Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

How does Bitwarden Authenticate and decrypt the vault [closed]

In the Bitwarden Security Whitepaper Page 9-10 (User Login | User Authentication | Access to User Vault Data section), it's written that the master password is encrypted locally and then stored on the ...
0
votes
0answers
29 views

What is the vulnerability of this modified AES/CBC? [closed]

A new AES/CBC encryption is defined as: C_0 = E_k(p_0) ⊕ IV C_t = E_k(p_t) ⊕ C_t-1 Imagine that an attacker knows: E_k is AES-128 and using the PKCS#7 padding plaintext 1: such as "...
0
votes
1answer
27 views

Storage access permissions before initial unlock upon startup

How do Android devices (at least all the non-enterprise personal devices I remember owning) display the wallpaper (usually chosen from the 'downloads' folder) on the lock screen when it first is ...
0
votes
0answers
40 views

Naming encrypted files in the cloud, without leaking info about their content

I'm working on a photo sharing app that stores files in the cloud, encrypted, and lets you share those files with others. To do that, as suggested in answers to this previous question: files are ...
0
votes
3answers
52 views

Is the Initial Public Key Transfer Process in Public Key Encryption Vulnerable to MITM on Public Networks?

(shown in step 1): Is the initial process in public key encryption where the public key is transferred across the network done in plaintext? It seems like it must be, which essentially means that no ...
-1
votes
0answers
26 views

Offline alternatives for "PGP Encryption Freeware"? [closed]

I need to gather some sensitive information on a public channel where people don't trust each other, and my plan is to use asymmetric encryption: I generate a key pair, post the public key to the ...
1
vote
1answer
38 views

How should I securely rsync to a host with a self-signed certificate on a private network?

I have a backup server that has a self-signed certificate (x509) and another server on the same network. I would like to rsync data to the backup server from the other server. However, I prefer not to ...
0
votes
1answer
21 views

Getting Smaller Output From Public Key Cryptography In PHP

I have a website in a shared hosting environment, and I'm also planning to back up in multiple locations. All of that introduces vulnerability where the data could get intercepted, stolen, or misused ...
0
votes
2answers
50 views

Can a device that connected to malicious network once be compromised even after disconnection from malicious WiFi?

I need to take my personal laptop to the workplace so I will be using their internet that only employees usually use. However, if the network I connected to was malicious, is my data only compromised ...
0
votes
1answer
47 views

Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys

In cryptography, generally we have two ways of handling sensitive information. We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we ...
0
votes
1answer
57 views

What's The Best PHP Encryption For Email Addresses?

I'm storing a list of email addresses and other not personally identifiable information for a mailing list in a database. Since it's for a project related to cryptocurrency, I believe that the ...
0
votes
0answers
36 views

Is it safe to use a Digital Signature created with a PKI certificate's private key as a password

I'm trying to create application-layer encryption for user data in my database, using password derivation function. But there is a problem, that there must be an admin user, who can access all user's ...
0
votes
1answer
29 views

Authenticationless end to end encrypted server

I was wondering if a server enforces E2EE, should the users provide any kind of authentication? Indeed, if the data is encrypted, any user could access it but the only person who can actually decrypt ...
0
votes
2answers
59 views

Does end to end encryption changes anything on the server code?

while coding a simple to-do list app enhanced with (true) end-to-end encryption as a coding exercise, I was wondering if the server-side API code changes from a plain text storage (excepts passwords) ...
1
vote
1answer
49 views

How can I improve the application administrator's encryption keys security inside database

I am interested in the issue of establishing the security of data of users of a web application in the event of a database leak. It was decided to use the following encryption chain: User data is ...
0
votes
0answers
25 views

Dealing with particular clients wrt TLS support in postfix?

External (other) Mail clients have started to deny/de-list anonymous ciphersuites. But the TLS support is often spotty. Worse, some clients (mainly Windows, which does not care one whit about your RFC ...
4
votes
2answers
489 views

Web-based secret manager using CryptoJS

I'm building an application, part of which will allow businesses to store secrets. I'm looking at using CryptoJS (https://www.npmjs.com/package/crypto-js). This would encrypt everything on the client ...
0
votes
1answer
55 views

Contact form encryption

Currently we have an email address and in certain cases we receive sensitive data via email. The goal is protecting this sensitive data. We have a website with SSL too so we thought that the website ...
1
vote
0answers
25 views

Constraints on the password imposed by m209 on first password management

I was going through the paper Password Security: A Case History By Robert Morris and Ken Thompson on authentication. It has been mentioned in the First Scheme that the first encryption used m209, in ...
1
vote
0answers
30 views

Encrypting/Salting GPS Coordinates [migrated]

Is there a way to encrypt/salt GPS coordinates irreversibly without the private key/salt, while conserving distance metrics? For example, map 32.16,105.47 to some other values, but be able to ...
0
votes
3answers
121 views

Can a drive in locked state (via BitLocker) be over-encrypted/over-locked by ransomware?

Can a drive (system or external) that is already Bitlocker encrypted and locked, be able to be attacked and encrypted by ransomware? We need prevention from over-encryption, not destruction or ...
4
votes
2answers
1k views

Is it less secure to encrypt an hexadecimal encoded string?

I'm implementing RSA public-private key encryption and decryption and the input of these functions is encoded as hexadecimal. The library I use (react-native-rsa) however only accepts plain strings ...
0
votes
1answer
72 views

Taking encrypted devices across borders

I am moving to a country where the government can compel you to reveal passwords for your devices at the border, rendering the full disk encryption on my linux laptop useless. Other than uploading ...
1
vote
2answers
73 views

Irreversible encryption - difference to hash?

I keep reading the term "reversibly encrypted" and that confuses me because I thought that is kind of the point of encryption, that it can be decrypted. I googled it, as a good student, and ...
0
votes
0answers
25 views

Share file between different local machine using scp cmd [migrated]

I'm working on a cloud synced feature for my notes based on this article I try to share my git-crypt-key between my devices (my PC and my laptop) in order to decrypt my remote GitHub repo where my ...
1
vote
0answers
11 views

Digital signature with Big Brother [migrated]

I have read digital signature with Big Brother but don't understand the sequence. One approach to digital signatures is to have a central authority that knows everything and whom everyone trusts, say ...
2
votes
0answers
105 views

Is there any way to de-link a secure messenger (Telegram/Signal/WhatsApp) from phone number?

I understand, that mobile phone verification is probably the most convenient way to validate real users and avoid spam, but those "secure/private" messengers are afterward still bound to ...
0
votes
0answers
19 views

MITM attack on public wi-fi and ISP wired connection [duplicate]

I know how MITM attacks work (theory/videos on the subject etc), but I am a bit confused and not sure what are the worst-case scenarios that can happen. If I'm using a public VPN and someone is indeed ...
2
votes
3answers
122 views

Is using random salt to pbkdf2 for every request to Rest API good/bad?

Here are my conditions: My Rest API must accept username and plain password. But, that's very bad. That's why the client must encrypt the password first and my rest API will decrypt it to get the ...
18
votes
1answer
3k views

CRM with Client Side Encryption

The company I'm working in wants to develop a CRM that is cloud-based and we will need to store the data safely. I've been searching for a way to create a strategy to save and secure data but I don't ...
0
votes
0answers
53 views

UEFI Encrypt disk on boot [migrated]

I want to make UEFI/UFI encrypt disk with AES on boot, is it possible? If yes, how can it be done?
0
votes
1answer
155 views

Can aes256 be cracked with math.random

I read this https://medium.com/@betable/tifu-by-using-math-random-f1c308c4fd9d and if the key is generated with an old browser using math.random via chrome v8, could the AES encrypted message be ...
0
votes
1answer
82 views

Encrypted drives and non-interactive use

I would like to protect the data on my backup system, in case it gets (physically) stolen. I would encrypt the hard drives where the data resides. Since the backup system typically acts non-...
0
votes
1answer
87 views

How to secure data on production environment

Question Suppose you design a data lake with sensitive data. Due to immaturity of tools, dynamic data masking is unavailable. You have MFA, encryption at rest, audit logging, ETL processing data and ...
0
votes
1answer
122 views

SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?

Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned? In my case the SSD (part number: ...
0
votes
1answer
57 views

Is there a use for an MDC even when all messages are signed?

I guess I have halfway grasped the concepts of PGP, and I've halfway understood the concept of the Efail attack. However, I still don't understand whether such attacks would be possible (and an MDC ...
4
votes
1answer
115 views

How are the PGP keys that Thunderbird 78+ uses encrypted?

With Thunderbird 78, a new PGP subsystem has been introduced which handles PGP keys internally. In previous versions, the add-on Enigmail has handled PGP-related stuff, by letting do GnuPG the work ...
1
vote
1answer
257 views

Difference between tor over VPN and VPN over tor

I saw many posts here saying that tor over VPN is different from VPN over tor, and one is better than other, but I was unable to find any explanation over it. There were some speculations that you ...
0
votes
0answers
50 views

How secure is Identity-Based Encryption and certificateless cryptography?

The above two standards encryption schemes are used to encrypt the messages in different applications. In both cases, a trusted third party is used to create a whole encryption environment, which is a ...
0
votes
1answer
84 views

Submitting password over untrusted VPN

Hi,I do not work in IT security and hence am asking some general questions here. I read https://security.stackexchange.com/a/172821/266785 and have questions that would appreciate answers. Is my ...
0
votes
1answer
127 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
4
votes
4answers
233 views

Encrypting Drive before Online Proctor Exam

I'm undergoing postgrad studying and will be asked to do an online exam monitored by ProctorU. I didn't worry much about it before signing up but now that I read the detailed instructions about how ...
3
votes
2answers
171 views

How do companies manage & store cryptocurrency private keys?

For an individual, I see a some options for storing private keys, such as printing them on paper in a vault, using a hardware wallet, encrypting and storing on the machine, using AWS Secret Manager, ...
0
votes
0answers
13 views

I have input text and 2 output of encryption short and long key. How to find algo being used [duplicate]

I know it's hard to find but I am still trying to find it. I have one input and two outputs as "short" and "long" keys. I want to find which algo or encryption is being used. The ...
-1
votes
1answer
187 views

Why are there no modern web browsers that allow extension access to SSL information about the site you are browsing?

In all my Googling, I found one version of FireFox that allowed it temporarily a long time ago, it has been discussed on the Chromium development forums for years, but yet, as of today, there is still ...
1
vote
0answers
35 views

Authorise access to hierarchical data

Consider a scenario in which you offer service access based on a hierarchy of authority. i.e., a HEAD can register his subordinates. The authenticated HEAD has the previledge to read and update data ...
3
votes
1answer
74 views

Does Intel's vPro TME make a locked screen more secure?

This post seems on point but I didn't understand the answer enough to answer this question. Intel's vPro offers "Total Memory Encryption" (TME), which encrypts RAM and system bus data while ...
0
votes
0answers
84 views

What is more secure: encrypting individual files in archive or encrypting the archive itself?

Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive is better, as similar strings are compacted and the CBC will work for us ...
0
votes
1answer
79 views

Use PBKDF2 for both authentication and decryption on NodeJS

I am using PBKDF2 on NodeJS to authenticate a user who submits username & password. To do this, when the user first registers, I generate a salt, I use 200000 iterations, I specify a key length of ...
0
votes
1answer
49 views

Ways to encrypt data that will be available to specific clients [closed]

I want to store information on the blockchain, but some part of it is private and must be available to selected clients (for example, users who belong to a common company) How can this be done? The ...

1
2 3 4 5
110