Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
2answers
56 views

How easily can ISP/mobile network operator employees read or decode traffic data?

When I sign up for a mobile subscription or internet connection with my ISP (also a mobile network operator), the company's privacy policy says that certain information is processed such as personal ...
0
votes
0answers
56 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
0
votes
0answers
41 views

How does SSH protocol encrypt the data in transit when using user and password for credentials? [closed]

From my understanding, the SSH protocol encrypts everything that is sent over channel and this is why it is secure. My question is for setup when authentication is done using username and password. My ...
0
votes
1answer
79 views

Combining confidentiality, authenticity and data integrity to form secure URL

There are clients (mobile application), they can share links to their profile info, which should be confidential. The link expires in 5 minutes (configured). They set Auth-Code so that the one who ...
1
vote
1answer
62 views

How bad is it to store credentials in clear text on disk and in memory?

Yeah, it depends. A good answer would provide some reflections on this. I have two concrete scenarios in mind, in two concrete (and I believe common) contexts. Context 1. At home, you’re the only one ...
1
vote
0answers
43 views

How to encrypt and hide a GNU/Linux operating system and create a decoy system?

My goal is to be protected against key disclosure laws and possible extortion. I know dm-crypt can be used to perform full disk encryption for GNU/Linux distros. However, it is not enough. I want to ...
0
votes
1answer
50 views

Bypass encryption by altering source code

In the Cryptsetup Frequently Asked Questions page it says: You are asked a passphrase of an existing key-slot first, before you can enter the passphrase for the new key-slot. Otherwise you could ...
-1
votes
1answer
62 views

How exactly is RSA used in SSH [duplicate]

I can find oodles of websites that tell me the server retains the public key and the client retains the private key. But nothing on how the client authenticates to the server and - perhaps - how the ...
0
votes
1answer
48 views

Decrypt Soap xml encryptedKey session key using AES-128/PKCS-1#rsaes-kem-kdf2-kw-aes128

I'm familiar with cryptography and I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA. I tried using OpenSSL ...
0
votes
1answer
39 views

When changing a PGP passphrase, does it only affect the same key on the other machine?

If I change the password of my PGP key (I use it to sign Git commit) on Computer A, does it affect the same PGP key that I have on the Computer B? Will I still be able to use the PGP key on Computer B ...
1
vote
1answer
99 views

How dangerous is Code With Me, a remote pair programming tool from Jetbrains?

I've been looking into this very useful remote pair programming plugin from JetBrains called Code With Me, but want to understand all the security implications. From their FAQ page: How is data ...
0
votes
0answers
46 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
0
votes
0answers
36 views

OpenPGP: What happens if I have two keys on the same email and try to encrypt a message with that recipient? [duplicate]

Let's assume that I saved two OpenPGP keys(key1 and key2) on the email mail@mail.com. What would happen if I try to encrypt a message with the following command: gpg --encrypt --recipient mail@mail....
1
vote
0answers
40 views

Is it possible to encrypt data with a GPG public key that doesn't have the encryption usage flag set?

I have received a public key that does not appear to have the encryption capability enabled: > gpg --list-keys ...
3
votes
2answers
252 views

Does HTTPS leak password length?

On a website with user accounts, all HTTP requests coming from the submission of a login form kind of contain the same info, there are only a few things that are different in the HTTP requests, such ...
0
votes
1answer
55 views

How to securely encrypt shared data for a dynamic amount of users?

Example: Bob uploads a file to my custom file server locked with a password, which then the file server generates a link for him to share Bob wants to be able to share this data to anyone that has ...
0
votes
1answer
51 views

what makes xmpp a trustworthy way to communicate with others?

[An Overview of XMPP][1]: https://xmpp.org/about/technology-overview.html [Luke Smith recommends XMPP][2]: https://www.youtube.com/watch?v=qBTsUVrCDAQ As Luke Smith said in his video, XMPP has been ...
0
votes
0answers
29 views

What method does Chrome use to encrypt cookies? How can they be decrypted? [closed]

I need to read cookies from Google Chrome in a C++ application that I'm writing, but I've found that Chrome encrypts all of its cookies. I spent some time searching for solutions, but all of the ...
0
votes
1answer
93 views

Is it possible to extract encryption keys from software executing on your own system?

I'm a newbie in this field so forgive me in advance if this question is stupid in anyway. Say we have a software that is executing on our system and encrypting files using a secret key that is not ...
3
votes
3answers
116 views

Does EFS protect against data theft by ransomware?

Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key ...
-1
votes
0answers
92 views

strongest email encryption where keys can be exchanged in person

For many years now I have been using PGP with a number of recipients, also at times with the private key generated in a smartcard. When I think of it, almost every one of those people I see in person ...
0
votes
1answer
84 views

Obtaining .p12 certificate from PEM file and CRT file provided by GoDaddy

A few months ago a colleague who left generated a CA certificate from GoDaddy. I am not sure the exact steps he took but currently we would like to install the CA certificate on a server to fully ...
1
vote
1answer
60 views

What is the most up-to-date secure method for storing .ENV variables?

I am improving the security on my php website. I am not using any frameworks or cms. The credentials are currently stored in plain text in the relevant php files. While researching, I came across this ...
2
votes
2answers
66 views

Nonce in Aes-gcm AAD

I have some data which I'm encrypting using Aes-Gcm. Every time I have to encrypt the data, I generate a random nonce of the appropriate size, as well as an empty array for the tag data. In Aes-Gcm, ...
0
votes
1answer
70 views

Securing data stored on a file

Suppose I have an application, which when opened asks you to open a file and then "unlock" that file using a password that's configurable by the user. The file should be encrypted with ...
0
votes
1answer
73 views

Storing client keys in cloud app

I'm using Azure to store customer data. In a specific country, there are multiple partners. Each partner has his clients. The issue is they don't want us to have access to this data. In other words, ...
2
votes
3answers
155 views

In RSA, can any of the two keys be used for both encryption and decryption? [duplicate]

I know RSA has the concept of "public" and "private" key and one key is used for "encryption" and another for "decryption", but I am confused if both keys can ...
0
votes
1answer
72 views

Difference between Disk Encryption and Volume Encryption?

I'm trying to understand the different between disk encryption and volume encryption, more specifically as it relates to SAP HANA, link here. From my understanding Disk Encryption prevents the threat ...
0
votes
0answers
38 views

What could be the potential vulnerabilities and threats in endpoint encrypted file storage system?

Consider the following scenario: Client installs a web API based endpoint encryption software. They upload the endpoint encrypted files to the server with the following format by using poly1305 and ...
-1
votes
2answers
139 views

Human made encryption, decryption by machine

Now machines are super powerfull to encrypt data/messages or will be even tremendously powerfull using Quantum Computing. Machines use different ways of encryption when we give them a task to decrypt ...
1
vote
2answers
93 views

Where and how many times does encryption take place when we browse the internet?

I'm taking a cryptography course and what I've gathered so far is: PGP takes place at the application layer TLS takes place at the transport layer IPsec takes place in the network layer WPA2 ...
0
votes
2answers
164 views

Any reason why SHA-3 isn't yet present in GnuPG?

I was curious about setting SHA-3 as the preferred hashing algorithm for GPG but that looks like it is not yet supported and the documentation states this: SHA-3: SHA-3 is a completely new hash ...
0
votes
0answers
68 views

How to get Future Keys (Session Key) from IPEK for decryption data?

I'm new to DUKPT, so I'm not entirely clear about DUKPT and HSM. Right now, I'm trying to decrypt data (PAN number) from terminal. So far, when I receive KSN and encrypted data, I understand that I ...
0
votes
0answers
33 views

SQL Column encryption can be part of Data at Rest?

I have a SQL database and I have enabled the Always Encrypted feature. Can I claim that Data at Rest is fulfilled? or do I have to secure the backup files using certificates to claim that our database ...
0
votes
0answers
35 views

What is an SLT1000 password encryption? [duplicate]

The sample password-encryption below. {SLT1000}8kmbGwpGQRS0b8GOdAH4/Wrt8z4= Could anyone identify what type of encryption is this?
0
votes
1answer
60 views

Where is the PDF encryption key stored

Assuming you have the user protected PDF file. Using the password, the cryptographic key is generated and the file encrypted. Where is the key stored, is it on the RAM every time the file is opened?
1
vote
1answer
162 views

Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?

Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" - nothing is perfectly secure; rather I am looking for possible ...
0
votes
0answers
38 views

Is the following encoded or encrypted, and how? [duplicate]

I am trying to figure out if the following string is encoded or if it is encrypted and what algorithm was used in either case. Is there some easy way, to try all sort of different algorithms at once ...
0
votes
1answer
61 views

Does Wire use encryption-at-rest?

Does Wire employ encryption of data at rest? I generally consider Signal and Wire to be the best tools today for sending information privately between two parities. Both meet the marks on crypto, open-...
-2
votes
2answers
120 views

How much security does using TLS provide?

If someone tells me their service uses TLS 1.2 or higher, how much 'guaranteed' security does this provide? Is it possible to correctly claim to be using TLS 1.2 or 1.3 and still be insecure? For ...
0
votes
1answer
116 views

What is encryption key reset and why it is safer than zero-write?

I am about to return my ThinkPad laptop to my (former) employer. I found a very nice solution to erase / protect my private data -- ThinkWipe application in ThinkPad's BIOS. I made use of it right ...
0
votes
1answer
37 views

Does the e-mail send from an id to the same id requires encryption and other security checks?

I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same). Is encryption really required in the above scenario? Necessity of ...
0
votes
0answers
50 views

FedRamp Moderate question about hashing MD5

If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate? BR
1
vote
2answers
96 views

VeraCrypt analogs that support unsafe shutdown?

I am completely satisfied with Veracrypt except for one thing. If you open a Veracrypt volume, write something there or deleting. And then you use unsafe shutdown (for example, using the RESET button ...
4
votes
2answers
956 views

Compression and Encryption against security issues

I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS). I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
2
votes
1answer
138 views

Passwords stored as obfuscated text, not encrypted

An application I admin (but did not develop or implement) claims to be storing passwords in a database using “reversible encryption.” I have access to the database table, and was able to work out that ...
18
votes
4answers
5k views

Is it possible to calculate an encryption key when both the plain text and ciphertext are known?

I have implemented an authentication system which works like this: Upon successful login, the server takes the username of client and encrypts it with AES-256. This ciphertext is stored in the ...
-2
votes
1answer
187 views

how can i find what type of encription this is? im looking for the algorithums and the modes. this is a javascript code [duplicate]

javascript: var _0x1166=['\x72\x65\x74\x75\x72\x6e\x20','\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72','\x6b\x65\x79\x64\x6f\x77\x6e','\x6b\x65\x79\x43\x6f\x64\x65','\x6e\x67\x2d\...
0
votes
1answer
97 views

Do LUKS2 encrypted partitions with Keyfiles use a KDF?

I gather from the cryptsetup manpages that LUKS2 uses argon2i by default for strengthening a user-password to decrypt the partition. However if a 256 bit keyfile with data from /dev/random, how does a ...
0
votes
1answer
161 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...

1
2 3 4 5
109