Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

0
votes
0answers
2 views

All users can write only one can read system

The system I want to implement has the following requirement: All users can insert some sensitive data, but only one, master user, can see it. There is any known, already implemented solution to this ...
-1
votes
3answers
31 views

Is using TrueCrypt in OSX secure?

What would be a more secure way to encrypt files using TrueCrypt 7.1a. The is an airgapped computer (wifi, bluetooth, speakers and mic removed too). The encrypted files will be on an external drive in ...
-1
votes
0answers
23 views

Review of the “Connections Tab” in my browser using secured sites

Can someone help me understand the following information better when looking at a secured site in my browser. For example I'm looking at a site now and it says the following in the connections tab ...
0
votes
1answer
54 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
-4
votes
0answers
31 views

Data protection on DVD's

I would like to encrypt data on a dvd such that one can read but not write the dvd. Ive tried Nero 15 but it requires that I send a public key to the user which I find counter-productive. Any ideas
2
votes
1answer
39 views

Encryption and HMAC with the same password

this is my first question here :P I need to send authenticated ciphered messages by using a single password. Reusing the same (derived) key for the block cipher and the HMAC is not a good practice, I ...
3
votes
1answer
61 views

How to best to secure data over HTTPS

My aim is to have an (iOS) app in which the user would login, then on sucsessful login, gain access to additional information over an encrypted webservice (undecided). From research, I understanding ...
2
votes
1answer
46 views

Is it a good idea to do double AES encryption with 2 different keys, when one is held by the user and one stored on the server?

I'm building a web app. The app needs to keep certain data within the database very secure. Please assume for the moment that I don't have a HSM or Key-Management facility and can't afford to ...
1
vote
0answers
37 views

SSL Asymmetric encryption newbie [duplicate]

I am relatively new to the world of cryptography and was wanting to develop a webpage which allows credit card payments. Thus, I looked into the digicert ssl service, hoping that it could do what I ...
2
votes
2answers
89 views

Does client side encryption really add security?

A lot of password managers seems to promote client-side encryption as a key feature of their service. For example : LastPass, Firefox Sync, PasswordBox, etc... They all say something like Even we ...
0
votes
0answers
15 views

Infer encoding mechanism from n-grams distance

I have a series of obfuscated strings which across the set of strings have regions of high variance and regions of low variance (implying some encoding mechanism as opposed to an encryption procedure ...
2
votes
2answers
71 views

TLS reliance on System Time

I'm interested to know if there is any reliance on system time (as defined by Linux or windows) when initiating a secure handshake. I'm aware that TCP typically uses a random number (RFC 1323) to ...
2
votes
1answer
64 views

How does Putty derive the encryption key in its .ppk format?

I have been doing some reading on the mechanics of managing RSA key pairs, during which I learned that OpenSSL by default derives the encryption key by using MD5 on the passphrase (bad!) without any ...
0
votes
2answers
78 views

Should I use HMAC in this situation

I need to store a big message encrypted on a server. What I am about to do is: Encrypt the message with a AES key; (Authentication) Hash the message with SHA512 and encrypt the hash with RSA priv ...
1
vote
4answers
141 views

Is 3DES outdated for message authentication code computing?

I am working in IT department of a bank, currently we use 3DES to compute MAC of packet, is that safe enough using 3DES? Should we use any other more modern algorithm?
1
vote
0answers
36 views

Encryption algorithm keySize restriction in JSSE 7

I have an application which uses SSL (JSSE Implementation). Currently from my client side, the "Client Hello" message suggests a list of cipher suites that consists of both 128 & 256 bits key ...
2
votes
2answers
500 views

Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?

Is TLS_FALLBACK_SCSV going to be the fix for servers that wish to keep SSLv3 enabled? If not what actions are being taken, if any, that address the vulnerability besides disabling SSLv3?
-1
votes
1answer
44 views

Exchange of encrypted files through a server

I have a thing to do, that basically bases on a server that is honest but curious. Therefore I want the server to have the public key for encryption and it will encrypt files during the process of ...
0
votes
2answers
127 views

Fake phone call

I have a problem, getting call from known numbers and when he lifts it, no one is speaking from other side! Well, the awkward part is, the call is from known numbers only, but if I ask the person ...
-2
votes
2answers
42 views

2 way encryption of a string into numerical string using random number

I have a random number like 0.323978544752212. I want to encrypt a string using this random number into to numerical string i.e. final string is like ...
0
votes
1answer
54 views

Understanding Digital Signature

I have just learned Digital Signature and am trying to ensure that I have got my understanding of Digital Signature on the correct track. Assume Alice wants to send a message (M) to Bob where the ...
1
vote
2answers
47 views

What's the benefit of hybrid cryptosystem vs asymmetric for small data blocks?

It's a common belief hybrid cryptosystems are better than asymmetric only. Is that allways like that? What's the benefit of using symmetric and asymmetric encryption for small data blocks (< 100 ...
3
votes
4answers
110 views

How do I encrypt external drive with Password which is compatible with both Linux and Windows? [on hold]

I wanted to encrypt my external drive with password, which is compatible in both Linux and Windows. Truecrypt is an option. But the development of it is stopped few months back. I came across ...
0
votes
0answers
18 views

Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN [migrated]

I have two ubuntu 12.04 32 Bit PCs between which I want IPSec Tunnel to be setup. I have setup ipsec in both systems and ipsec verify runs fine on both. Since I have no prior experience of openswan, I ...
0
votes
1answer
37 views

Can the aproximated date on which a given Encryption Algorithm will become prone to brute force be predicted?

I have a very elementary understanding about encryption so this question may have false assumptions, Lets take an encryption algorithm that is impractical to break through bruteforce with today's ...
-5
votes
1answer
39 views

Requirment for encryption algorithem to be secure/safe [closed]

When we call encryption algorithem safe/secure? I can list following: is not possible to find key from cipher text is not possible to find plain text from cipher text Resistant to brute-force ...
0
votes
1answer
69 views

How will Gmail be able to detect SPAM and display ads when emails are encrypted end-to-end?

Context Google is making end-to-end encryption easier to use. SPAM How will they be able to perform SPAM detection when the email is transmitted and stored encryptedly? I suppose that if the SPAM ...
4
votes
3answers
245 views

Security Implications of using Base64 Encoding with Encryption

Are there any security implications of converting a byte-array encryption key into a Base64 string before use? I am creating a generic encryption helper for a project, and for the sake of consistency ...
2
votes
3answers
38 views

Encryption while logged in

If I'm using full disk encryption on my home computer, and it's online, are the hard drive contents encrypted when I'm logged in and using the machine (from the perspective of an online attacker - no ...
-1
votes
0answers
38 views

How to determine possible encryption type of a given data [duplicate]

I have a encrypted data which consist of 2 numbers: A random number of form 0.110134486415522 This number is always less than 1 and is generated at start of every session encrypted numerical ...
-1
votes
1answer
40 views

Permutation based file secure

I have a thought. 1. Take a file. 2. Read number of bytes. If its less than 2048, padd it till 2048 3. Read each byte. And create a single file which contains the particular byte. Give a random name ...
1
vote
1answer
46 views

Is it safe to use private key encryption for lots of small blocks of data themselves?

I currently handle small JSONs of sensitive information which are guaranteed to be smaller than 100 bytes. You can encrypt up to ~500 bytes with a 4096 RSA key. Is it safe/secure to store these ...
0
votes
1answer
58 views

How negative are virtual machines (vms) to /dev/urandom?

I looked at the questions here and here. This then piqued my interest as I've recently been involved with looking into FIPS compliance, and in my vm environment /dev/urandom compliance testing ...
-3
votes
0answers
51 views

Trouble identifying a has [closed]

So I have this hash: +VZyZlAHP6HAgoaPBrBz with a known plaintext value being 378734493671000. For the life of me I cant figure out what kind of hash this is. I have 2 others I need to decrypt as well: ...
0
votes
1answer
48 views

Is Lock-a-Folder a secure and reliable way to encrypt information?

What are the properties of Lock-a-folder? does it create plain-text temporary files anywhere? (e.g. ntfs artifacts, etc) does it allow running a program from the folder as if it was a normal folder? ...
1
vote
1answer
48 views

Decrypt signature file based on plaintext

I have 2 text files used by an application. One is a very large "schema" array (approaching 100,000 lines, JSON format). The other is a .txt.sig file generated somehow from the contents of the schema ...
1
vote
1answer
61 views

Hardware Implementation of Encryption Algorithm

In the abstract of the AES-GCM RFC, the following passage is prominently included: [AES-GCM] can be efficiently implemented in hardware for speeds of 10 gigabits per second and above... Is the ...
1
vote
1answer
62 views

Can Cipher Suites defined in TLSv1.2 be negotiated by clients that only support TLSv1.0?

If my server has only the cipher suites enabled which are defined by TLSv1.2 does that force a client to also use TLSv1.2 or else not be able to connect or can the connection fallback to TLSv1.1 or ...
1
vote
2answers
35 views

PKI expired and renewed, do my correspondents have to do anything?

My PKI certificate (Digital ID for email from Symantec, issuer is "VeriSign Client External Certification Authority - G3") expired after 1 year and so I have renewed it. Do the people I correspond ...
3
votes
1answer
86 views

Hardware encrypted external HDDs

I'm planning to buy an external HDD with hardware encryption, namingly the WD My Passport Ultra 2TB. On the WD website the information about the encryption is sadly scarce so I'm asking here. How ...
1
vote
0answers
54 views

Database row level encryption scheme

I am wanting to secure some highly sensitive data in a database. This would mean that the data needs to be encrypted and remain secure for 100 years if it were to fall into adversary hands. I also ...
1
vote
2answers
645 views

Why is VeraCrypt more secure than TrueCrypt?

TrueCrypt retired with a mysterious "Using TrueCrypt is not secure as it may contain unfixed security issues" (source) Yesterday Slashdot reported VeraCrypt as a better replacement (source) since it ...
1
vote
0answers
23 views

Can Diffie-Hellman be scaled up or force-multiplied? [migrated]

I'm not too familiar with the math involved with the exchange of keys, I've read it over several times, but math isn't my strong point. My understanding is that smart people are hard at work to ...
8
votes
4answers
724 views

Why the symmetric key is added to the message?

Yesterday in my class we learnt how to send a message from Alice to Bob with the achieved goals of confidentiality, integrity and authenticity. In order to have a better performance we use a hybrid ...
1
vote
0answers
46 views

Is an anonymity network like Tor viable on top of the GPG web of trust?

The web of trust is a graph where the vertices are GPG users (actually, their keys) and the edges are cross-signatures. If we put issues of owner trust aside and assume that all participants only sign ...
0
votes
0answers
20 views

Protect file with digital signature that can be verified using public key

Sorry if the answer is obvious, I am really new to this stuff. I need protect a file from changing using public-key cryptography. The file should look like this: Filecontent ...
1
vote
1answer
55 views

is this data encryption scheme viable?

My goal is to be able to encrypt the data so that no one would be able to make use of it if it was stolen. User data - the one that will be encrypted - can be any type of data Data encryption key - ...
1
vote
1answer
27 views

Difference between sshv1 and 1.5?

I've been searching for the answer to this but haven't had much luck. What is the difference between SSH version 1 and 1.5? Is 1.5 a release of 1? As in 1.2, 1.3, 1.4, 1.5? Are there any ...
3
votes
0answers
38 views

Linux, TRESOR and XTS

I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU's registers. It uses the kernel's crypto API for ...
1
vote
1answer
40 views

Flawed understanding of SQL Server Transparent Data Encryption (TDE)

We host a database for one of our applications on Microsoft SQL Azure. One of our clients was dissatisfied with the fact that TDE is not supported on SQL Azure (and the database is otherwise not ...