Questions tagged [algorithm]
Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.
137
questions
0
votes
1answer
56 views
Search for existence of sensitive substring without revealing substring in cleartext
I have a list of very sensitive strings and I want to ensure that these strings do not exist in a set of documents (potentially very large documents).
However, these substrings are so sensitive that ...
0
votes
0answers
4 views
Scrypt KDF cipher - known vulnerabilities and cryptanalysis? [migrated]
There is a scrypt cipher which is used for exmaple by some cryptos like LItecoin for their mining algorithm.
I never heard of scrypt. I know eg SHA256 which is well analyzed and considered as secure ...
0
votes
0answers
15 views
finding url encoding algorithm [duplicate]
I have a URL:
https://dl.macneed.ir/17.azar.98/JoyVidCon30013_macneed.ir.zip?md5=zERex79LZe0SL2GqLkXGkA&expires=1575906351
I want to know how can I generate a trusted URL like it.
md5 = ...
0
votes
2answers
94 views
What is the difference between EDE and EDE3?
I was going through the OpenSSL cipher algorithms list. I found these two:
des-ede-cbc
des-ede3-ofb
What does that exactly mean? What is the difference between EDE and EDE3? What are the key-size ...
1
vote
2answers
101 views
Most secure algorithms for KDF and Public Key Encryption [duplicate]
I'm developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such ...
0
votes
0answers
57 views
Asymmetric encryption for short strings and files
I need to encrypt some strings in a database, and contents of files, with an asymmetric key (probably RSA), but possibly symmetrically at some point. Many of these are a few dozen bytes, so overhead ...
0
votes
3answers
176 views
Can a hashing function be implemented insecurely?
After working on a an imaginary security related project, it was decided that the project is going to use the imaginary hashing function X.
There are various implementations of the hashing function ...
2
votes
1answer
71 views
IPsec installed algorithms
What happens if a laptop and a server don't have a encryption algorithm in common?
Does IPSec abort the connection or does it always have default algorithms?
0
votes
0answers
96 views
Custom password security algorithm? [duplicate]
How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
0
votes
1answer
99 views
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
0
votes
1answer
1k views
Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
My threat model is archiving and backing up important and private files.
Files will be stored in many places ...
4
votes
1answer
202 views
Safe encryption algorithm that works with files bigger than 68GB
In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
2
votes
0answers
121 views
Differential Privacy: understanding sensitivity [closed]
From this link on Differential Privacy, the L-2 sensitivity is defined as follows:
Question:
Here's my understanding of the above equation:
Make a set of D' data sets such that D' is same as D ...
0
votes
0answers
296 views
CVV/CVC code algorithm [duplicate]
I'm looking for a definition of algorithm how to calculate CVV/CVC codes?
I know that there are the following inputs:
PAN Expiration
Date
Service Code
CVK A/B
But I'm not able to find the specific ...
1
vote
2answers
295 views
Encryption and Hash algorithms explanation
I am using Veracrypt and there are encryption and hash algorithms
Can anyone explain simply what do each algorithm does?
Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
1
vote
4answers
650 views
If I have the input and output, can I know the encryption technique?
I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
0
votes
2answers
233 views
What is the standard practice to maintain a password for different websites? [duplicate]
I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123
The problem with this approach is if someone breaches the protections of a particular ...
1
vote
1answer
150 views
Verification After Data Wipe
A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link:
https://www.datanumen.com/blogs/...
2
votes
0answers
82 views
WPA technical doubts (3)
This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome!
Someone told me that in WPA2 ...
4
votes
2answers
544 views
Do all Authenticator Apps use the same algorithm?
I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ?
So, these apps are use the same algorithm which is a ...
0
votes
1answer
983 views
What encryption algorithm outputs 22 characters string? [duplicate]
I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
0answers
99 views
What is a trans-cipher?
While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering").
I ...
3
votes
0answers
82 views
What is the algorithm used by Genie intellicode?
How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security?
A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
-5
votes
2answers
212 views
Is this Python program secure?
Note: I'm new to information security practices so feel free to point out anything I could be doing better.
Situation : I'm currently creating an encryption system for instant messaging and I want to ...
1
vote
1answer
102 views
Is there a standard checksum for verifying multipart key fragments?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
14
votes
4answers
5k views
Implementation of diceware: do I have to simulate dice roll?
I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
0
votes
0answers
78 views
Elgamal encryption algorithm
I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
13
votes
1answer
3k views
Why is asymmetric encryption less efficient than symmetric encryption?
It's common knowledge that asymmetric encryption is in general much more expensive to compute than symmetric encryption, thus common practice is to use asymmetric encryption to establish a symmetric ...
0
votes
2answers
444 views
Is there a difference between encryption keys and encryption certificates?
Learning about cryptography. Experimenting with attacking the algorithm it's self. My question regards vocabulary basically. Are encryption keys and certificates the same thing or are they different?
...
5
votes
3answers
164 views
Promotional code based on numerical value
I have a field userid which has value between 10000 and 999999. I want to create a promotional code which is based on this field.
The promotional code will be used by the users to refer new users.
...
4
votes
1answer
135 views
How to responsibly disclose a vulnerability in a widespread algorithm?
Just to be clear, this is purely hypothetical.
Yesterday I got hit in the head with some bricks and, in the haze of concussions, discovered a perfect preimage attack on SHA2. For any given hash, I ...
0
votes
2answers
110 views
Rearranging hash adds no security?
I'm a rookie when it comes to Information Security so I've been reading a lot of the top questions on this stackexchange for the sake of learning. I came across this question that discusses hashing. ...
1
vote
1answer
76 views
Hide algorithm and variables
I have some variables in my algorithm that I would not want others to see.
Party A would write an algorithm which will use my variables. But party's A algorithm should remain hidden i.e. I should not ...
2
votes
2answers
98 views
Suitability of encryption algorithms for different content types
Are there encryption algorithms that are "more suited for" (i.e. provide greater security when) encrypting certain types of content?
For example, if I have a PDF file that I need to encrypt, is the ...
5
votes
2answers
626 views
Is it more secure encrypting 3 times with GPG?
Let's say we are using 3 different length passphrases and 3 different algos to encrypt sensitive data, e.g:
gpg --symmetric --cipher-algo CAMELLIA256 < input.zip > output1 (random 100 ...
5
votes
1answer
369 views
Drawbacks of ML in cyber security?
I did some research on the topic (as I'm new to it) and it frankly seems too good to be true. A company called Darktrace for instance, makes use of AI algorithms and ML to autonomously detect threats ...
-5
votes
2answers
91 views
What is the most crypto-resistive algorithm to safely send information? [closed]
What algorithm is the best to use for storing, sending passwords, account data, and other information between desktop apps over the network.
Looking for the best crypto-resistive algorithm to use in ...
1
vote
1answer
824 views
How to decrypt a text with substitution cipher? [closed]
I recently got a file which I had encrypted with substitution cipher a long time ago.
I went to crack down the key and almost got it.
But I encrypted it not just with alphabets but also with numbers ...
2
votes
1answer
321 views
Understanding how linux openssl passwords work
I'm trying to understand how Linux hashes their passwords, so to get started lets say I do this openssl passwd -1 -salt xyz test. This will output: $1$xyz$jAlmRpcFe.aiPOIXET9GG/. Now what I do ...
2
votes
1answer
365 views
What is Megan-35 encryption?
There are a lot of websites offering online Megan-35 encryption/decryption. Surprisingly, I haven't been able to spot out any resources detailing the underlying algorithm. Can anyone provide any link ...
-1
votes
1answer
234 views
Is this algorithm safe for encryption? (Cryptography Algorithm is provided)
Jasoos (Cryptography Algorithm)
I am working on encrypting and decrypt web application. I have built an algorithm that uses 24 bits long key to encrypt/decrypt the message.
Review this algorithm and ...
1
vote
1answer
570 views
Understanding Oracle 11g password hashing algorithms
I'm trying to understand the Oracle 11g password hashing algorithm, I found this link explaining how it is done, however, I have some confusion on how they say it's done. According to that link it ...
1
vote
2answers
387 views
What would be a better encryption algorithm then RSA_DES_EDE3_CBC?
First off, please let me explain why I'm asking this at all:
The default implementation of EnvelopedCms is using AlgorithmIdentifier which by itself will use RSA_DES_EDE3_CBC or OID
1.2.840.113549.3....
-1
votes
1answer
357 views
PHP HASH DECODER [closed]
Please I need help, I bought a PHP mailer, hosted it on my server and found out that it copies all messages and maillist to a different email address,
I examined the code and became suspicious about ...
1
vote
2answers
149 views
Is there a standard for determining if a secret key / hash is secure?
What is the basis for a certain algorithm being declared secure/broken?
Is there a standard like below?
*I understand that there are certain unique flaws such as collisions based on which algorithm is ...
1
vote
2answers
53 views
Are there any possible methods for us identifying byte sequences which contains some plaintext? [closed]
I want to implement one algorithm for automatically identifying some plaintext info from byte sequences. For example:
6d 6c 70 00 00 00 01 d0 03 05 00 00 00 00 00 00 mlp..... ........
27 14 00 00 00 ...
33
votes
5answers
8k views
SSH - If Eve has the passphrase and public key, can she derive the private key?
I have used ssh-keygen for creating an RSA 4096-bit SSH private and public key pair. I used a passphrase for the private key.
If an attacker, Eve, knows the passphrase in addition to the public key:
...
2
votes
1answer
66 views
How to go about working with professionals online if you're developing a new encyrption algorithm? [closed]
I am currently a Computer Science student working on my Master's and think I've discovered a new form of encryption (by extreme luck). Though I've heard it said many times that unless one is well ...
1
vote
1answer
986 views
Differences between the OpenVPN SHA1 variations in the digest aglorithms
OpenVPN offers the use of various digest algorithms (see list below).
I've read that the the digests, printed with a leading RSA-, DSA- or ecdsa-with- are simply due to a print function in OpenSSL and ...
3
votes
1answer
8k views
Example Seed and Key Algorithm
I am attempting to design a seed and key algorithm for an Engine Control Unit. This is used to secure resources such as the ability to reprogram the ECU. The idea is that I request a seed from the ...
