Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
2answers
397 views

Bitwise cipher Cryptography

I'm doing an online cryptography course. There is a question in which it is given that the encrypted text for; OwBPAAQXAE9UC0FVBQxODgZSCUUMAQwCCApYRBJZBR0LDhoAGApPHQAUAQNZRAJPGwQbDQBDDREKQA== Is ...
-4
votes
0answers
47 views

How long does it take to brute force a 7 character long password taken from 16 character set

A database file is encrypted with 256bits AES and the key is the first 7 characters (from the character set 0-9, a - f, all small letter) of MD5 hash . This implies 2^28 bits (268,435,456) possible ...
4
votes
0answers
56 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
5
votes
1answer
94 views

Why does Mozilla Firefox encrypt saved passwords?

If you ask Mozilla Firefox to remember the login details for a website, the credentials will be stored in your profile directory in Logins.json. Instead of storing plaintext values, the username and ...
0
votes
1answer
34 views

Veracrypt options to protect against multiple versions of an encrypted volume

I'm planning to use rsnapshot to backup a veracrypt volume as it changes. This means I will have multiple versions of the same volume, with slight differences in data. It is my understanding that ...
3
votes
1answer
58 views

OpenSSL's EVP functions, more specifically EVP_SealInit

Reference: https://wiki.openssl.org/index.php/Manual:EVP_SealInit%283%29 I want to securely share a symmetrical key between two endpoints using OpenSSL's EVP interface. Transferring the encrypted ...
67
votes
6answers
119k views

Why most people use 256 bit encryption instead of 128 bit?

Isn't 128 bit security enough for most practical applications?
4
votes
2answers
101 views

Managing the public keys and certifications of S/MIME protocol

I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the ...
1
vote
1answer
18 views

Modsecurity Encrypted traffic in 3 tier architecture

The scenario is that we have 3 tier architecture DMZ > BEA > DB with end to end encryption the data is encrypted within DMZ > BEA > DB. I have read that modsecurity doest deal with encrypted traffic ...
0
votes
1answer
74 views

Encrypt password with salt

Can anyone explain why formula 1 is safer than formula 2?I don't get it even I get the answer. According to 2, it says as s is in plaintext form, the attacker can decrypt the password by (y.s). ...
4
votes
5answers
530 views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
0
votes
0answers
10 views

Insecure data in-transit

My organization processes some PII data and shares it with an outbound connection (outflow only) that is a third party. The data transfer transactions occur without human intervention. That outbound ...
4
votes
2answers
285 views

How Does Telegram's Identity Verification Work?

Note: please refrain from commenting on Telegram's design of OTHER parts, as it will distract from the stem of the question. Background: Signal (Previously, "TextSecure" app) uses specific "Your ...
1
vote
1answer
21 views

Sensitive files in the Cloud: Automated mounted TrueCrypt volume

My current setup currently I'm using Boxcryptor Classic 1.x (still compatible to EncFS) to mirror some files with SyncBack Pro into the virtual Boxcryptor-Harddisk. Those get then encrypted by BC ...
6
votes
2answers
252 views

Is there an equivalent of an Apple cryptochip in Android devices?

Apple has a cryptochip which, beside managing the encryption keys, tunnels authentication and provides throttling of failed attempts, as well as the ability to trigger a device wipe after several ...
12
votes
5answers
658 views

What steps should one take to provide “reasonable” levels of privacy from a government?

I'm highly uncomfortable with the recent news surrounding government snooping in the UK. If we define a typical user to mean somebody who: Browses web sites such as BBC News and Stack Overflow Uses ...
0
votes
0answers
39 views

Best way to store SQLite password offline? [duplicate]

I'm developing a Windows application that uses SQLite, and I want to encrypt it (there is some sensitive information). The trouble is that one of the application requirements is that it must work ...
1
vote
2answers
66 views

Storing two copies of data, encrypted in different ways

Our website has some personal data that needs to be visible to both the user it belongs to and the administrators. It also needs to be encrypted. As we want to maintain a simple system, just username ...
-5
votes
0answers
55 views
0
votes
1answer
230 views

Filtering Telegram Traffic

I want to filter Telegram Messenger to monitor the network activities (logging) from any platform. I'm wondering if there is any signature I can look into to detect the traffic, maybe a list of server ...
1
vote
0answers
69 views

Decryption with two-way authentication

We have a Customer who wants his sensitive user-data stored with an encryption. These are the basic requirements: Sensitive user-data is stored in a database using encryption A remote-attacker who ...
0
votes
0answers
29 views

Unable to view USB Hard drive contents after lock(read-only access)

My work laptop has PGP Desktop 10.3 and when I connected my USB flashdrive it prompted me to Encrypt or Lock. Given the information on both of these options the only choice I had in order to access ...
0
votes
0answers
20 views

AES256 nopadding vs PKCS7Padding

I was looking over AES Crypt's Java lib which seems like a secure AES encryption software and I noticed that they are using nopadding. Can somebody explain to me what the benefit of using nopadding as ...
1
vote
0answers
41 views

How to find the keyword of the Playfair text knowing/not knowing the plaintext and having decrypted text? [migrated]

I know how the Playfair cipher works. I would like to know how can I find the keyword of the play fair cipher in two cases: 1) knowing the plaintext 2) not knowing the plaintext? Some examples: 1) ...
0
votes
0answers
54 views

Is there a ransomware variant that checks for file's magic numbers to encrypt?

Is there a known ransomware-variant (Cryptolocker, Cryptowall etc.) that before encrypting the files checks for their magic numbers? Lets say that there's a Word file, that had its file extension ...
0
votes
1answer
61 views

Questions regarding AES 256

i have googled and searched quite alot but most things just state the same things but not answering my questions so hopefully you guys can help me out abit Story: i am looking at creating an ...
4
votes
1answer
129 views

Bidirectional encrypted server to server communication using TLS

I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I've been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would ...
16
votes
9answers
6k views

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

Let me be clear first and foremost: I do not think installing a backdoor in security algorithms is a good idea. They undermine the trust in the software and in the company that provides the service. ...
0
votes
1answer
29 views

How authentication tag is calculated in AES-GCM-256

I have a sample code,which encrypt and decrypt a string using AES-GCM-256. I am unable to understand,how authentication tag is being generated on encrypter side and how is that being used on ...
0
votes
0answers
41 views

Usage of gpgtar.exe on windows [migrated]

i want to use gpgtar.exe from command line to pack some files in a archive and then encrypt them using gpg.I am using gpg4win 2.3.1 on windows server 2008 R2 and since this process is automated from a ...
1
vote
1answer
275 views

How to make sure that the public key has not been tampered with during transit?

I understand how public key infrastructure works. There is a private and public key, and someone may use the public key to encrypt data that can only be decrypted with the private key. However ...
0
votes
0answers
16 views

Securing FTP Creds in a Java Open Source API

I've written a basic Java API and source code must be released to a small community for the application to function correctly. The Java API helps developers track data for their running scripts and ...
0
votes
0answers
39 views

Whatsapp and Viber information security

Is it possible for my ISP or government to MITM communication that I have made via one of these 2 services(I live in not so developed country) ? I think I am reasonably safe from attacks at transport ...
0
votes
0answers
29 views

Use MDC to provide origin authentication for public key encryption?

Why can't we use an manipultation detection code (MDC) to provide origin authentication when using public-key encryption?
0
votes
0answers
66 views

How do I securely encrypt and store database encryption keys? [duplicate]

I have a database with encrypted information, and want to encrypt each entry with a different key. Then I want to store the encrypted keys in another database. I know I have to encrypt the keys before ...
-1
votes
0answers
42 views

What is elliptic curve cryptography and how does it work? [closed]

What is elliptic curve cryptography and how does it work? Why is is usefull and how does the computer process it?
14
votes
2answers
16k views

Is it possible to use S/MIME in the web client of Gmail?

I could not find any options in the web interface of Gmail. All I could find was a Firefox plugin to use S/MIME with Gmail, but it seems to be outdated.
1
vote
0answers
48 views

Access encrypted partition from Linux and Windows [migrated]

Just to be clear, I'm a security noob. I have a Linux (openSUSE Leap 42.1) and Windows (10). I made the home partition of the Linux encrypted but now I cannot access it from Windows. The only ...
0
votes
1answer
174 views

How does the Signal Protocol, used by WhatAapp, work?

I want to understand the process of the Signal Protocol. I have google it, but I am unable to find any good article or tutorial. I want to understand the basic definition and functionality of the ...
2
votes
2answers
210 views

How to tell if an email is encrypted, or just corrupted?

Ran a recovery program (Kroll Ontrack) on a Windows 7 PC and recovered many, many emails. Almost all of them open in my Windows 10 mail client (and Thunderbird), except for a handful from this March. ...
0
votes
2answers
125 views

store passwords as one-way-hash, or just use it as an AES key?

I want to store some data so the only one who'll be able to access it is the user itself. Here is my idea: when user registers, his password will be hashed in SHA256 (so it'll fit as an AES key), and ...
2
votes
2answers
145 views

number of ciphertext-plaintext pairs needed in double encryption

So I know in single encryption you would simply require at least 1 pair of plaintext-ciphertext, to carry out an exhaustive key search; you continue trying different keys until one is found that ...
2
votes
1answer
164 views

access to mounted luks partition by non-root user

Recently I searched substitute for truecrypt and played a bit with cryptsetup. The steps I did: mkfs -t ext4 /dev/sdb1 sudo cryptsetup open --type luks /dev/sdb1 enc_vol sudo mount ...
-1
votes
2answers
94 views

Are the websites I visit using Windows Remote Desktop connection secure from my ISP?

Are the websites I visit using Windows Remote Desktop connection secure from my ISP? I am ok if my ISP knows the IP address of the remote desktop I am connecting with but will they also be able to ...
15
votes
4answers
80k views

CryptoWall 3 - how to prevent and how to decrypt?

My father's computer is now infected with CryptoWall 3, according to the link below. http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information#CryptoWall Is there a way to ...
0
votes
2answers
65 views

Asymmetric Encryption for Multiple Recipients?

Let's assume an arbitrary group of people who hold a key pair and who make their public key online accessible. Let X, A, B and C be arbitrary people from that group. Now X wants to encrypt a message ...
-1
votes
2answers
23 views

Security fails in private key and xor

I've implemented a very short program to encrypt a file, and send it on a remote server. First, I build a key based on a pass-phrase and a subset of prime numbers (the length of the key is defined by ...
0
votes
1answer
76 views

Handling user login using asymmetric cryptography

Is it possible to implement a login protocol with asymmetric cryptography instead of the hashed password method? For example, while creating an account, the client generates a private/public key pair ...
0
votes
2answers
52 views

What's the best place to hide long lived encryption keys

I am considering encryption options for a new Sybase project (internal facing only, sitting in our intranet) for a client that has a security policy that requires all sensitive data to use DB ...
0
votes
0answers
24 views

Would encrypting a signed JWT prove viable to secure claims payload?

I am working on a server-client web application, and as an authentication scheme, I am issuing base64 encoded json web tokens. Consider the following token... ...