Questions tagged [algorithm]
Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.
159
questions
1
vote
1
answer
89
views
Which algorithm does CryptGenRandom use on my laptop?
I have an Ideapad Gaming laptop by Lenovo, with an Intel(R) Core(TM) i5-10300H processor. On this laptop I have Windows 10 installed. To generate random numbers, I use the CryptGenRandom function. ...
- 113
0
votes
1
answer
292
views
Cipher Suites settings wrong order?
I'm trying to setup a custom order of TLS cipher suites according to this Microsoft list, on Windows Server 2022 but the outcome is not the one that I was expecting.
After using the powershell to ...
- 3
0
votes
3
answers
676
views
How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]
Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings?
Over the years, I have basically ...
2
votes
3
answers
211
views
Best way to bruteforce a list of hashed integers?
I have a list of hashes, I need to find the original value of any of them.
So far I know that the hashes are only numbers of length 30. The format should be something like ...
- 23
0
votes
0
answers
398
views
IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits
I'm trying to stop a server using Diffie Hellman key exchanges of less than 2048 bits, but I'm getting confusing results.
I've run
Get-TlsCipherSuite | Format-Table Name, Exchange, Cipher, Hash, ...
- 101
2
votes
1
answer
299
views
Always leaking ext4 superblock
An encrypted ext4 container will always leak the superblock information.
So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks?
Shouldn't it then ...
- 21
0
votes
1
answer
67
views
Soundex and encryption : good friend?
We are considering using the Soundex algorithm to improve our search capabilities in our app.
Our app data are encrypted in the DB. (EAS256)
The Soundex result will be stored in clear next to our ...
- 59
4
votes
1
answer
559
views
Asymmetric encryption of very small messages
I am working on an application which has a requirement to send very small messages (<64 bits), asynchronously, and using secure asymmetric encryption. We've experimented with simple RSA + OAEP, and ...
- 143
2
votes
1
answer
162
views
Is there a well-defined algorithm to find preimages in MD5?
I know MD5 is no longer secure, but is there an algorithm running in polynomial time to find preimages of a given hash, or is it just bruteforce?
- 21
0
votes
1
answer
706
views
Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys
In cryptography, generally we have two ways of handling sensitive information.
We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we ...
- 753
0
votes
1
answer
94
views
One-way cryptographic algorithm with distinct output and verifiable property
I'm working on a API which is serving content based on user requests. What I'd like to achieve is as follows: Having a constant key stored both on the server and the client machine (as a means of ...
-1
votes
1
answer
136
views
Security technologies that implements security through "organic-like" obscurity? [closed]
Are there any advanced security technologies, for example, establishing a secured connection, which first require authentication based on security through organic-like changing obscurity of secrecy?
I'...
- 1
1
vote
0
answers
100
views
Shuffle Tool / Software [closed]
I use GPG symmetric, to encrypt text file.
Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions:
...
- 11
1
vote
0
answers
88
views
How to prevent dos(denial of service) attack? [closed]
Hi is there any solid algorithm or solution where I can refer to for preventing dos (denial of service)attack on my apache server ? I did the dos attack using slowloris in ubuntu and switchblade in ...
7
votes
1
answer
2k
views
Is MD5 hashing possible by divide and conquer algorithm
I would like to compute the MD5 hash of a file
The file is uploaded to my webserver by my clients
The file is uploaded in pieces (called chunks)
The client also sends the md5 hash of the file so that ...
-1
votes
1
answer
119
views
Is there any secure method to have recoverable passwords?
I have a local application that normally authenticates against a remote Active Directory server. If the local host loses network connectivity, a special local account becomes available for login. ...
- 99
0
votes
1
answer
190
views
How should I protect an algorithm that I want to sell?
I created a trading algorithm which I want to sell. People would be able to buy the "bot" at my website and it would run from there on (if this is even safe to do).
What is the best way to ...
- 113
0
votes
1
answer
2k
views
Certificate Signed Using Weak Hashing Algorithm impact on a workstation
I did a vulnerability scan on some of our company workstations. These are workstations used by employees (dev, HR, accounting, etc.) to do their job.
One of the common result I found is SSL/TLS ...
- 13
2
votes
2
answers
9k
views
Is it possible to brute-force the original message of SHA-256 given the size of original string?
Given the SHA-256 hash, the size and the encoding of the original string, is it possible to recover the string via brute force? How many string of a given size will result in the same hash?
- 185
3
votes
2
answers
5k
views
How to interpret security impact of "Server Signature Algorithms" (sslscan)
I'm looking at the results of an sslscan of an internal web application, which reports the following:
I'm not sure how to interpret these and couldn't find an elaboration of what exactly this ...
1
vote
0
answers
89
views
Algorithm for quadratic voting in anonymous decentralized systems
The question is about voting in decentralized systems. Quadratic voting is a wonderful way to reach consensus without arranging property qualifications. However, quadratic voting requires a KYC: ...
- 11
0
votes
3
answers
198
views
Is a random number secure (enough) for card numbers and pins?
I've been given the task of generating some gift tokens which comprise a serial number and a pin number, analagous to a pre-paid credit card. The serial and pin will be printed on a card, with the pin ...
- 181
1
vote
1
answer
559
views
Thick Client memory encryption
I came across a thick client application recently. The application temporarily stores sensitive data (like username and password) in clear text in memory and the data is flushed once the user logs out ...
- 172
0
votes
0
answers
72
views
How could I verify that a contract was actually sent to me from the client as soon as the contract is received?
If I want to store electronic contracts for clients over a long period of time. I need to make sure that those files are not readable by anyone other than the client until the client retrieves them at ...
- 63
0
votes
1
answer
449
views
How to implement challenge-response with keyed hash algorithm when 2 people share same key?
Suppose that 2 people have a keyed hash algorithm (that is, a MAC) with a key that they both know. How could they implement challenge-response using their keyed hash algorithm? This confuses me...
- 63
2
votes
2
answers
408
views
Is there such a cryptographic algorithm?
Is there such a cryptographic algorithm that will encrypt any file with a password. But when decrypting, if the password is incorrect, the file will be decrypted, but instead of relevant data there ...
- 31
3
votes
5
answers
304
views
Using a home-brewed hash for passwords for a insignificant website
First off: I do not, nor intend to, use a home brew hash functionality, ever. I'm aware why one shouldn't do that and have read enough topics about it to know it's foolish to do.
I understand that I ...
- 359
3
votes
2
answers
140
views
Search for existence of sensitive substring without revealing substring in cleartext
I have a list of very sensitive strings and I want to ensure that these strings do not exist in a set of documents (potentially very large documents).
However, these substrings are so sensitive that ...
- 143
1
vote
1
answer
3k
views
What is the difference between EDE and EDE3?
I was going through the OpenSSL cipher algorithms list. I found these two:
des-ede-cbc
des-ede3-ofb
What does that exactly mean? What is the difference between EDE and EDE3? What are the key-size ...
- 55
1
vote
2
answers
943
views
Most secure algorithms for KDF and Public Key Encryption [duplicate]
I'm developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such ...
- 121
0
votes
3
answers
317
views
Can a hashing function be implemented insecurely?
After working on a an imaginary security related project, it was decided that the project is going to use the imaginary hashing function X.
There are various implementations of the hashing function ...
- 783
2
votes
1
answer
230
views
IPsec installed algorithms
What happens if a laptop and a server don't have a encryption algorithm in common?
Does IPSec abort the connection or does it always have default algorithms?
- 21
0
votes
0
answers
170
views
Custom password security algorithm? [duplicate]
How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
- 1
0
votes
1
answer
253
views
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
1
vote
1
answer
5k
views
Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
My threat model is archiving and backing up important and private files.
Files will be stored in many places ...
- 11
4
votes
1
answer
280
views
Safe encryption algorithm that works with files bigger than 68GB
In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
2
votes
0
answers
211
views
Differential Privacy: understanding sensitivity [closed]
From this link on Differential Privacy, the L-2 sensitivity is defined as follows:
Question:
Here's my understanding of the above equation:
Make a set of D' data sets such that D' is same as D ...
- 121
2
votes
2
answers
884
views
Encryption and Hash algorithms explanation
I am using Veracrypt and there are encryption and hash algorithms
Can anyone explain simply what do each algorithm does?
Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
- 21
2
votes
4
answers
6k
views
If I have the input and output, can I know the encryption technique?
I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
- 17
0
votes
2
answers
361
views
What is the standard practice to maintain a password for different websites? [duplicate]
I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123
The problem with this approach is if someone breaches the protections of a particular ...
- 397
1
vote
1
answer
442
views
Verification After Data Wipe
A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link:
https://www.datanumen.com/blogs/...
- 131
2
votes
0
answers
140
views
WPA technical doubts (3)
This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome!
Someone told me that in WPA2 ...
- 109
6
votes
4
answers
4k
views
Do all Authenticator Apps use the same algorithm?
I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ?
So, these apps are use the same algorithm which is a ...
0
votes
1
answer
5k
views
What encryption algorithm outputs 22 characters string? [duplicate]
I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
1
answer
499
views
What is a trans-cipher?
While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering").
I ...
- 268
3
votes
0
answers
198
views
What is the algorithm used by Genie intellicode?
How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security?
A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
- 165
-5
votes
2
answers
307
views
Is this Python program secure?
Note: I'm new to information security practices so feel free to point out anything I could be doing better.
Situation : I'm currently creating an encryption system for instant messaging and I want to ...
- 107
1
vote
1
answer
305
views
Is there a standard checksum for verifying multipart key fragments?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
- 34.1k
13
votes
4
answers
6k
views
Implementation of diceware: do I have to simulate dice roll?
I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
- 239
0
votes
0
answers
193
views
Elgamal encryption algorithm
I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
- 187