Questions tagged [decryption]
The process of decoding data that has been encrypted into a secret format.
51
questions with no upvoted or accepted answers
4
votes
0
answers
2k
views
How to differentiate between encrypted and unencrypted Bluetooth traffic while using Wireshark?
I captured Bluetooth traffic between a master vault Bluetooth smart padlock and an iPhone 6s. This was done using a Bluetooth sniffer and the captured traffic was stored to a pcap file. Analysing it ...
- 41
3
votes
2
answers
1k
views
How to decrypt a file to memory and run it from memory?
How someone might run an encoded executable, mp3, or any other file safely in memory after being decrypted.
A use case might be someone trying to make code or a file only usable through their service ...
3
votes
1
answer
261
views
Encrypting links between registered users and their sensitive data
I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database.
Furthermore, if a user has multiple pieces of sensitive data, ...
- 131
3
votes
2
answers
291
views
Encrypted log entries authorization
We have a database table of encrypted log entries, each encrypted entry containing information about the user who created the entry. The entry is encrypted with the encryption key of the particular ...
- 401
2
votes
1
answer
66
views
Decrypt SSL with Wireshark supported browsers
I've been following the guide:
https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/
Using it for chrome and Safari on MacOS does not populate any keys in the file, Did browsers stop keys ...
- 21
2
votes
0
answers
283
views
How to tell what encryption a ransomware uses
I recently was attacked by a ransomware that encrypted files in my computer and turning them into a .CRYSTAL file type. In the ransom note there is a “key id” which resembles a public key of sort, and ...
- 121
2
votes
2
answers
243
views
How to devise cryptographic system with sharing ability
I am writing a C# .NET application. For my application the data of the users should be encrypted in the database. The users should also be able to share data with other users. To that end I want to ...
- 231
2
votes
1
answer
1k
views
SMIME email decryption using a private key - what am I doing wrong?
I have an encrypted .eml file and a private key. I've looked it up a lot on the internet but couldn't find a way to decrypt the email using OpenSSL. I've tried this command:
smime -decrypt -in ...
- 21
2
votes
0
answers
2k
views
Ransomware with .adobe extension
It is possible to decrypt file with .adobe extension ?
File after encryption look like this : filename.id-5735353.[[email protected]].adobe .
I did a little research and found information about "....
- 41
2
votes
0
answers
368
views
JA3 and its usefulness
JA3 was created by people at Salesforce and it is a way of creating TLS/SSL fingerprints due to the fact that negotiation is done in the clear. According to JA3, these fingerprints give someone the ...
- 1,437
2
votes
0
answers
259
views
How to implement a Crysis ransomware master key?
I see there have been master keys released to decrypt computers affected by the Crysis ransomware. If a computer is infected with Crysis, how would one actually test/run the key on the computer?
...
- 121
2
votes
0
answers
117
views
How to decrypt Vigenère ciphered text?
The method I am using:
For example: we have to decrpyt one message
VVHQWVVRMHUSGJG
Step 1
Find the length
VVHQWVVRMHUSGJG --------- 1
VVHQWVVRMHUSGJG ...
- 43
1
vote
0
answers
46
views
CrypTool - How to determine what type of encryption has been used?
I have a few questions about CrypTool.
How can you use the text analysis tools available in CrypTool to determine the encryption algorithm for a given ciphertext?
How can you use CrypTool's text ...
- 11
1
vote
0
answers
147
views
Wireshark decrypt TLS 1.2 from WCF client
I have managed to decrypt TLS 1.2 data using Wireshark on a connection from the browser to the WCF service, but cannot manage to do the same with the WCF client.
I'm not sure what is the difference, ...
- 11
1
vote
0
answers
127
views
How to decrypt SSHv2 using AES-256 session keys from memory dump?
How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.
I have the full PCAP for the SSH sessions, including the initial handshake and ...
- 51
1
vote
0
answers
504
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
1
vote
0
answers
168
views
Can you decrypt storage from an Android phone directly from the flash?
I have an old phone that I am trying to recover the data from. I was hoping to desolder the chip and buy an expensive reader for NAND flash chips but then it occurred to me that the contents of the ...
- 111
1
vote
1
answer
92
views
Non-interactive multi key encryption and decryption
I need some serious suggestions on my protocol, specifically for decryption.
So the scenario is Organizations A and B encrypt their employees' records with their respective public keys and store them ...
1
vote
0
answers
107
views
How does Tor's second node know the key to decrypt the second layer?
I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I
It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
1
vote
0
answers
149
views
avoiding plaintext on the hard drive
If you decrypt ciphertext to the terminal like this:
gpg --output - --armor --encrypt --recipient 23642351 message.txt.pgp
..does it touch the hard drive / ssd or only live in RAM?
What about when ...
- 379
1
vote
0
answers
1k
views
John the ripper - "no password hashes loaded " for pdf
I'm trying to decrypt a pdf that I no longer have the password for. When I use JohnTheRipper, it can't seem to load any password hashes.
Basically, this is what I run.
└─$ perl pdf2john.pl /home/...
- 11
1
vote
0
answers
341
views
Decrypt DTLS traffic when using the Cisco AnyConnect Client
I am using the Cisco AnyConnect Client 4.7 to connect to a VPN. I need to decrypt the traffic to examine the packets and understand how VPN works. I have read about providing the PSK to Wireshark, but ...
1
vote
0
answers
1k
views
How to determine what cipher I encrypted a file with?
Years ago I had a bunch of bitcoin in a wallet that I encrypted. This was back when bitcoin was like $0.20 or $0.30 each. At one point I couple hundred of them but didn't know what to do with them. I ...
1
vote
0
answers
667
views
Why does OpenSSL fail to decrypt when the key is too large?
I have the following groovy script:
cmd1 = "echo ${really_long_key}"
ssl_cmd = "openssl aes-256-cbc -md md5 -nosalt -a -pass pass:${encryptPassword} dec"
def process = cmd1.execute() | ssl_cmd....
- 11
1
vote
0
answers
110
views
Where should the SCEP requests be decrypted?
Let's say you provide a SCEP service available to the outside world, where should the SCEP requests be decrypted? At the load balancer, in the backend server, elsewhere?
It doesn't look like there is ...
- 11
1
vote
0
answers
859
views
How to decrypt the my 1Password Vault without using the 1Password App?
I would like to know, how someone can decrypt his 1Password Vault without using the 1Password app. It should be feasible. Right?
In a nutshel,
My Master Password is the only "AES key" that my logins/...
- 327
1
vote
0
answers
224
views
Decrypting WLAN (WPA2) Traffic - What kind of Antenna to use?
In a Penetration test after receiving the PSK of a WPA2 WLAN it's possible to decrypt the wireless traffic using airdecap-ng for example. This works well as long as one recorded the associated four-...
- 4,313
0
votes
0
answers
93
views
Wireshark can't decrypt TLS from a specific python library
I have a problem. I'm using Wireshark 4.0.8. I created my ssl file to store my "(pre)-master-secrets". I can thus decrypt TLS from my browser or from different python libraries without ...
- 1
0
votes
1
answer
70
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
0
votes
0
answers
46
views
What are password encryption schemes that result in variable length common in MySQL and PHP?
I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples.
753a524d56b48d825328ce27
789e0ad30d15
7ba0868c23e0a2
d327e265ca2abcd7c
48276b3d5618850
...
- 1
0
votes
0
answers
1k
views
Decrypting Browser Cookies
So I am trying to write my own backdoor with python and it is something like Metaploit, where you can run a single command and it would do the work for you, so I am trying to implement a cookie ...
0
votes
0
answers
282
views
Is it possible to get krbtgt hash from TGT ticket?
As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
0
votes
2
answers
371
views
Ensuring an encrypted file can be decrypted in the future
What is a suggested way to:
Encrypt a file
Put file on USB
Give USB to a 3rd party who is not that tech savvy
Someday in the future, somehow provide them with the password
Ensure that if #4 happens a ...
0
votes
0
answers
3k
views
How to decrypt an OpenVPN EasyRSA Encrypted Private Key?
I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
- 101
0
votes
0
answers
78
views
PubKey decrypted differences when Sending an encrypted email via a bash script and when sending it via Thunderbird
This is a 2-part question.
When GnuPG is used externally in Thunderbird 91.7.x, i tested email encryption from Account A to Account A, the message was received perfectly encrypted and in the "...
0
votes
0
answers
89
views
Step-by-step file encryption/decryption using user-supplied password
Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
- 101
0
votes
0
answers
244
views
Rar (Zip) Decryption, how does it work
I was wondering how rar decryption works.
I know that when I enter a password to encrypt my rar file, my password is derived into a key that is used to encrypt the rar file.
But how does the ...
0
votes
0
answers
80
views
Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?
Assume we use AES256 to encrypt the same payload 100 times, each with a different key.
An attacker gains access to the 100 encrypted payloads, and nothing else.
Is there some way the attacker can gain ...
- 123
0
votes
0
answers
205
views
Manual TLS decryption with master secret
Assuming I have the master secret from SSLKEYLOGFILE client random, and server random, can I decrypt any tls traffic captured? I've started from Golang's TLS implementation, pulled the connection ...
- 1
0
votes
0
answers
254
views
How secure is /dev/stdin in UNIX systems?
Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure?
I've written the following alias to start an openvpn client more easily than before:
sudo bash -c 'cd ...
- 1
0
votes
0
answers
104
views
Authentication Message in TLS
I was reading RFC8446-TLS13 and a tls visualization and could not grasp some concepts.
I have all the tls connection data (client hello etc.) and SSL Logs (server_traffic_handshake_secret)
I see that ...
- 101
0
votes
0
answers
106
views
Need some help with decryption
I've used x64dbg to work out decryption in a particular program. I've found where it changes the encrypted material into readable text but can't work out the best way to use this information to ...
0
votes
0
answers
110
views
How TLS symmetric encryption works?
After the secret symmetric key is exchanged, how does it look like?
What length (in a production use) is it and what can influence it?
How the key is used to encrypt / decrypt a piece of data? I ...
- 101
0
votes
0
answers
859
views
Decryption of TLS/SSL Traffic With the debug file of fiddler on wireshark
I wanna decrypt some packets on Wireshark, when I search the Internet, some people were said to use SSLKEYLOGFILE environment, I do the stuff, but it looks like that chorme doesn`t update that file ...
- 101
0
votes
0
answers
560
views
Problem using padding oracle attack on this base64 - url coded message (AES CBC 256)
I'm supposed to write a script that will get the plaintext of a message which is firstly coded in base64, then URL coded (encoded ciphertext in AES-256-CBC). Padding is used as well such that the ...
- 173
0
votes
0
answers
4k
views
Decrypt Private Key
I have a private key together with a certificate in a pem file.
The part of the private key starts with:
-----BEGIN ENCRYPTED PRIVATE KEY-----
I have a passphrase for it.
I need to bring it back to ...
0
votes
1
answer
129
views
Does knowing part of a passphrase for sure really mean that you can "disregard" that entire part when trying to crack it?
Alice bought 1 Bitcoin and encrypted her wallet.dat in Bitcoin Core.
Samantha, Alice's friend, notices the Bitcoin price skyrocketing and, while Alice is in the bathroom, steals Alice's wallet.dat as ...
- 1
-1
votes
0
answers
66
views
How can a stolen computer card be protected from being re-manufactured and resold?
In this scenario, the attacker is not trying to discover secret information or break the system. Instead, his objective is to create an exact replica of the card and sell it at a lower price.
This ...
- 21
-1
votes
3
answers
1k
views
how do i find the number of possible keys / password to decrypt a plain text
I would like to know if there is any way to recover the plain-text of a message that's been encrypted with 55 rounds of the Caesar cipher, with a different (independently chosen) key for each round; I ...
- 1
-1
votes
1
answer
277
views
How to secure the key in an offline package
I have a package to be shared to Bob which contains:
an encrypted data.zip
Application, which will have logic to decrypt the data
Bob will run Application and it will decrypt the data.zip.
Now for ...
- 99