Questions tagged [algorithm]
Algorithm is a set of step-by-step operations to be performed including calculations, data processing, and automated reasoning.
4
votes
1answer
179 views
Safe encryption algorithm that works with files bigger than 68GB
In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
1
vote
0answers
67 views
Differential Privacy: understanding sensitivity [closed]
From this link on Differential Privacy, the L-2 sensitivity is defined as follows:
Question:
Here's my understanding of the above equation:
Make a set of D' data sets such that D' is same as D ...
0
votes
0answers
88 views
CVV/CVC code algorithm [duplicate]
I'm looking for a definition of algorithm how to calculate CVV/CVC codes?
I know that there are the following inputs:
PAN Expiration
Date
Service Code
CVK A/B
But I'm not able to find the specific ...
1
vote
2answers
184 views
Encryption and Hash algorithms explanation
I am using Veracrypt and there are encryption and hash algorithms
Can anyone explain simply what do each algorithm does?
Encryption algorithms encrypt your data/file, Hash algorithm hashes your ...
1
vote
4answers
193 views
If I have the input and output, can I know the encryption technique?
I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
0
votes
2answers
198 views
What is the standard practice to maintain a password for different websites? [duplicate]
I have come across many users who maintain a re-used password for each and every website, such as P@ssw0rd123
The problem with this approach is if someone breaches the protections of a particular ...
1
vote
1answer
81 views
Verification After Data Wipe
A lot of data wipe algorithms have the final wiping pass with random characters. They discuss about verification after the wipe. An example of this is from this link:
https://www.datanumen.com/blogs/...
2
votes
0answers
66 views
WPA technical doubts (3)
This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome!
Someone told me that in WPA2 ...
3
votes
2answers
211 views
Do all Authenticator Apps use the same algorithm?
I've tried some Authenticator Apps (Google,Microsoft,Authy,Lastpass,...) and all of those apps generate same one time passwords at the same time ?
So, these apps are use the same algorithm which is a ...
0
votes
1answer
247 views
What encryption algorithm outputs 22 characters string? [duplicate]
I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
0answers
74 views
What is a trans-cipher?
While discussing archive authenticity/integrity for long term and the problem of potentially re-keying in case of compromise, someone came up with the term "trans-cipher" (or "trans-ciphering").
I ...
0
votes
0answers
223 views
How to use binary search for blind SQL injection queries
From what I read online, it's possible to apply binary search to exploit blind SQL injection vulnerabilities, and that is probably what tools like sqlmap use to lower the number of queries that need ...
3
votes
0answers
55 views
What is the algorithm used by Genie intellicode?
How exactly do Genie Intellicode, and other "Rolling Code" garage door openers achieve their security?
A lengthy Google search didn't turn anything up, which in and of itself gives me cause for ...
-5
votes
2answers
190 views
Is this Python program secure?
Note: I'm new to information security practices so feel free to point out anything I could be doing better.
Situation : I'm currently creating an encryption system for instant messaging and I want to ...
1
vote
1answer
52 views
Is there a standard checksum for verifying multipart key fragments?
We will have a symmetric key arriving in three component parts. Once all parts arrive, the key custodians will get together for a ceremony where each enters their part of the key into a secured ...
14
votes
4answers
5k views
Implementation of diceware: do I have to simulate dice roll?
I am creating a small utility for generating passwords based on the diceware method. At the moment I am very close to the algorithm of real diceware - i.e. I simulate rolling dice n-times to get a ...
0
votes
0answers
66 views
Elgamal encryption algorithm
I have question about elgamal algorithm, Why NIST do not certified this algorithm, And every implementation of this algorithm in Python language have Vulnerability?
13
votes
1answer
2k views
Why is asymmetric encryption less efficient than symmetric encryption?
It's common knowledge that asymmetric encryption is in general much more expensive to compute than symmetric encryption, thus common practice is to use asymmetric encryption to establish a symmetric ...
0
votes
2answers
197 views
Is there a difference between encryption keys and encryption certificates?
Learning about cryptography. Experimenting with attacking the algorithm it's self. My question regards vocabulary basically. Are encryption keys and certificates the same thing or are they different?
...
5
votes
3answers
147 views
Promotional code based on numerical value
I have a field userid which has value between 10000 and 999999. I want to create a promotional code which is based on this field.
The promotional code will be used by the users to refer new users.
...
4
votes
1answer
117 views
How to responsibly disclose a vulnerability in a widespread algorithm?
Just to be clear, this is purely hypothetical.
Yesterday I got hit in the head with some bricks and, in the haze of concussions, discovered a perfect preimage attack on SHA2. For any given hash, I ...
0
votes
2answers
108 views
Rearranging hash adds no security?
I'm a rookie when it comes to Information Security so I've been reading a lot of the top questions on this stackexchange for the sake of learning. I came across this question that discusses hashing. ...
1
vote
1answer
61 views
Hide algorithm and variables
I have some variables in my algorithm that I would not want others to see.
Party A would write an algorithm which will use my variables. But party's A algorithm should remain hidden i.e. I should not ...
2
votes
2answers
80 views
Suitability of encryption algorithms for different content types
Are there encryption algorithms that are "more suited for" (i.e. provide greater security when) encrypting certain types of content?
For example, if I have a PDF file that I need to encrypt, is the ...
5
votes
2answers
521 views
Is it more secure encrypting 3 times with GPG?
Let's say we are using 3 different length passphrases and 3 different algos to encrypt sensitive data, e.g:
gpg --symmetric --cipher-algo CAMELLIA256 < input.zip > output1 (random 100 ...
5
votes
1answer
333 views
Drawbacks of ML in cyber security?
I did some research on the topic (as I'm new to it) and it frankly seems too good to be true. A company called Darktrace for instance, makes use of AI algorithms and ML to autonomously detect threats ...
-5
votes
2answers
86 views
What is the most crypto-resistive algorithm to safely send information? [closed]
What algorithm is the best to use for storing, sending passwords, account data, and other information between desktop apps over the network.
Looking for the best crypto-resistive algorithm to use in ...
1
vote
1answer
749 views
How to decrypt a text with substitution cipher? [closed]
I recently got a file which I had encrypted with substitution cipher a long time ago.
I went to crack down the key and almost got it.
But I encrypted it not just with alphabets but also with numbers ...
2
votes
1answer
272 views
Understanding how linux openssl passwords work
I'm trying to understand how Linux hashes their passwords, so to get started lets say I do this openssl passwd -1 -salt xyz test. This will output: $1$xyz$jAlmRpcFe.aiPOIXET9GG/. Now what I do ...
2
votes
1answer
268 views
What is Megan-35 encryption?
There are a lot of websites offering online Megan-35 encryption/decryption. Surprisingly, I haven't been able to spot out any resources detailing the underlying algorithm. Can anyone provide any link ...
-1
votes
1answer
188 views
Is this algorithm safe for encryption? (Cryptography Algorithm is provided)
Jasoos (Cryptography Algorithm)
I am working on encrypting and decrypt web application. I have built an algorithm that uses 24 bits long key to encrypt/decrypt the message.
Review this algorithm and ...
1
vote
1answer
474 views
Understanding Oracle 11g password hashing algorithms
I'm trying to understand the Oracle 11g password hashing algorithm, I found this link explaining how it is done, however, I have some confusion on how they say it's done. According to that link it ...
1
vote
2answers
295 views
What would be a better encryption algorithm then RSA_DES_EDE3_CBC?
First off, please let me explain why I'm asking this at all:
The default implementation of EnvelopedCms is using AlgorithmIdentifier which by itself will use RSA_DES_EDE3_CBC or OID
1.2.840.113549.3....
-1
votes
1answer
343 views
PHP HASH DECODER [closed]
Please I need help, I bought a PHP mailer, hosted it on my server and found out that it copies all messages and maillist to a different email address,
I examined the code and became suspicious about ...
1
vote
2answers
125 views
Is there a standard for determining if a secret key / hash is secure?
What is the basis for a certain algorithm being declared secure/broken?
Is there a standard like below?
*I understand that there are certain unique flaws such as collisions based on which algorithm is ...
1
vote
2answers
50 views
Are there any possible methods for us identifying byte sequences which contains some plaintext? [closed]
I want to implement one algorithm for automatically identifying some plaintext info from byte sequences. For example:
6d 6c 70 00 00 00 01 d0 03 05 00 00 00 00 00 00 mlp..... ........
27 14 00 00 00 ...
33
votes
5answers
8k views
SSH - If Eve has the passphrase and public key, can she derive the private key?
I have used ssh-keygen for creating an RSA 4096-bit SSH private and public key pair. I used a passphrase for the private key.
If an attacker, Eve, knows the passphrase in addition to the public key:
...
3
votes
1answer
66 views
How to go about working with professionals online if you're developing a new encyrption algorithm? [closed]
I am currently a Computer Science student working on my Master's and think I've discovered a new form of encryption (by extreme luck). Though I've heard it said many times that unless one is well ...
1
vote
1answer
875 views
Differences between the OpenVPN SHA1 variations in the digest aglorithms
OpenVPN offers the use of various digest algorithms (see list below).
I've read that the the digests, printed with a leading RSA-, DSA- or ecdsa-with- are simply due to a print function in OpenSSL and ...
2
votes
1answer
6k views
Example Seed and Key Algorithm
I am attempting to design a seed and key algorithm for an Engine Control Unit. This is used to secure resources such as the ability to reprogram the ECU. The idea is that I request a seed from the ...
4
votes
1answer
922 views
How to set an extremely weak password hashing algorithm for linux?
As part of a lab exercise I want to have an extremely weak password hash in the /etc/shadow file. How could I go about doing this? MD5 is not quite weak enough, and I'm editing the /etc/pam.d/common-...
5
votes
1answer
130 views
Are there any modern governments which use a proprietary encryption algorithm?
Germany used Enigma during WWII. The Soviet Union used GOST during the cold war. USA used to use DES. Now that encryption algorithms are believed best as open source, are there any modern governments ...
0
votes
1answer
222 views
What security considerations apply to a blockchain implementation for private use?
I want to know that if a company wants to implement a model of blockchain, let's say for internal transactions across its offices in different countries, what are the main and important security ...
0
votes
1answer
346 views
Is there Algorithm determining weakness of PIN-code?
There are several algorithms that can tell us if our password is strong enough analyzing its length, considering if it uses upper and lowercases, special symbols and digits, considering if it is not a ...
1
vote
2answers
125 views
Identify a user using random characters of the password
Assuming a password is not stored in plain-text, how is it possible that a support guy is able to identify during a phone call a customer by asking him random characters of his password?
For example, ...
1
vote
1answer
133 views
Where to submit an algorithm for analysis? [duplicate]
I'm developing a cryptographic toolkit and plan to employ custom algorithms for hashing, password stretching, etc. Is there a way I can get them analysed? Yes, I can post it on my website and on sites ...
7
votes
2answers
12k views
Why is MD5 considered a vulnerable algorithm?
I know that MD5 is the most vulnerable hashing algorithm, and particularly vulnerable to Collisions. But the collision vulnerability is not very risky and somebody might use that as an advantage, but ...
1
vote
2answers
252 views
Create a easily decryptable message
For programmers day, I want to create an encrypted message for colleagues. It should be easily decryptable by the most part without much experience in encryption. Can you tell me an algorithm which is ...
2
votes
1answer
48 views
How can I control my website's inputs when they are entered by users?
I have a question and answer website like SO. I have some limitations on some of facilities. For example an user cannot vote who has less than 20 reputation. Or an user cannot close a question until ...
1
vote
0answers
154 views
Can an rdiff signature of a file be made public without disclosing non-public information?
I'm building a system which involves passing around what are essentially uncompressed TARs of linux userlands including some additional private files. An original file (X) is sent to a worker, and the ...
