Questions tagged [algorithm]
Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.
152
questions
2
votes
0answers
44 views
What is the simplest post-quantum asymmetric cryptographic algorithm for key exchange?
This question has been burning in the back of my head for the past few days, and a quick Google search doesn't yield any usable results.
As the title suggests: What is the easiest-to-understand post-...
7
votes
1answer
1k views
Is MD5 hashing possible by divide and conquer algorithm
I would like to compute the MD5 hash of a file
The file is uploaded to my webserver by my clients
The file is uploaded in pieces (called chunks)
The client also sends the md5 hash of the file so that ...
0
votes
1answer
78 views
Is there any secure method to have recoverable passwords?
I have a local application that normally authenticates against a remote Active Directory server. If the local host loses network connectivity, a special local account becomes available for login. ...
0
votes
1answer
94 views
How should I protect an algorithm that I want to sell?
I created a trading algorithm which I want to sell. People would be able to buy the "bot" at my website and it would run from there on (if this is even safe to do).
What is the best way to ...
0
votes
0answers
13 views
How to know the algorithm used to convert the password? [duplicate]
How do i know the algorithm being used while generating this password?
78:C5:F8:ED:AB:3B
to:
90BF8F3AD17
78:C5:F8:ED:AB:3C
to:
DDAD73B1433
Ps. you could probably omit the ':'.
0
votes
1answer
73 views
Certificate Signed Using Weak Hashing Algorithm impact on a workstation
I did a vulnerability scan on some of our company workstations. These are workstations used by employees (dev, HR, accounting, etc.) to do their job.
One of the common result I found is SSL/TLS ...
0
votes
0answers
15 views
Detect what algorithm is used [duplicate]
I wanted to asked how can i identify what algorithm was used.
This is my code:...
1
vote
2answers
812 views
Is it possible to brute-force the original message of SHA-256 given the size of original string?
Given the SHA-256 hash, the size and the encoding of the original string, is it possible to recover the string via brute force? How many string of a given size will result in the same hash?
0
votes
0answers
44 views
Calculating the privacy that Renyi (Īµ,Ī“) Differential Privacy satisfies
I add differential privacy (DP) to my machine learning models by using PyTorch-DP. PyTorch-DP supplies me with the values: Īµand Ī“. I know that the Īµtells us something about the probability Ļ that ...
2
votes
2answers
2k views
How to interpret security impact of “Server Signature Algorithms” (sslscan)
I'm looking at the results of an sslscan of an internal web application, which reports the following:
I'm not sure how to interpret these and couldn't find an elaboration of what exactly this ...
1
vote
0answers
30 views
Algorithm for quadratic voting in anonymous decentralized systems
The question is about voting in decentralized systems. Quadratic voting is a wonderful way to reach consensus without arranging property qualifications. However, quadratic voting requires a KYC: ...
0
votes
3answers
76 views
Is a random number secure (enough) for card numbers and pins?
I've been given the task of generating some gift tokens which comprise a serial number and a pin number, analagous to a pre-paid credit card. The serial and pin will be printed on a card, with the pin ...
1
vote
1answer
76 views
Thick Client memory encryption
I came across a thick client application recently. The application temporarily stores sensitive data (like username and password) in clear text in memory and the data is flushed once the user logs out ...
0
votes
0answers
31 views
How could I verify that a contract was actually sent to me from the client as soon as the contract is received?
If I want to store electronic contracts for clients over a long period of time. I need to make sure that those files are not readable by anyone other than the client until the client retrieves them at ...
0
votes
1answer
81 views
How to implement challenge-response with keyed hash algorithm when 2 people share same key?
Suppose that 2 people have a keyed hash algorithm (that is, a MAC) with a key that they both know. How could they implement challenge-response using their keyed hash algorithm? This confuses me...
0
votes
0answers
53 views
Which Algorithm should PFX file use to sign PDF document?
I exported localhost certificate in .PFX format with private key. I have to use this PFX file to sign PDF document. C# program was used to sign document and below error encountered when hitting this ...
2
votes
2answers
308 views
Is there such a cryptographic algorithm?
Is there such a cryptographic algorithm that will encrypt any file with a password. But when decrypting, if the password is incorrect, the file will be decrypted, but instead of relevant data there ...
2
votes
4answers
191 views
Using a home-brewed hash for passwords for a insignificant website
First off: I do not, nor intend to, use a home brew hash functionality, ever. I'm aware why one shouldn't do that and have read enough topics about it to know it's foolish to do.
I understand that I ...
0
votes
0answers
20 views
Finding encryption algorithm from known and encrypted password strings [duplicate]
I am working with a piece of software which seems to use some type of lightweight, "home baked" password encryption algorithm.
I know a number of clear text passwords as well as their corresponding ...
3
votes
2answers
91 views
Search for existence of sensitive substring without revealing substring in cleartext
I have a list of very sensitive strings and I want to ensure that these strings do not exist in a set of documents (potentially very large documents).
However, these substrings are so sensitive that ...
1
vote
2answers
828 views
What is the difference between EDE and EDE3?
I was going through the OpenSSL cipher algorithms list. I found these two:
des-ede-cbc
des-ede3-ofb
What does that exactly mean? What is the difference between EDE and EDE3? What are the key-size ...
1
vote
2answers
263 views
Most secure algorithms for KDF and Public Key Encryption [duplicate]
I'm developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such ...
0
votes
3answers
185 views
Can a hashing function be implemented insecurely?
After working on a an imaginary security related project, it was decided that the project is going to use the imaginary hashing function X.
There are various implementations of the hashing function ...
2
votes
1answer
98 views
IPsec installed algorithms
What happens if a laptop and a server don't have a encryption algorithm in common?
Does IPSec abort the connection or does it always have default algorithms?
0
votes
0answers
106 views
Custom password security algorithm? [duplicate]
How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
0
votes
1answer
129 views
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
0
votes
1answer
2k views
Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
My threat model is archiving and backing up important and private files.
Files will be stored in many places ...
4
votes
1answer
214 views
Safe encryption algorithm that works with files bigger than 68GB
In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
2
votes
0answers
143 views
Differential Privacy: understanding sensitivity [closed]
From this link on Differential Privacy, the L-2 sensitivity is defined as follows:
Question:
Here's my understanding of the above equation:
Make a set of D' data sets such that D' is same as D ...
1
vote
2answers
426 views
Encryption and Hash algorithms explanation
I am using Veracrypt and there are encryption and hash algorithms
Can anyone explain simply what do each algorithm does?
Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
2
votes
4answers
2k views
If I have the input and output, can I know the encryption technique?
I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
0
votes
2answers
273 views
What is the standard practice to maintain a password for different websites? [duplicate]
I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123
The problem with this approach is if someone breaches the protections of a particular ...
1
vote
1answer
224 views
Verification After Data Wipe
A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link:
https://www.datanumen.com/blogs/...
2
votes
0answers
86 views
WPA technical doubts (3)
This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome!
Someone told me that in WPA2 ...
6
votes
2answers
1k views
Do all Authenticator Apps use the same algorithm?
I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ?
So, these apps are use the same algorithm which is a ...
0
votes
1answer
2k views
What encryption algorithm outputs 22 characters string? [duplicate]
I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
0answers
167 views
What is a trans-cipher?
While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering").
I ...
3
votes
0answers
96 views
What is the algorithm used by Genie intellicode?
How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security?
A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
-5
votes
2answers
237 views
Is this Python program secure?
Note: I'm new to information security practices so feel free to point out anything I could be doing better.
Situation : I'm currently creating an encryption system for instant messaging and I want to ...
1
vote
1answer
176 views
Is there a standard checksum for verifying multipart key fragments?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
14
votes
4answers
5k views
Implementation of diceware: do I have to simulate dice roll?
I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
0
votes
0answers
110 views
Elgamal encryption algorithm
I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
14
votes
1answer
4k views
Why is asymmetric encryption less efficient than symmetric encryption?
It's common knowledge that asymmetric encryption is in general much more expensive to compute than symmetric encryption, thus common practice is to use asymmetric encryption to establish a symmetric ...
0
votes
2answers
1k views
Is there a difference between encryption keys and encryption certificates?
Learning about cryptography. Experimenting with attacking the algorithm it's self. My question regards vocabulary basically. Are encryption keys and certificates the same thing or are they different?
...
5
votes
3answers
171 views
Promotional code based on numerical value
I have a field userid which has value between 10000 and 999999. I want to create a promotional code which is based on this field.
The promotional code will be used by the users to refer new users.
...
4
votes
1answer
143 views
How to responsibly disclose a vulnerability in a widespread algorithm?
Just to be clear, this is purely hypothetical.
Yesterday I got hit in the head with some bricks and, in the haze of concussions, discovered a perfect preimage attack on SHA2. For any given hash, I ...
0
votes
2answers
115 views
Rearranging hash adds no security?
I'm a rookie when it comes to Information Security so I've been reading a lot of the top questions on this stackexchange for the sake of learning. I came across this question that discusses hashing. ...
1
vote
1answer
95 views
Hide algorithm and variables
I have some variables in my algorithm that I would not want others to see.
Party A would write an algorithm which will use my variables. But party's A algorithm should remain hidden i.e. I should not ...
2
votes
2answers
129 views
Suitability of encryption algorithms for different content types
Are there encryption algorithms that are "more suited for" (i.e. provide greater security when) encrypting certain types of content?
For example, if I have a PDF file that I need to encrypt, is the ...
5
votes
2answers
690 views
Is it more secure encrypting 3 times with GPG?
Let's say we are using 3 different length passphrases and 3 different algos to encrypt sensitive data, e.g:
gpg --symmetric --cipher-algo CAMELLIA256 < input.zip > output1 (random 100 ...
