Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

learn more… | top users | synonyms

6
votes
0answers
582 views

MPPE-Send and Receive key derivation from MS-CHAPv2

I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
4
votes
0answers
56 views

Linux, TRESOR and XTS

I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU's registers. It uses the kernel's crypto API for ...
2
votes
0answers
86 views

How does firefox sync password recovery work?

According to Mozilla Sync-new-security-model, Firefox servers are not able to decrypt your sync data without your password. So I figured that, the browser generates a key from your password, encrypts ...
2
votes
0answers
178 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
2
votes
0answers
60 views

What flexibility does a “Third party gamma” offer to U-Prove deployment?

The U-Prove SDK has the following comment: (link) // 1: CA-RA split (a party trusted by the issuer provides the gamma value) Given that the Gamma value (if provided) overrides the Attributes value, ...
2
votes
0answers
104 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
1
vote
0answers
25 views

Password Encoding/Encryption on ODC connection Strings

I'm interested to understand how passwords provided in ODC (Office Data Connection) connection strings are encoded or encrypted. The format of the connection string is ...
1
vote
0answers
37 views

FIPS Compliance with iOS app

Our company is working on getting FIPS validation for the iOS app and is in the initial phase. We have decided to use a private FIPS-certified libraries for using in the crypto modules. I have some ...
1
vote
0answers
93 views

Understanding Java Security Providers

I'm hoping to use the below issue we came across recently to better understand Java's security providers, ciphers and encryption in general. We got the following error during an SSL Handshake (using ...
1
vote
0answers
38 views

should I encrypt a certificate used only for automation?

I have a PEM file used only for automatic builds and tests on amazon. My project is open source and I am keeping all information on github. If the information is sensitive, I encrypt it and still ...
1
vote
0answers
63 views

Encryption algorithm keySize restriction in JSSE 7

I have an application which uses SSL (JSSE Implementation). Currently from my client side, the "Client Hello" message suggests a list of cipher suites that consists of both 128 & 256 bits key ...
1
vote
0answers
90 views

Database row level encryption scheme

I am wanting to secure some highly sensitive data in a database. This would mean that the data needs to be encrypted and remain secure for 100 years if it were to fall into adversary hands. I also ...
1
vote
0answers
135 views

Encrypt in C# program, Decrypt in android application By RSA Keys

I used RSA Encryption for sending message between Server and client. The server program implemented by C# and the Client is an android application. I want to know is it possible a message that ...
1
vote
0answers
60 views

Is it possible to encrypt Word Docs with something other than default?

AES 128-bit advanced encryption is fairly simple to break and was wondering if there was any way to use a more secure one? And if so - any suggestions?
1
vote
0answers
64 views

Secure self-concealing symmetric encryption (non-verifiable decryption)?

From what I observed using standard encryption tools such as OpenSSH and GPG, the decryption only succeeds when the correct password/key is provided (or at most a few others, in case of collision). ...
1
vote
0answers
109 views

Does cross platform (authenticated) volume encryption exist?

Note: this is not the same as What is a self-contained cross-platform encryption for USB drive?. I believe my question is on topic because I'm not asking for a recommendation. I'm asking if such a ...
1
vote
0answers
39 views

Storing Tenants Cloud Keys In a Database

Imagine you are building a public service where you need to store the customer's cloud credentials(like their aws secret and access keys) in your database to regularly use by your backend services in ...
1
vote
0answers
134 views

Storing private messages in a database

I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
1
vote
0answers
95 views

P2P sharing of uniquely encrypted files

I need a way to share large, uniquely encrypted files (AES256) that are actually the same file when decrypted, through P2P, to optimize download speeds. For instance, a centralized server would ...
1
vote
0answers
47 views

Is it possible to produce incorrect Metadata?

There is an app on xposed installer called XPrivacy for android that let's you decide what information you want your device to give a specific app and for information you don't want to give it ...
1
vote
0answers
264 views

Designing a security and encryption strategy for MongoHQ

I'm trying to design the best strategy to achieve the following goals: Securing data-on-the-wire between my server and MongoHQ. Encrypting all data-at-rest with MongoHQ (possibly key values as ...
1
vote
0answers
33 views

Message and Key Security

I'm reading Post-Quantum Cryptography, and in the page 106 in the beginning of the Section 3 it says: In this section we consider the message security (opposed to key security) of code-based ...
1
vote
0answers
144 views

Is my approach to anonymous certificate based HTTP(s) authentication and secure private messaging sound?

I'm trying to work out a somewhat anonymous secure messaging system, and was hoping someone could validate my overall approach. Keep in mind, this all takes place over HTTPS. Authentication While ...
1
vote
0answers
192 views

Bouncy Castle C# API and NTRUEncrypt

I want to play around with NTRUEncrypt and I found this tweet that NTRUE is now part of bouncy castle. But I cannot find any proof of the existence in the source code of teh Bouncy Castle C# API, ...
1
vote
0answers
84 views

Putty Event Log

Can anyone explain me the Step by step process of Key Exchange that takes place while accessing Linux machine using Putty ? I found the Event Log of Putty but the Various Key Exchange didn't make very ...
1
vote
0answers
88 views

How do time-limited keys work for e.g. DCP files?

According to http://en.wikipedia.org/wiki/Digital_cinema under How Digital Cinema Works it states that the decryption keys are time-limited and expire after the end of the booked time. From a high ...
1
vote
0answers
113 views

Is this good management of the Encryption Key

The site is to be hosted on a shared internet server, to store non-commercial data and it will be clearly labelled as not for sensitive information. I wish to offer a credible solution to the risks ...
1
vote
0answers
256 views

Implementing OAuth flow in JavaScript

I am making a custom auth flow for the application. It is inspired by OAuth 2.0. Dev sends user to an auth page on my domain, passing callback_url and api_id. I redirect user to callback_url, passing ...
1
vote
0answers
164 views

Routing Protocol Encryption

As far as I know 'newer' versions of routing protocols support authentication between routers. What about encryption and integrity checks? Some implementations like this one from Cisco use MD5, which ...
1
vote
0answers
109 views

Techniques for web-user communication across an untrusted server

I'm designing a web-based notification framework (i.e. a user can subscribe to updates from a service or another user) where communication between users is encrypted. User-to-user communication on ...
1
vote
0answers
268 views

Configure Asterisk for lan with SRTP enabled SipDroid

I want to have a secured call over internet between two android phones. I have found SipDroid which is an open source SIP client for Android. And also I have followed this to install Asterisk, Dahdi ...
1
vote
0answers
513 views

Decrypt “key” that is encrypted with LMK or TMK

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I ...
0
votes
0answers
5 views

Emulating Client by sending encrypted hexdump to dB server and getting response back

So I used wireshark to retrieve a hexdump that has been encrypted with RSA. I need to figure out what the response to that would be when it comes back from the server. How I imagine it would work ...
0
votes
0answers
18 views

How encryption/decryption of RSA private key by passphrase works?

I would like to know how exactly the encryption of private key by passphrase works. I am a software developer with no background in cryptography and I know only some basics. When I open the private ...
0
votes
0answers
31 views

How to securely store SSN details in a database while maintaining searches?

My question is very similar to this one, but in my situation I do not need to recover the real value. My concern with just hashing the value is that since there's a finite and (relatively) small ...
0
votes
0answers
35 views

Suggestion of encrypt method for short fixed size result

I'm searching for a encrypt method that receives an int variable and outputs exactly 11 hexadecimal digits. I'm starting on a existing application, that already has a database of more than 130.000 ...
0
votes
0answers
46 views

Older Cell / Smart phones were susceptible to bluesnarfing / bluetooth attacks, Why specifically are smartphones secure from this attack now?

Older cell / smart phones were susceptible to bluesnarfing / Bluetooth attacks, Nokia phones in particular. But now in days, modern smart phone and cell phones that use Bluetooth technology for ...
0
votes
0answers
19 views

Security in MPI implementations

I came across a research paper andproject discussing about the implementation of encryption/decryption in the channel layer of MPICH2 called the ES-MPICH2 library ...
0
votes
0answers
19 views

Infer encoding mechanism from n-grams distance

I have a series of obfuscated strings which across the set of strings have regions of high variance and regions of low variance (implying some encoding mechanism as opposed to an encryption procedure ...
0
votes
0answers
30 views

Protect file with digital signature that can be verified using public key

Sorry if the answer is obvious, I am really new to this stuff. I need protect a file from changing using public-key cryptography. The file should look like this: Filecontent ...
0
votes
0answers
28 views

L2tp protocol security

do l2tp protocol is secure enough to use in unsafe home network ? protection from man in the middle ? i having a problems install openvpn in linux you think following that guide will offer me ...
0
votes
0answers
34 views

Possible CPA or CCA attack when using AES-CBC mode under the following situation?

Both client and server know a shared key in advance. Both sides us EVP_BytesToKey() derive a pair of same key and same IV. Then, client and server start transferring data encrypted by AES-CBC mode ...
0
votes
0answers
53 views

Payment Application Integration - Encryption or HMAC

Doing an integration with an online payment provider. Payment provider will be making a web request to my server to provide some information about the basket content. On my end there's no payment ...
0
votes
0answers
92 views

What else do I need to secure my data in an encrypted non-system drive?

I have to use an almost seven years old laptop running Windows 7 ultimate and want to encrypt my hard disk to protect my private data (e.g. documents, pictures, Dropbox, etc.). I encrypted a ...
0
votes
0answers
41 views

Composing and Inverting Symmetric Encryption Keys

First Question: Using a symmetric encryption algorithm E on a message M, users usually send E(M) to the recipient and then the recipient will compute E^-1(E(M))=M to retrieve the message. If M is ...
0
votes
0answers
37 views

Sector of small data encryption and transmission

I'm not sure my question is right for this site but still, since its information security so here it goes, I really want to know is there any sector of data encryption that allows or deals with very ...
0
votes
0answers
39 views

Converting PGP2.x UIDs on a GPG key

I have a couple of keys which were created many years ago, before GPG came out. (But let's pretend there's only one key involved.) The key has a mix of GPG and PGP-2.x-style UIDs. I've made one of ...
0
votes
0answers
71 views

Key differences between IPSec and HAIPE?

HAIPE is derived off IPSec but can someone draw up the differences between using IPSec with Suite B crypto and HAIPE with Suite B? We can drop Suite A or classified info for this question; staying ...
0
votes
0answers
63 views

Where to save digital content and prevent sharing?

I've been inspired by the answer to the question here: Location to store an encryption key It gave me a lot to think about. My friend and I are building a website and we've encountered a problem in ...
0
votes
0answers
32 views

More known about high success rates of decrypting phone taps?

The Wiretap Report 2013, http://www.uscourts.gov/Statistics/WiretapReports/wiretap-report-2013.aspx#sa5 states that the number of state wiretaps in which encryption was encountered went up from 15 ...