Questions tagged [decryption]
The process of decoding data that has been encrypted into a secret format.
394
questions
0
votes
0
answers
41
views
Help me securely store and retrieve Social Security numbers [closed]
I am on the very last functionality to implement before launching my app. I have the same requirements someone like Fanduel or Draftkings does. When my users cross the $600 threshold for prizes in the ...
- 1
1
vote
0
answers
46
views
CrypTool - How to determine what type of encryption has been used?
I have a few questions about CrypTool.
How can you use the text analysis tools available in CrypTool to determine the encryption algorithm for a given ciphertext?
How can you use CrypTool's text ...
- 11
0
votes
0
answers
6
views
Is it possible to detect Stealthy False Data Injection attack through chaotic cryptography? [migrated]
I am doing a research on detecting Stealthy False Data Injection (SFDI) attacks in a smart grid context (a related paper). Besides I am working on a chaotic cryptography (e.g. with Lorenz attraction) ...
- 101
-1
votes
0
answers
66
views
How can a stolen computer card be protected from being re-manufactured and resold?
In this scenario, the attacker is not trying to discover secret information or break the system. Instead, his objective is to create an exact replica of the card and sell it at a lower price.
This ...
- 21
2
votes
1
answer
64
views
Decrypt SSL with Wireshark supported browsers
I've been following the guide:
https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/
Using it for chrome and Safari on MacOS does not populate any keys in the file, Did browsers stop keys ...
- 21
0
votes
1
answer
174
views
Verification of Password without Storing Hash - Security Considerations
Question:
I am working on a password-based file encryption and decryption system in Python using the PBKDF2 key derivation function and Fernet encryption. I have a specific requirement: I want to ...
0
votes
1
answer
35
views
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
- 295
0
votes
0
answers
92
views
Wireshark can't decrypt TLS from a specific python library
I have a problem. I'm using Wireshark 4.0.8. I created my ssl file to store my "(pre)-master-secrets". I can thus decrypt TLS from my browser or from different python libraries without ...
- 1
0
votes
1
answer
70
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
0
votes
0
answers
46
views
What are password encryption schemes that result in variable length common in MySQL and PHP?
I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples.
753a524d56b48d825328ce27
789e0ad30d15
7ba0868c23e0a2
d327e265ca2abcd7c
48276b3d5618850
...
- 1
0
votes
0
answers
1k
views
Decrypting Browser Cookies
So I am trying to write my own backdoor with python and it is something like Metaploit, where you can run a single command and it would do the work for you, so I am trying to implement a cookie ...
0
votes
2
answers
86
views
Post Exploitation in Oracle web logic server 10.35 (Oracle Linux Server 3.8)
Web Server : Oracle WebLogic 10.35
Machine : Oracle Linux Server 3.8
I was able to partially exploit this CVE. I can execute any command on server using HTTP request and redirecting its output to a ...
- 15
1
vote
1
answer
56
views
Problem Extracting SSL keys from Apache 2.4
I am trying to setup SSL key logging with Apache 2.4 on Ubuntu 22.04.
I followed the very good Walkthrough provided by Lekensteyn in this post: Extracting openssl pre-master secret from apache2
What ...
- 21
1
vote
0
answers
85
views
How can I encrypt files in a file transfer website? [closed]
I am a complete beginner and have almost no knowledge of encryption.
I have a file transfer website that encrypt the files before saving them in the server then it decrypts the files to be ready to ...
1
vote
0
answers
146
views
Wireshark decrypt TLS 1.2 from WCF client
I have managed to decrypt TLS 1.2 data using Wireshark on a connection from the browser to the WCF service, but cannot manage to do the same with the WCF client.
I'm not sure what is the difference, ...
- 11
0
votes
1
answer
2k
views
Decrypt .enc file with .key file
I'm trying to decrypt JPEG and MP4 files (basically, media files) which they end in .enc file extension, encrypted with AES-256.
For each file, a .key file is associated, the file size is 48 bytes, ...
- 101
0
votes
1
answer
175
views
Feedback wanted regarding how secure this encryption/decryption is
I am creating a Password Manager and I wanted to create a JavaScript function to encrypt/decrypt data in the client-side, then I will be saving the only the encrypted data in MySQL Server. To encrypt/...
- 9
0
votes
0
answers
282
views
Is it possible to get krbtgt hash from TGT ticket?
As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
0
votes
1
answer
272
views
How can I decrypt a text file with gpg?
I want to decrypt a text file (which happens to be an Electrum wallet file) with gpg but I get the error gpg: no valid OpenPGP data found.
I have done a quick test by encrypting a small text file and ...
- 165
1
vote
0
answers
471
views
Tool to Decrypt Chrome, Firefox and Edge login information [closed]
Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
- 11
1
vote
0
answers
126
views
How to decrypt SSHv2 using AES-256 session keys from memory dump?
How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.
I have the full PCAP for the SSH sessions, including the initial handshake and ...
- 51
1
vote
0
answers
501
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
0
votes
0
answers
19
views
Does anybody know what kind of encryption this could be? [duplicate]
I am trying to decypher this encrypted text:
‡GG3¢ò÷Gv—GFW"æ6öÒöÖ—F†÷W3÷3Ó# ¦‡GG3¢òö–&"æ6òôÄãFs†×0¦‡GG3¢òö–&"æ6òóV¥¤ÓEfà ¦‡GG3¢ò÷Gv—GFW"æ6öÒ÷F†VÇVfg–vV×3÷3Ó# ¦‡GG3¢òö–&...
1
vote
2
answers
459
views
what is the safest way to open/decrypt an encrypted gpg/pgp file in memory | gnu/linux debian?
I would like to open/decrypt an encrypted gpg/pgp file in the main memory without leaving any footprints on the file system including swap,etc.
what is the safest option on a gnu/linux debian from ...
- 119
0
votes
1
answer
254
views
Feedback wanted regarding my functions to Encrypt/Decrypt data using PHP (Openssl) [closed]
I am creating a web app (HTML, CSS, JavaScript, PHP & MySQL) where the users register, and only logged users can create and save personal Notes (encrypted) in a MySQL Server database I have for ...
- 9
1
vote
0
answers
168
views
Can you decrypt storage from an Android phone directly from the flash?
I have an old phone that I am trying to recover the data from. I was hoping to desolder the chip and buy an expensive reader for NAND flash chips but then it occurred to me that the contents of the ...
- 111
0
votes
0
answers
16
views
which encryption method is it? [duplicate]
i have a file and i want to edit it to do some changes but i think the file is encrypted anybody knows the encryption method? thanks
ELF > @æ@ @ F¾ @ 8 @ 0 / @ @ @ @ @ ...
1
vote
0
answers
76
views
Symmetric key importance During encrypt and decrypt [closed]
I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore.
After modifying the symmetric key, the decryption should ...
- 161
2
votes
1
answer
313
views
Decrypting files given a sample encrypted file and original
One of my friends was hacked, all of his disk was encrypted.
The hackers are requesting money, that obviously we don't want to pay.
I am wondering if it's possible to decrypt everything, given that I ...
- 21
1
vote
1
answer
245
views
Decrypt TLS record layer using OpenSSL
I am trying to decrypt a given TLS record layer sent by a client using OpenSSL. The TLS version is TLS 1.2 and the cipher suite is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.
The encrypted record layer is ...
- 13
0
votes
2
answers
340
views
Ransomware public key: can I find the respective private key?
I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded).
Is it possible to extract the private key from the public key?
1
vote
1
answer
92
views
Non-interactive multi key encryption and decryption
I need some serious suggestions on my protocol, specifically for decryption.
So the scenario is Organizations A and B encrypt their employees' records with their respective public keys and store them ...
0
votes
2
answers
158
views
Encryption method for file that can only be read by program
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
- 103
2
votes
1
answer
569
views
How to decrypt Blowfish Advanced CS encrypted file
Cleaning up my disk space, I found an encrypted file (*.bfa), which I encrypted with Blowfish Advanced CS (Version 2.13.00.002) about 15 years ago.
I still have a copy of the original version of Bfacs,...
- 21
0
votes
0
answers
39
views
How to encrypt an e-mail to many recipients in an effective way? [duplicate]
Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it.
What encryption method can I ...
- 101
0
votes
0
answers
53
views
In asymmetric encryption, is there a meaningful difference between the public and the private key? [duplicate]
Is it possible to swap them, so that the public key is kept secret while the private key is public? Or do they actually function differently?
Thinking specifically about DSA though I'm interested if ...
- 1,259
0
votes
1
answer
132
views
Decrypting with multiple keys
I have a PHP application which calls third party api with username and password embedded in the XML API call from my side.
I would like to encrypt and store the username and password embedded in the ...
0
votes
2
answers
368
views
Ensuring an encrypted file can be decrypted in the future
What is a suggested way to:
Encrypt a file
Put file on USB
Give USB to a 3rd party who is not that tech savvy
Someday in the future, somehow provide them with the password
Ensure that if #4 happens a ...
2
votes
1
answer
2k
views
CryptoJS AES encryption/decryption problem
A simple encryption/decryption using CryptoJS gives me a weird output. Can anyone point me to where the code is wrong? (I'm looking for the output in the console)
var code = "Testcode";
var ...
- 23
0
votes
1
answer
319
views
deleted a subkey and can now no longer decrypt
My public key had expired so I tried to edit the expiry date with
gpg --edit-key
It seemed to be too much trouble somehow to modify the correct subkey so I deleted the subkey instead with the ...
- 379
-2
votes
1
answer
187
views
Trying to decrypt my home network
I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
- 99
0
votes
0
answers
3k
views
How to decrypt an OpenVPN EasyRSA Encrypted Private Key?
I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
- 101
1
vote
0
answers
107
views
How does Tor's second node know the key to decrypt the second layer?
I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I
It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
0
votes
1
answer
303
views
How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]
When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint.
For example, if I enter the following CR ID :
"CR-13261150"
it POSTs the ...
0
votes
0
answers
77
views
PubKey decrypted differences when Sending an encrypted email via a bash script and when sending it via Thunderbird
This is a 2-part question.
When GnuPG is used externally in Thunderbird 91.7.x, i tested email encryption from Account A to Account A, the message was received perfectly encrypted and in the "...
0
votes
1
answer
59
views
Is there anything that can be deduced from a ciphertext?
Given some strong cipher (like TLS uses), what can be deduced from its ciphertext? For example, is the length of the ciphertext the same as original text? Are spaces preserved? Or some letter ...
- 205
-2
votes
2
answers
2k
views
How to Find Encryption Type by Seeing Encrypted Text? [closed]
When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint.
For example, if I enter the following CR ID :
"CR-13261150"
it POSTs the ...
- 7
1
vote
1
answer
960
views
Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?
So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??
I ask because WhatsApp doesn't exactly use SSL right, it's more ...
- 11
0
votes
1
answer
104
views
Which is the preferred way of encrypting Personal Identifiable Information?
What is the preferred way to implement personal information encryption / decryption?
After some reading, the main options appear to be:
Encrypt/Decrypt it at the database level
Encrypt/Decrypt it at ...
0
votes
0
answers
123
views
decryption of message using private key [duplicate]
I don't why we can decrypt the message using our private key if it's encrypted using our public key.
If a message is encrypted using my public key, then how can I decrypt it using my private key? It ...
- 1