Questions tagged [algorithm]
Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.
133
questions
0
votes
0answers
48 views
Asymmetric encryption for short strings and files
I need to encrypt some strings in a database, and contents of files, with an asymmetric key (probably RSA), but possibly symmetrically at some point. Many of these are a few dozen bytes, so overhead ...
-2
votes
0answers
34 views
How can I determine which algorithm a certificate implements for data encryption? [duplicate]
I'm attempting to discover which encryption algorithm(s) are available on a particular Certificate.
Is this possible?
I have examined some certs in CertMgr and I see things like:
Signature ...
0
votes
3answers
171 views
Can a hashing function be implemented insecurely?
After working on a an imaginary security related project, it was decided that the project is going to use the imaginary hashing function X.
There are various implementations of the hashing function ...
2
votes
1answer
56 views
IPsec installed algorithms
What happens if a laptop and a server don't have a encryption algorithm in common?
Does IPSec abort the connection or does it always have default algorithms?
0
votes
0answers
90 views
Custom password security algorithm? [duplicate]
How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
0
votes
1answer
82 views
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
0
votes
1answer
440 views
Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
My threat model is archiving and backing up important and private files.
Files will be stored in many places ...
4
votes
1answer
197 views
Safe encryption algorithm that works with files bigger than 68GB
In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
1
vote
0answers
94 views
Differential Privacy: understanding sensitivity [closed]
From this link on Differential Privacy, the L-2 sensitivity is defined as follows:
Question:
Here's my understanding of the above equation:
Make a set of D' data sets such that D' is same as D ...
0
votes
0answers
168 views
CVV/CVC code algorithm [duplicate]
I'm looking for a definition of algorithm how to calculate CVV/CVC codes?
I know that there are the following inputs:
PAN Expiration
Date
Service Code
CVK A/B
But I'm not able to find the specific ...
1
vote
2answers
254 views
Encryption and Hash algorithms explanation
I am using Veracrypt and there are encryption and hash algorithms
Can anyone explain simply what do each algorithm does?
Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
1
vote
4answers
304 views
If I have the input and output, can I know the encryption technique?
I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
0
votes
2answers
216 views
What is the standard practice to maintain a password for different websites? [duplicate]
I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123
The problem with this approach is if someone breaches the protections of a particular ...
1
vote
1answer
116 views
Verification After Data Wipe
A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link:
https://www.datanumen.com/blogs/...
2
votes
0answers
72 views
WPA technical doubts (3)
This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome!
Someone told me that in WPA2 ...
3
votes
2answers
355 views
Do all Authenticator Apps use the same algorithm?
I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ?
So, these apps are use the same algorithm which is a ...
0
votes
1answer
504 views
What encryption algorithm outputs 22 characters string? [duplicate]
I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
0answers
86 views
What is a trans-cipher?
While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering").
I ...
3
votes
0answers
71 views
What is the algorithm used by Genie intellicode?
How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security?
A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
-5
votes
2answers
201 views
Is this Python program secure?
Note: I'm new to information security practices so feel free to point out anything I could be doing better.
Situation : I'm currently creating an encryption system for instant messaging and I want to ...
1
vote
1answer
71 views
Is there a standard checksum for verifying multipart key fragments?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
14
votes
4answers
5k views
Implementation of diceware: do I have to simulate dice roll?
I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
0
votes
0answers
73 views
Elgamal encryption algorithm
I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
13
votes
1answer
3k views
Why is asymmetric encryption less efficient than symmetric encryption?
It's common knowledge that asymmetric encryption is in general much more expensive to compute than symmetric encryption, thus common practice is to use asymmetric encryption to establish a symmetric ...
0
votes
2answers
238 views
Is there a difference between encryption keys and encryption certificates?
Learning about cryptography. Experimenting with attacking the algorithm it's self. My question regards vocabulary basically. Are encryption keys and certificates the same thing or are they different?
...
5
votes
3answers
161 views
Promotional code based on numerical value
I have a field userid which has value between 10000 and 999999. I want to create a promotional code which is based on this field.
The promotional code will be used by the users to refer new users.
...
4
votes
1answer
124 views
How to responsibly disclose a vulnerability in a widespread algorithm?
Just to be clear, this is purely hypothetical.
Yesterday I got hit in the head with some bricks and, in the haze of concussions, discovered a perfect preimage attack on SHA2. For any given hash, I ...
0
votes
2answers
109 views
Rearranging hash adds no security?
I'm a rookie when it comes to Information Security so I've been reading a lot of the top questions on this stackexchange for the sake of learning. I came across this question that discusses hashing. ...
1
vote
1answer
68 views
Hide algorithm and variables
I have some variables in my algorithm that I would not want others to see.
Party A would write an algorithm which will use my variables. But party's A algorithm should remain hidden i.e. I should not ...
2
votes
2answers
85 views
Suitability of encryption algorithms for different content types
Are there encryption algorithms that are "more suited for" (i.e. provide greater security when) encrypting certain types of content?
For example, if I have a PDF file that I need to encrypt, is the ...
5
votes
2answers
573 views
Is it more secure encrypting 3 times with GPG?
Let's say we are using 3 different length passphrases and 3 different algos to encrypt sensitive data, e.g:
gpg --symmetric --cipher-algo CAMELLIA256 < input.zip > output1 (random 100 ...
5
votes
1answer
351 views
Drawbacks of ML in cyber security?
I did some research on the topic (as I'm new to it) and it frankly seems too good to be true. A company called Darktrace for instance, makes use of AI algorithms and ML to autonomously detect threats ...
-5
votes
2answers
90 views
What is the most crypto-resistive algorithm to safely send information? [closed]
What algorithm is the best to use for storing, sending passwords, account data, and other information between desktop apps over the network.
Looking for the best crypto-resistive algorithm to use in ...
1
vote
1answer
792 views
How to decrypt a text with substitution cipher? [closed]
I recently got a file which I had encrypted with substitution cipher a long time ago.
I went to crack down the key and almost got it.
But I encrypted it not just with alphabets but also with numbers ...
2
votes
1answer
303 views
Understanding how linux openssl passwords work
I'm trying to understand how Linux hashes their passwords, so to get started lets say I do this openssl passwd -1 -salt xyz test. This will output: $1$xyz$jAlmRpcFe.aiPOIXET9GG/. Now what I do ...
2
votes
1answer
292 views
What is Megan-35 encryption?
There are a lot of websites offering online Megan-35 encryption/decryption. Surprisingly, I haven't been able to spot out any resources detailing the underlying algorithm. Can anyone provide any link ...
-1
votes
1answer
194 views
Is this algorithm safe for encryption? (Cryptography Algorithm is provided)
Jasoos (Cryptography Algorithm)
I am working on encrypting and decrypt web application. I have built an algorithm that uses 24 bits long key to encrypt/decrypt the message.
Review this algorithm and ...
1
vote
1answer
532 views
Understanding Oracle 11g password hashing algorithms
I'm trying to understand the Oracle 11g password hashing algorithm, I found this link explaining how it is done, however, I have some confusion on how they say it's done. According to that link it ...
1
vote
2answers
340 views
What would be a better encryption algorithm then RSA_DES_EDE3_CBC?
First off, please let me explain why I'm asking this at all:
The default implementation of EnvelopedCms is using AlgorithmIdentifier which by itself will use RSA_DES_EDE3_CBC or OID
1.2.840.113549.3....
-1
votes
1answer
353 views
PHP HASH DECODER [closed]
Please I need help, I bought a PHP mailer, hosted it on my server and found out that it copies all messages and maillist to a different email address,
I examined the code and became suspicious about ...
1
vote
2answers
138 views
Is there a standard for determining if a secret key / hash is secure?
What is the basis for a certain algorithm being declared secure/broken?
Is there a standard like below?
*I understand that there are certain unique flaws such as collisions based on which algorithm is ...
1
vote
2answers
52 views
Are there any possible methods for us identifying byte sequences which contains some plaintext? [closed]
I want to implement one algorithm for automatically identifying some plaintext info from byte sequences. For example:
6d 6c 70 00 00 00 01 d0 03 05 00 00 00 00 00 00 mlp..... ........
27 14 00 00 00 ...
33
votes
5answers
8k views
SSH - If Eve has the passphrase and public key, can she derive the private key?
I have used ssh-keygen for creating an RSA 4096-bit SSH private and public key pair. I used a passphrase for the private key.
If an attacker, Eve, knows the passphrase in addition to the public key:
...
3
votes
1answer
66 views
How to go about working with professionals online if you're developing a new encyrption algorithm? [closed]
I am currently a Computer Science student working on my Master's and think I've discovered a new form of encryption (by extreme luck). Though I've heard it said many times that unless one is well ...
1
vote
1answer
941 views
Differences between the OpenVPN SHA1 variations in the digest aglorithms
OpenVPN offers the use of various digest algorithms (see list below).
I've read that the the digests, printed with a leading RSA-, DSA- or ecdsa-with- are simply due to a print function in OpenSSL and ...
2
votes
1answer
7k views
Example Seed and Key Algorithm
I am attempting to design a seed and key algorithm for an Engine Control Unit. This is used to secure resources such as the ability to reprogram the ECU. The idea is that I request a seed from the ...
4
votes
1answer
989 views
How to set an extremely weak password hashing algorithm for linux?
As part of a lab exercise I want to have an extremely weak password hash in the /etc/shadow file. How could I go about doing this? MD5 is not quite weak enough, and I'm editing the /etc/pam.d/common-...
5
votes
1answer
131 views
Are there any modern governments which use a proprietary encryption algorithm?
Germany used Enigma during WWII. The Soviet Union used GOST during the cold war. USA used to use DES. Now that encryption algorithms are believed best as open source, are there any modern governments ...
0
votes
1answer
226 views
What security considerations apply to a blockchain implementation for private use?
I want to know that if a company wants to implement a model of blockchain, let's say for internal transactions across its offices in different countries, what are the main and important security ...
0
votes
1answer
399 views
Is there Algorithm determining weakness of PIN-code?
There are several algorithms that can tell us if our password is strong enough analyzing its length, considering if it uses upper and lowercases, special symbols and digits, considering if it is not a ...
