Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

why is it possible to bypass android full disk encryption?

if you look up how to bypass the android lock screen, there seems to be endless examples. plug the phone into your pc, use adb android debugging tools, disable the lock screen forgot password option ...
0
votes
1answer
34 views

Public key encryption with modified private key requried

I want the encryptor to be able to choose a key X and using it and the public key, he will be able to encrypt a message m. Then I get the key X and using the matching private key I'm able to generate ...
0
votes
0answers
33 views

Reading public key from SIM card

Is it possible to get public key from SIM card with only TelephonyManager API. I know SIM card have CPU, RAM, ROM, EEPROM, Crypto-processor, etc... Inside ROM part here is Ciphers, public and secret ...
0
votes
1answer
34 views

How to generate a MSK from IEEE 802.1X-2010

IEEE 802.1X-2010 states: "Generate an MSK of at least 64 octets, as required by IETF RFC 3748 [B14] Section 7.10, of which the first 16 or 32 octets are used by this standard as described in 6.2....
1
vote
3answers
78 views

Does compression level influence security of encryted 7z files?

I want to archive some GB of sensitive data. It is to be stored on an external drive that also includes non sensitive data so i don't want to encrypt the whole drive. For that purpose i want to use ...
0
votes
0answers
49 views
+50

Data Key for Production / Test DB

We are encrypting database fields for PII. For Key Generation and storing it, we are using AWS KMS. Data key we have generated using AWS KMS,for the master key we are using CMKs. Now let's say there ...
0
votes
0answers
35 views

Block cipher exercise CTR, CBC and ECB [closed]

I'm trying to figure out this exercise about CTR, CBC and ECB given Encryption Matrix [29->0, 11->1, 26->2, 1->3, 21->4, 4->5, 15->6, 31->7, 27->8, 28->9, 2->10, 14-&...
0
votes
1answer
34 views

On what basis to create Data Keys

For PII, we have to encrypt some columns in our DB(All of our infra resides on our own DC, not using any cloud provider). Now roughly what we are doing is Created a CMK at AWS. Generate Data Key ...
0
votes
1answer
36 views

What can be added on a proxy server using TLS v1.3 more secure?

i would like to know what can be added to make a proxy server using TLS encryption more secure so that it can bypass censors that are using quantum computational power?
1
vote
1answer
44 views

What are the limitation on encrpyting proxy

i would like to know if i encrypt a proxy server communication with TLS v1.3 is it still possible for a firewall censor to a deep packet scanning to decrypt. Also, what can be done to make the ...
0
votes
2answers
107 views

Searching Encrypted Data from Database

Suppose I have a table with email is stored in one table. I have encrypted it using AES-256 and stored the result in DB Column. For let's say I have one input email and I want to search whether this ...
0
votes
0answers
15 views

About Spring Boot encrypt/decrypt functions [migrated]

I'm looking for some advice about Spring boot CLI command encrypt/decrypt: I understand that Java Cryptography Extension is required for those functions. They provide symmetric encryption. Does anyone ...
1
vote
3answers
67 views

AWS KMS Data Key Rotation

I am using AWS KMS as a vault for my encryption key. Now what I am doing is that I am creating one data key, encrypt it using Customer Managed CMKs. Now on every request, I just call AWS KMS Service ...
0
votes
1answer
61 views

Symmetric encryption - given plain text, produce cipher text without key

Suppose Alice and Bob are communicating using a peer-reviewed symmetric encryption algorithm such as AES-256. Bob possesses a private encryption key to decode messages from Alice, but Alice does not ...
0
votes
0answers
27 views

Storing Private Key Files on Android 10 as a User

Say I have a private key as a user of an existing application for SSH, password management, etc. As far as I know if it is in shared storage, any application with storage permissions can access it. If ...
0
votes
1answer
64 views

Save encrypted data in server . With no way for server to read actual data

Hello i am developing an app that collects some private data from my clients. My clients wont like it if i am able to read the data. So the data is encrypted in cleint side with a key say "xyz&...
0
votes
0answers
33 views

How can I find out the encoding/encryption logic that has been used? [duplicate]

Is there a way to find what type of encryption/encoding is being used? Value Input: -8657C021 -C6E29E21 Value Output: -6651FC6C -9F1CBB0F
0
votes
0answers
101 views

Is SECCURE (still) safe enough for public backups

I recently came across the SECCURE tools for simple encryption of data, but I'm uncertain about how up-to-date their security is. On the page, the author points out that the tools have been audited by ...
1
vote
2answers
114 views

What personal data should be encrypted in a database?

I am having trouble answering what seems like a simple question. I was hoping to find a Yep/Nope style list somewhere, but can't seem to find one. What data should be encrypted in a cloud (e.g. AWS/...
0
votes
0answers
58 views

What is the need of HMAC in Diffie-Hellman? [duplicate]

When Alice and Bob both have the same shared secret to encrypt their data (Diffie-Hellman) and Alice encrypts her data with this key and Bob can decrypt it with the same key, then Bob knows that the ...
2
votes
1answer
62 views

Manually sending PIN Change/Unblock Command to IC card

In the EMV documentation (EMV Book 3 Section 6.5.10), the PIN Change/Unblock command provides the option to change or unblock a card's PIN, and also handles resetting the PIN Try Counter (EMV tag ...
1
vote
1answer
38 views

AWS KMS Getting Data Key using AWS Encyption SDK

I am exploring the AWS KMS as a vault for storing the encryption keys. Now I am trying to encrypt the database fields like email. So, issue whenever there is a read/write for email, I don't want to ...
0
votes
2answers
67 views

How does encryption, certificates in an end to end SSO flow?

So, I know how public-private key encryption works. I understand how/why certificates are required. I understand how a SSO flow (IdP initiated) works. But, I do not understand how the three of them ...
8
votes
3answers
2k views

What happens when I encrypt something with my RSA Public Key?

I know encrypting something with my private key is used for signing. To prove that the message is indeed coming from me. But what about if I sign something with my public key? That would mean that ...
1
vote
0answers
5 views

Am I obligated to decrypt lots of data for GDPR requests? [migrated]

I am providing a B2B service where customer data of businesses are stored in an SQL table. As I never need to query for this personal data, the data at rest there is asymmetrically encrypted with the ...
-1
votes
1answer
52 views

How to secure the key in an offline package

I have a package to be shared to Bob which contains: an encrypted data.zip Application, which will have logic to decrypt the data Bob will run Application and it will decrypt the data.zip. Now for ...
0
votes
0answers
15 views

How does WPA MIC key protect its PSK variable during 4 way handshake process

Background: I had a hard time finding an answer to a simple question, about the very first communication between an AP and a client. In the 2nd packet delivered during the 4 way handshake process (the ...
0
votes
0answers
32 views

2-way encryption of url parameters

My client uses a 3rd party vendor to store contacts and send promotional emails. All of the emails drive the user to various landing pages on their website. occasionally there is a need for ...
0
votes
0answers
35 views

How to perform encryption/decryption in a RESTful system? [duplicate]

I'm not a crypto/security expert and have designed an architecture for encryption/decryption. I'm not sure if its full proof and want to know what people use as industry standard? I'm trying to ...
1
vote
1answer
70 views

How to perform encryption/decryption in a RESTful system?

I'm not a crypto/security expert and have designed an architecture for encryption/decryption. I'm not sure if its full proof and want to know what people use as industry standard? I'm trying to ...
0
votes
0answers
40 views

Is my password database encryption flow secure?

I'm not an expert and I would be very glad if someone could take a look at it and tell if there are any problems with it Here are the diagrams of getting/setting the password file from and to the ...
0
votes
0answers
51 views

Is it a good idea to send integers instead of strings over SSL to save bandwidth? [migrated]

I am creating an app with client-server design. The client and server communicate with each other by sending data as binary message (CBOR array) via WebSocket. Instead of sending strings, I have ...
1
vote
2answers
121 views

Encrypt Text Message as Image

Is this a good idea to make the following text message encryption: accept text from the user 1 store the text into a document in the form of some handwritten font convert the document into an image ...
32
votes
7answers
8k views

Is it really safe to use Signal or Telegram on untrusted phone hardware?

How safe are we when we use phone hardware from untrusted manufacturers and use end-to-end encrypted communication like Signal and Telegram? Are our conversations really safe from keyloggers or ...
0
votes
1answer
70 views

Can't Amazon see my files if I use s3cmd/gpg with a complex password?

Since the early days of s3cmd I use it in combination with random generated filenames (uuidgen loop) and a complex passphrase (pwgen -n1 -c 32 -y). On security.stackexchange.com search there is only 1 ...
1
vote
2answers
170 views

Encrypting a password with its own hash

I just found out that an e-commerce platform (similar to Shopify) I was planning on using allows me to see my password. I know I can't assume anything and I should (probably) just run away from it, ...
0
votes
1answer
71 views

Still able to recover files after running cipher.exe on windows 7

After running cipher.exe on my entire C: drive, I'm still able to recover deleted files using recuva. In fact, doing a before and after, I see no discernible difference in the files that are able to ...
0
votes
0answers
7 views

How to encrypt a usb drive which already has data on it [migrated]

There is an external hard drive of almost 1Tb which has about 650Gb of data on it, the external HD is connected to computers via USB interface. As far as I'm aware, this external HD is for all intents ...
0
votes
1answer
85 views

How VPN works internally [closed]

The VPN is used to establish a secure connection (creating a tunnel) to another network over the Internet. It masks our IP address and geographical location and also when the information enters the ...
3
votes
2answers
131 views

Protecting an invitation to join the system

I'm having a debate with a coworker right now about how to design an invitation system. The idea is that the mobile app will be able to send an invitation link to, say, a Whatsapp group, and people ...
0
votes
0answers
43 views

Review of the design of Credentials Manager app

I want to make a mobile app that will act as a Credentials Manager and store all my access information for websites, credit cards, secure notes, and so on on the server encrypted with REST API. The ...
0
votes
0answers
24 views

What is the NIST/FIPS publication process? How long does it usually take for drafts to become final?

I'm specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I'm curious what the process actually is. Is it all internal ...
0
votes
0answers
56 views

How to securely design REST API for Password Manager app?

I want to create Password Manager where users can create their accounts and store website passwords. For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
0
votes
1answer
59 views

Vulnerabilities and potential scale for sensitive data transferred in plaintext, involving credit card payment information

Regarding the insecure transmission of data over a network. When it comes to plaintext credit card information and payment details being transferred in this manner over HTTPS. What are the possible ...
0
votes
1answer
64 views

How does Telegram's secret-splitting scheme work?

The Telegram FAQ's state that they are not able to comply with court orders from one country alone because they "split the encryption keys and spread them over multiple jurisdictions". To ...
8
votes
1answer
1k views

What does using Cloudflares WARP app offer that HTTPS (websites) alongside DNS over HTTPS / TLS doesn't?

Intoduction to Cloudflare WARP I’ve been looking at Cloudflares WARP app for mobile. It claims to be a VPN but without some of the IP hiding anonymity features normal VPNS have: “Under the covers, ...
8
votes
2answers
302 views

Solution to the ‘Browser Crypto Chicken-and-Egg Problem’?

From time to time, questions come up in this board concerning web applications that utilize client-side cryptography (or ‘in-browser’ cryptography), where these applications claim to be designed in ...
0
votes
0answers
36 views

Group Instant Messaging: How to securely store messages on the backend while supporting cross-device message history in a group chat?

I want to build a group chat app where messages are transmitted and stored as securely as they can be, but where the message history is still visible after you or others in the group have changed ...
22
votes
2answers
4k views

How critical is encryption-at-rest for public cloud hosted systems?

I work as a solutions architect for web-based systems on AWS. As part of this role, I often respond to Information Security questionnaires. Nearly all questionnaires request information about data ...
0
votes
0answers
40 views

Is storing passwords in encrypted container still bad practice? [duplicate]

Suppose I need to store a bunch of passwords: storing them in a txt or odt file inside an encrypted container, such as the ones produced by VeraCrypt, is bad practice? Would I put myself at risk? If ...

1
2 3 4 5
105