1answer
97 views

Ensuring security of web based games and contests

I have previously analysed an online contest and found that it was trivial to reverse engineer the handshake process since it was all done in javascript. As a result, it was possible to code an ...
12
votes
3answers
4k views

Does Android encryption really prevent law enforcement access?

Google recently announced that in Android L encryption would be turned on by default: For over three years Android has offered encryption, and keys are not stored off of the device, so they ...
1
vote
1answer
22 views

Can a PKCS12 file be distributed over insecure channel?

Is the PKCS12 only as secure as the password protecting private keys ? Can I distribute the p12 file over an insecure channel ?
-1
votes
1answer
97 views

Gmail disclosing your account name to recipients? [on hold]

My Gmail setting has forever been set to send emails with just my Gmail address as the identifier, so it should not send out my account name (first or last name)... or so I thought! Recently I got a ...
0
votes
1answer
18 views

How does LSARPC protocol work?

I'm trying to understand how does the LSARPC protocol work internally. In particular, I would like to know how secured is it. I couldn't find anything in the internet or in different books.
0
votes
0answers
13 views

JCE Unlimited Strength Jurisdiction Policy Files 8 [on hold]

What I know is that, this jar file is needed regarding some issue with the encryption key while encryption or decryption. Can some one tell what are the countries where we can't use this jar file? ...
0
votes
1answer
44 views

Using AES in CTR for TCP/IP based network connections - need to encrypt the IVs?

For AES based encryption on TCP/IP connections, I am guessing I have to do the following: Have the 2 parties share a common key, assuming I am doing AES-128 then a sequence of 16 bytes. Ideally the ...
6
votes
2answers
1k views

How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?

So imagine the next situation: Alice wants to initiate OTR instant messaging session with Bob but Joe is Man In The Middle. Alice negotiates a shared secret 'X' with Joe (thinking he is Bob) using ...
3
votes
2answers
1k views

How To Recover EFS Cert From Backup?

I made a backup of the old Win 7 Pro then did a clean install. But I forgot to export my EFS encryption certificate, so when after I restored the encrypted files from backup I could no longer access ...
0
votes
0answers
60 views

Will current encryption always remain secure? [on hold]

Current encryption algorithms, such as AES, RSA, elliptic curve, etc. work based on known mathematical problems. I am specifically interested in the RSA. Will such security always remain secure? One ...
-1
votes
1answer
25 views

DNS leaks using tor with instant messanger [on hold]

What does it mean for me? When i use Jabber with tor will my ISP see to which jabber server i am connecting ? In that case only DNS crypt would help or VPN, right? I got the impression using DNS ...
0
votes
1answer
153 views

Securing user postal address in a database?

I've been assigned a web project that deals with shipping goods between two parties. I am unsure what a secure database scheme (if any) would be for storing the recipient's postal address and whether ...
3
votes
1answer
93 views

Session Management for Private Key Passphrases in a Web Application

Use Case I would like to encrypt data in a database for a Web Application. The following requirements exist: Decryption should only be possible when a user provides a passphrase Encryption should ...
2
votes
1answer
179 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
0
votes
0answers
23 views

Synchronizing secret codes on two different devices? [duplicate]

I was reading an article about how keyless entry systems for automobiles prevent people from recoding the signal and replaying it to open someone's car. In the article they describe the process as ...
0
votes
1answer
527 views

What is the point to the IPEK in DUKPT?

I'm trying to understand the DUKPT (Derived Unique Key Per Transaction) system used for PIN devices, but I'm getting hung up on the IPEK. This blog post has an image where the sequence is: BDK ...
1
vote
1answer
50 views

Encrypting files securely using user supplied password

I'm currently trying to build a (sort of) secure, desktop based RTF text editor written for node-webkit using node.js. Based on some answers that I read here, such as How can I securely convert a ...
1
vote
1answer
102 views

Encrypted quiz data in PHP and JS

I'm developing a quiz with which you can win a few cool prizes. Therefore I'm afraid, that someone might try to hack/manipulate it. All participants have to be logged in and the website takes 15 ...
-2
votes
0answers
30 views

Assignment on two factor key authentication in cloud system [on hold]

I am doing a assignment on two factor key authentication in cloud system. but I could not find any white papers related to this. Its grateful if you can provide some notes or sources related to this ...
1
vote
2answers
73 views

Storing lots of passwords that different levels of employees need access to

I am wondering what other people do for storing passwords. Our current model at my employer is fundamentally flawed in my opinion, so I am trying to see what other people do so I can select the best ...
2
votes
2answers
96 views

High level design for secure web application

I'm looking for some advise on designing a secure web app for storing passwords. Why reinvent the wheel? Because I don't trust a 3rd party with all of my passwords. Here are my thoughts: There are ...
2
votes
1answer
36 views

poodle attack/padding oracle attack

According to wikipedia or https://www.us-cert.gov/ncas/alerts/TA14-290A this is an issue with the SSL v3.0 non deterministic padding used in CBC. Is AES in CBC mode itself is un-secure or it is an ...
0
votes
1answer
70 views

Two-factor encryption model [closed]

Please some on help me to understand this "Are you ready for this? With the two-factor encryption model your data is protected two-fold. First, a unique key is generated, encrypted, and turned into ...
0
votes
2answers
73 views

Why do I have to use multiple Keys for each direction and purpose?

I'm currently writing an examen about 'Lessons Learned in the IT-Security'. I already found some thing, which shouldn't be done. But right now I'm in trouble finding the reasons why not to do so. ...
0
votes
1answer
45 views

PGP Key publishing on MIT PGP Public Key Server [duplicate]

I have a public pgp key, so that users can send me an encrypted message. Ofcourse, any user that wants to send me a message, wants to verify that the public key (s)he has, really belongs to me. From ...
0
votes
0answers
26 views

Android FIPS capable project [closed]

I want to create an Android FIPS Capable app (140-2 level 1). In the app I use network communications (Android SDK, HttpClient), encryption (bouncy-castle) and GCM (GooglePlayServices). How can I do ...
2
votes
3answers
1k views

Store password locally. Where? How to pass it securely?

I'm developing an application. The user must enter his credentials which will be sent to the server. If the user opens the application a second time he shouldn't need to enter them again - credentials ...
0
votes
0answers
31 views

I forgot my ZIP file password. How do I bypass the encryption? Which software would work? [duplicate]

Should I use brute-force attacks? Do they even work? What options do I have? I only remember short fragments of the password and it's definitely more than 7 characters long.
2
votes
1answer
56 views

SIP Provider stores credentials, is it required for some SIP phones?

My SIP provider stores my SIP call time password as AES encrypted in stead of hashed. I understand that SIP authentication has the capability to NOT store the password, and in stead store a ...
0
votes
1answer
83 views

Storing encrypted data for offline use

A user downloads a file from a server. I want to store that file locally on the user's machine so they can view offline. For protection, it should be encrypted while not being viewed. My theory is ...
0
votes
3answers
87 views

Does Wifi encryption create a private tunnel between the adapter and the accesspoint?

When non HTTP/S data is sent over Wifi, can that data be seen by other machines that happen to also be connected to that same access point? Does the privacy of the HTTP data depend on the encryption ...
6
votes
4answers
202 views

How to communicate securely

What is the proper way for two parties, say A and B, to communicate securely where: Communication between A and B must be secure so that only they know the content of the communication. A isn't ...
0
votes
1answer
68 views

Is it safe to store encrypted volumes on cloud syncing services?

A recent discussion on another website prompted a proclamation that storing (TrueCrypt, LUKS, DMG, etc) on cloud sync services like Dropbox is unsafe, since a version history is kept of each file, and ...
0
votes
3answers
217 views

How to trace the owner of a computer by mac address

I was given the mac address of a computer that was on my wifi . It was not my computer. There were 2 computers, mine plugged to the modem and a 2nd computer with different mac address than mine. So I ...
0
votes
1answer
283 views

Are temporary files an issue when opening and editing an encrypted 7z file?

I am new to security and encryption. I want to store important information like passwords and pin codes so I don't forget them. So far I have been using LastPass but I would prefer a solution I ...
0
votes
1answer
36 views

Looking for a way to encrypt/decrypt data using a generated key that works in Windows and Linux

I am looking for a way to encrypt/decrypt data on windows and linux platforms. The data gets encrypted in windows and the same data needs to be decrypted on linux/windows and vice versa. I understand ...
2
votes
1answer
269 views

Making a bitcoin-like secure mail protocol, how to tackle public keys?

I'm making a new mail protocol (probably already exists, but I've learnt a lot of things about security and privacy on the way). Here's the summary(much simpler if you know bitcoin's inner workings): ...
23
votes
4answers
3k views

How do I verify that WhatsApp is using end-to-end encryption?

Slightly old news: Whatsapp Just Switched on End-to-End Encryption for Hundreds of Millions of Users Is there any test that I can perform to verify that WhatsApp is indeed using end-to-end encryption ...
3
votes
1answer
121 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
2
votes
1answer
44 views

Protecting a statistics endpoint

When we download an application - it asks us whether it's ok to submit statistics, error reports to the vendor. Since this data is sent from the application to server endpoint - I am wondering how ...
-1
votes
1answer
50 views

Is it really worth to spend time on Telegram Crypto Contest? [closed]

Telegram is running this crypto contents. But what I heard from some people on the web is that they designed the contest in such a way that they made it practically impossible to crack. Is it really ...
1
vote
1answer
65 views

Is it safe to combine AES with TLS?

Given that two clients want to sync data through a server, is it safe to use AES to encrypt the data and TLS to communicate with the server? Assumptions: Server has never access to unencrypted data ...
0
votes
2answers
162 views

Is an >=2048bit key with Asymmetric encryption secure enough to negotiate a Symmetric encryption key?

Let's say that a client app already knows the public key of the server to which it needs to communicate with and the client app needs to connect to the server using a normal non-secured internet ...