Questions tagged [algorithm]

Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.

Filter by
Sorted by
Tagged with
1 vote
1 answer
89 views

Which algorithm does CryptGenRandom use on my laptop?

I have an Ideapad Gaming laptop by Lenovo, with an Intel(R) Core(TM) i5-10300H processor. On this laptop I have Windows 10 installed. To generate random numbers, I use the CryptGenRandom function. ...
Riemann's user avatar
  • 113
0 votes
1 answer
292 views

Cipher Suites settings wrong order?

I'm trying to setup a custom order of TLS cipher suites according to this Microsoft list, on Windows Server 2022 but the outcome is not the one that I was expecting. After using the powershell to ...
cadobe's user avatar
  • 3
0 votes
3 answers
676 views

How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]

Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings? Over the years, I have basically ...
Marquavion's user avatar
2 votes
3 answers
211 views

Best way to bruteforce a list of hashed integers?

I have a list of hashes, I need to find the original value of any of them. So far I know that the hashes are only numbers of length 30. The format should be something like ...
Spiral's user avatar
  • 23
0 votes
0 answers
398 views

IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits

I'm trying to stop a server using Diffie Hellman key exchanges of less than 2048 bits, but I'm getting confusing results. I've run Get-TlsCipherSuite | Format-Table Name, Exchange, Cipher, Hash, ...
Mick8695's user avatar
  • 101
2 votes
1 answer
299 views

Always leaking ext4 superblock

An encrypted ext4 container will always leak the superblock information. So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks? Shouldn't it then ...
user145453's user avatar
0 votes
1 answer
67 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
Marc Alves's user avatar
4 votes
1 answer
559 views

Asymmetric encryption of very small messages

I am working on an application which has a requirement to send very small messages (<64 bits), asynchronously, and using secure asymmetric encryption. We've experimented with simple RSA + OAEP, and ...
superstator's user avatar
2 votes
1 answer
162 views

Is there a well-defined algorithm to find preimages in MD5?

I know MD5 is no longer secure, but is there an algorithm running in polynomial time to find preimages of a given hash, or is it just bruteforce?
hehehe's user avatar
  • 21
0 votes
1 answer
706 views

Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys

In cryptography, generally we have two ways of handling sensitive information. We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we ...
azoundria's user avatar
  • 753
0 votes
1 answer
94 views

One-way cryptographic algorithm with distinct output and verifiable property

I'm working on a API which is serving content based on user requests. What I'd like to achieve is as follows: Having a constant key stored both on the server and the client machine (as a means of ...
gringomandingo's user avatar
-1 votes
1 answer
136 views

Security technologies that implements security through "organic-like" obscurity? [closed]

Are there any advanced security technologies, for example, establishing a secured connection, which first require authentication based on security through organic-like changing obscurity of secrecy? I'...
S To's user avatar
  • 1
1 vote
0 answers
100 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
leon's user avatar
  • 11
1 vote
0 answers
88 views

How to prevent dos(denial of service) attack? [closed]

Hi is there any solid algorithm or solution where I can refer to for preventing dos (denial of service)attack on my apache server ? I did the dos attack using slowloris in ubuntu and switchblade in ...
wanglen soram's user avatar
7 votes
1 answer
2k views

Is MD5 hashing possible by divide and conquer algorithm

I would like to compute the MD5 hash of a file The file is uploaded to my webserver by my clients The file is uploaded in pieces (called chunks) The client also sends the md5 hash of the file so that ...
Nachiappan Kumarappan's user avatar
-1 votes
1 answer
119 views

Is there any secure method to have recoverable passwords?

I have a local application that normally authenticates against a remote Active Directory server. If the local host loses network connectivity, a special local account becomes available for login. ...
Dave's user avatar
  • 99
0 votes
1 answer
190 views

How should I protect an algorithm that I want to sell?

I created a trading algorithm which I want to sell. People would be able to buy the "bot" at my website and it would run from there on (if this is even safe to do). What is the best way to ...
Allart's user avatar
  • 113
0 votes
1 answer
2k views

Certificate Signed Using Weak Hashing Algorithm impact on a workstation

I did a vulnerability scan on some of our company workstations. These are workstations used by employees (dev, HR, accounting, etc.) to do their job. One of the common result I found is SSL/TLS ...
Finn's user avatar
  • 13
2 votes
2 answers
9k views

Is it possible to brute-force the original message of SHA-256 given the size of original string?

Given the SHA-256 hash, the size and the encoding of the original string, is it possible to recover the string via brute force? How many string of a given size will result in the same hash?
Max's user avatar
  • 185
3 votes
2 answers
5k views

How to interpret security impact of "Server Signature Algorithms" (sslscan)

I'm looking at the results of an sslscan of an internal web application, which reports the following: I'm not sure how to interpret these and couldn't find an elaboration of what exactly this ...
lisa-thehexbit's user avatar
1 vote
0 answers
89 views

Algorithm for quadratic voting in anonymous decentralized systems

The question is about voting in decentralized systems. Quadratic voting is a wonderful way to reach consensus without arranging property qualifications. However, quadratic voting requires a KYC: ...
Jotaro's user avatar
  • 11
0 votes
3 answers
198 views

Is a random number secure (enough) for card numbers and pins?

I've been given the task of generating some gift tokens which comprise a serial number and a pin number, analagous to a pre-paid credit card. The serial and pin will be printed on a card, with the pin ...
Greg B's user avatar
  • 181
1 vote
1 answer
559 views

Thick Client memory encryption

I came across a thick client application recently. The application temporarily stores sensitive data (like username and password) in clear text in memory and the data is flushed once the user logs out ...
Jaka's user avatar
  • 172
0 votes
0 answers
72 views

How could I verify that a contract was actually sent to me from the client as soon as the contract is received?

If I want to store electronic contracts for clients over a long period of time. I need to make sure that those files are not readable by anyone other than the client until the client retrieves them at ...
Brooney's user avatar
  • 63
0 votes
1 answer
449 views

How to implement challenge-response with keyed hash algorithm when 2 people share same key?

Suppose that 2 people have a keyed hash algorithm (that is, a MAC) with a key that they both know. How could they implement challenge-response using their keyed hash algorithm? This confuses me...
Brooney's user avatar
  • 63
2 votes
2 answers
408 views

Is there such a cryptographic algorithm?

Is there such a cryptographic algorithm that will encrypt any file with a password. But when decrypting, if the password is incorrect, the file will be decrypted, but instead of relevant data there ...
optic1's user avatar
  • 31
3 votes
5 answers
304 views

Using a home-brewed hash for passwords for a insignificant website

First off: I do not, nor intend to, use a home brew hash functionality, ever. I'm aware why one shouldn't do that and have read enough topics about it to know it's foolish to do. I understand that I ...
Martijn's user avatar
  • 359
3 votes
2 answers
140 views

Search for existence of sensitive substring without revealing substring in cleartext

I have a list of very sensitive strings and I want to ensure that these strings do not exist in a set of documents (potentially very large documents). However, these substrings are so sensitive that ...
Matt Harrison's user avatar
1 vote
1 answer
3k views

What is the difference between EDE and EDE3?

I was going through the OpenSSL cipher algorithms list. I found these two: des-ede-cbc des-ede3-ofb What does that exactly mean? What is the difference between EDE and EDE3? What are the key-size ...
nmq's user avatar
  • 55
1 vote
2 answers
943 views

Most secure algorithms for KDF and Public Key Encryption [duplicate]

I'm developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such ...
vikarjramun's user avatar
0 votes
3 answers
317 views

Can a hashing function be implemented insecurely?

After working on a an imaginary security related project, it was decided that the project is going to use the imaginary hashing function X. There are various implementations of the hashing function ...
NikxDa's user avatar
  • 783
2 votes
1 answer
230 views

IPsec installed algorithms

What happens if a laptop and a server don't have a encryption algorithm in common? Does IPSec abort the connection or does it always have default algorithms?
Dario Blair's user avatar
0 votes
0 answers
170 views

Custom password security algorithm? [duplicate]

How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
stefan's user avatar
  • 1
0 votes
1 answer
253 views

Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?

Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
Nikhil Bansal's user avatar
1 vote
1 answer
5k views

Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?

TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool? My threat model is archiving and backing up important and private files. Files will be stored in many places ...
asdfasdf's user avatar
4 votes
1 answer
280 views

Safe encryption algorithm that works with files bigger than 68GB

In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
Michal Ruszkowski's user avatar
2 votes
0 answers
211 views

Differential Privacy: understanding sensitivity [closed]

From this link on Differential Privacy, the L-2 sensitivity is defined as follows: Question: Here's my understanding of the above equation: Make a set of D' data sets such that D' is same as D ...
akilat90's user avatar
  • 121
2 votes
2 answers
884 views

Encryption and Hash algorithms explanation

I am using Veracrypt and there are encryption and hash algorithms Can anyone explain simply what do each algorithm does? Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
mtmoblan's user avatar
2 votes
4 answers
6k views

If I have the input and output, can I know the encryption technique?

I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
Null's user avatar
  • 17
0 votes
2 answers
361 views

What is the standard practice to maintain a password for different websites? [duplicate]

I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123 The problem with this approach is if someone breaches the protections of a particular ...
Pawan Patil's user avatar
1 vote
1 answer
442 views

Verification After Data Wipe

A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link: https://www.datanumen.com/blogs/...
netrox's user avatar
  • 131
2 votes
0 answers
140 views

WPA technical doubts (3)

This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome! Someone told me that in WPA2 ...
almb's user avatar
  • 109
6 votes
4 answers
4k views

Do all Authenticator Apps use the same algorithm?

I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ? So, these apps are use the same algorithm which is a ...
mongkonsrisin's user avatar
0 votes
1 answer
5k views

What encryption algorithm outputs 22 characters string? [duplicate]

I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
Alexandre Barfuhok's user avatar
1 vote
1 answer
499 views

What is a trans-cipher?

While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering"). I ...
Huygens's user avatar
  • 268
3 votes
0 answers
198 views

What is the algorithm used by Genie intellicode?

How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security? A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
dgnuff's user avatar
  • 165
-5 votes
2 answers
307 views

Is this Python program secure?

Note: I'm new to information security practices so feel free to point out anything I could be doing better. Situation : I'm currently creating an encryption system for instant messaging and I want to ...
Mathix420's user avatar
  • 107
1 vote
1 answer
305 views

Is there a standard checksum for verifying multipart key fragments?

We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
John Deters's user avatar
  • 34.1k
13 votes
4 answers
6k views

Implementation of diceware: do I have to simulate dice roll?

I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
Maciek Talaska's user avatar
0 votes
0 answers
193 views

Elgamal encryption algorithm

I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
Juliet's user avatar
  • 187