Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
2
votes
0answers
48 views

How are Mozilla Firefox passwords encrypted?

As far as I know, current versions of Mozilla Firefox store the saved passwords (encrypted with 3DES) to the logins.json file meanwhile the keys are stored in key4.db (or key3.db in older versions). ...
0
votes
1answer
95 views

What's a good encryption method available for external hdd's, ext4?

I've been reading about encryption methods and see things like 'ecryptfs', 'veracrypt', 'LUKS' that "military grade encryption" is basically 256-AES encryption. I have data on an external hdd - can'...
0
votes
1answer
92 views

Can there be backdoors in a Windows 10 Veracript, AES(two fish(serpent) encrypted laptop?

I managed to encrypt a laptop. It has 3 drives, one has encrypted Ubuntu, the second an encrypted Windows (Veracript, AES(two fish(serpent)). I use NordVPN to encrypt my internet connection. I do my ...
0
votes
0answers
25 views

Secure Peer-to-Peer Multicast Communication?

The problem: A single broadcaster needs to send a series of messages through a peer-to-peer mesh network such that only specific other pre-approved nodes can read them. The set of authorized receivers ...
0
votes
0answers
43 views

Determining clients connecting to IIS using CBC ciphers. (preparing for Lucky13 remediation)

I am trying to determine the impact of re-mediating a lucky 13 vulnerability; which i understand requires disabling CBC cipher modes. So far i have added custom logging to my IIS instance to capture ...
3
votes
3answers
165 views

Is it possible to decrypt Telegram messages from a private chat?

Assuming you have access to another person's device, set up a SOCKS5 proxy, install a root certificate to parse the SSL traffic, and take a screenshot of the private key of a private chat. Is it now ...
0
votes
2answers
100 views

Using unencrypted protocols with IoT devices

Old IoT devices and some low-power devices are not capable of doing encryption or use weak encryption methods like TLSv1.0. What could be the risks of using such devices and unencrypted protocols like ...
1
vote
2answers
72 views

In PubKey Encryption, can a secret encrypted by a public key be validated by same public key?

I'm creating a messaging system where users send encrypted messages encrypted by the receivers public key. The receiver would decrypt the message using his/her private key. As the messaging service, ...
10
votes
1answer
426 views

Firefox bug permits stealing encrypted passwords: How is this possible?

It's my understanding that passwords I save in Firefox's Password Manager are encrypted and that setting a Master Password encrypts the encryption key used in this process. The Google hit for "Does ...
2
votes
0answers
59 views

How does the photoTAN procedure work?

Lately, most banks (at least in Germany) are promoting the photoTAN procedure as the most modern and secure way of authorizing transactions in online banking, see for example here. However, searching ...
-1
votes
2answers
113 views

Bitlocker/Filevault and VeraCrypt together?

I'm researching ways to make the best encryption setup. What are your thoughts on using Bitlocker to fully encrypt a secondary drive, and then utilize Veracrypt to encrypt a container and mount it? ...
0
votes
1answer
82 views

How long would it take to bruteforce a PGP-Encrypted-Mail?

How long would it take to bruteforce a PGP-Encrypted-Mail? If I'm rightly informed, it depends on the bitsize of the encryption Key.
2
votes
0answers
118 views

How does Veracrypt work?

I’m a layman in security and was trying to understand how hashes and encryption algorithms are used in Veracrypt/Truecrypt. Reading the documentation, this is what I understood (please, feel free to ...
0
votes
0answers
41 views

Is there proper end-to-end encryption for calls and meetings on Adobe Connect?

I read that Skype doesn't employ end-to-end encryption, allowing potential monitoring of data by Microsoft, and perhaps U.S. government agencies. So my question, if this is the case, is: does Adobe ...
3
votes
1answer
87 views

How safe is your data when it passes from your laptop to your 4G wifi hotspot?

I would like to create a private mobile hotspot on my smartphone that I will connect to with my laptop to do online banking. My laptop will connect to my smartphone wirelessly, then my smart phone ...
0
votes
0answers
10 views

Is there FHE (fully homomorphic encrpytion) for string/text processing? [migrated]

I had a quick look at FHE libraries like SEAL, HeLib and Palisade and they deal with addition or multiplication of encrypted data. Is there a FHE that deals with string? If no, is that because it is ...
0
votes
0answers
37 views

Store pgp keys in azure key vault [migrated]

I want to transfer encrypted file from SFTP server (Ubuntu) to azure storage using azure data factory pipeline. Customer is using PGP to encrypt file at rest and push them to sftp server. so the file ...
2
votes
1answer
111 views

Encrypting a blob with a password

Is there anything to say against to have an amount of public keys, which encrypt a common password for a blob encrypted? So Users 1,2,3 have all certificates for themselves and can use them to get ...
0
votes
0answers
6 views

How to recover the unreadable files on the mounted standard VeraCrypt container? [migrated]

My hard disk had 3 partitions C, D and E, and I formatted everything on the E drive and extended the size of the D drive using Easeus Partition Master by adding E drive to D. So now the size of the ...
-1
votes
0answers
33 views

Please Comment on this ISP MITM Hardware [duplicate]

I'd like your comment on this article: https://www.wired.com/2010/03/packet-forensics/ At a recent wiretapping convention, however, security researcher Chris Soghoian discovered that a small ...
0
votes
0answers
78 views

Can Google and Apple read Telegram notifications's body?

When using e2e encryption (secret chats), the answer is obviously no (I hope), but I am talking about NOT e2e-encrypted messages, the ones stored in the cloud. I am of course aware that the messages ...
7
votes
3answers
412 views

How long should zip encryption password be for it take 10 years to crack?

I am using zip 3.0.0 on macOS High Sierra and Debian. Here is my zip version on macOS: $ zip --version | head Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license. This is Zip 3.0 (...
1
vote
3answers
77 views

What is the advantage of using a digital signature over simple asymmetric encryption?

If you're sending me a message, you can: a) Encrypt the message using your private key, and I can decrypt is using your public key. b) You can create a digital signature of your message, and then ...
0
votes
0answers
48 views

Is client-side password hashing still useful when using TLS? Is TLS crackable? What about PFS? [duplicate]

Is client-side password hashing still necessary / useful when using TLS? What about TLS protocols with PFS (perfect forward secrecy) like Diffie-Hellman? Let’s say that I’m running a web application ...
1
vote
0answers
11 views

aes-192-cbc - Get the password from Salt, Key, IV, [migrated]

A friend has sent an encrypted file and gave the password to decrypt it. openssl enc -d -aes-192-cbc -in file.tar.gz.enc -p -out file.tar.gz When I use it, I'm getting errors salt=ABC key=DEF iv =...
0
votes
0answers
27 views

I don't want to be a Dave. Is this toy RSA demonstration flawed? [migrated]

I want to present the basics of how RSA works to an audience of beginners in cryptography. The problem is that I am lightyears from being an expert. After reading about how RSA works in wikipedia, ...
3
votes
0answers
85 views

How to verify an email signature from Facebook? [migrated]

Facebook allows users to add OpenPGP public keys to their profile; these keys can be used to "end-to-end" encrypt notification emails sent from Facebook to your preferred email accounts. – ...
1
vote
4answers
102 views

Can application connect to database without exposing password to anyone?

I have a web application. The application needs to connect to the database to read/write information. The database can be accessed with username/password or certificate. Is it possible, somehow, to ...
0
votes
0answers
22 views

How to speed up the database encryption / decryption process in Oracle 11 Standard Edition? [migrated]

I have an 11-year old huge database designed in Oracle 11g Standard Edition. It requires to be encrypted for maximum security. We have used dbms_crypto library to perform the encryption & ...
0
votes
0answers
44 views

What is the purpose of the Volume Master Key in BitLocker?

From this FAQ, I understand that BitLocker uses the following keys to encrypt the hard-drive: Full Volume Encryption Key (FVEK) (used to encrypt raw data; encrypted by the volume master key and ...
0
votes
0answers
63 views

Is there a way to detect network traffic encrypted by MACsec?

We are going to analyse some traffic on our network. Some streams are encrypted and we know that the encrypted protocols aren't IPsec. We suspect it is using MACsec and we are looking for some way to ...
1
vote
1answer
77 views

DLP vs end-to-end messengers

I am interested in how DLP systems work. I have noticed that developers of DLP say that the software can see messenger traffic including end-to-end solutions. I understand MITM, certificate change, ...
1
vote
0answers
36 views

Does TDE not protect against disk theft?

I read the following on Microsoft's site. Can someone please clarify - "With TDE, is the data stored in my data, log, and backup files protected from a disk theft?" Yes, but only if the files ...
0
votes
0answers
8 views

How to obtain volume encryption interoperability between Android and Linux (LUKS) [migrated]

On Linux, I use LUKS to encrypt containers (a filesystem on a file), which is portable as it can be easily copied, stored on any external filesystem, such as FAT or NTFS on external drives or SD cards....
1
vote
1answer
88 views

Why do 256 bits SSL certificate show “256 bytes” for key size?

I've seen many places refer to "256 bits certificates" in SSL encryption. Assuming they are talking about the key size, when I look at these certificates in browser I see 256 bytes instead. I know 1 ...
1
vote
1answer
91 views

Can Android 5's own device encryption mechanism be exploited by a malware?

My wife's phone can't boot into android and instead displays a message that encryption has failed and all data is lost. She did not start the encryption process by herself. Now my question is: can ...
0
votes
0answers
48 views

Asymmetric encryption for short strings and files

I need to encrypt some strings in a database, and contents of files, with an asymmetric key (probably RSA), but possibly symmetrically at some point. Many of these are a few dozen bytes, so overhead ...
0
votes
0answers
39 views

Public blockchain, encrypted blocks with access list; Key revocation; Is it a fit for attribute based cryptography?

I've got the requirement to put the company data onto blockchain for traceability and auditability. Some of that data is public, whilst some of this data is confidential to 1+ (could be many) user ...
0
votes
0answers
10 views

Person I'm Trying to Contact Display PGP key but not their email [migrated]

I am trying to contact someone who displays their PGP key on their website in their 'Contact' section. But they do not state their email there. How can I email them?
0
votes
1answer
84 views

General security of offline databases (like SQLite)

I'm writing a small task management program in Java (not for mobile devices btw), and part of it was kind of a 'data service' to encapsulate and reuse database related code - such as connecting to ...
1
vote
3answers
134 views

Is it really required to encrypt files explicitly our self knowing that S3 will keep everything encrypted?

As AWS S3 already keeps files encrypted. What could be the use case where we need to encrypt our file using any other library explicitly. Is that required in real world application ? Is it really ...
0
votes
1answer
87 views

Is connection established with two way SSL as secure as SSH?

If we establish the connections between two peers using two way SSL with strict configuration(TLS1.3 ,strict cipher etc..) and disabling client initiated re-negotiation. And likewise we establish the ...
0
votes
0answers
42 views

Is a trusted device, on a public network, still vulnerable to a man in the middle attack? [duplicate]

For example, if I am using my personal laptop on a public wifi, and type in the website I want to go to that includes HTTPS, (lets assume https://www.google.com/gmail/) can I reasonably trust that I'm ...
0
votes
0answers
19 views

60 character hex encrypted value with 32 character hex seed [duplicate]

Attempting to recover lost admin passwords from an old industrial control system database. We believe these have been encrypted rather than hashed (at least we know password version 0 for this system ...
1
vote
0answers
85 views

Bluetooth security [closed]

How secure is it to use Bluetooth handsfree? Can't someone eavesdrop the signals and listen to the conversation? Does encryption in Bluetooth secure the information? Can I use anyother tool ...
0
votes
0answers
31 views

Help me to identify what type of string it is? [duplicate]

70373f65f945e5184dcb42793cbe2cddb34248ef172b7ddb5e27467fd8d76314ea8bdeb19226687ac0ca01e646dbe8fdb4dfb2d6816f54b9b500639ac6c3bf056fbd4c45a246bbe66e6fd0ce3730801716b12fff942207933e1bb6386806d476ade6f5b1 ...
0
votes
1answer
52 views

JSON Web Encryption (JWE): should one verify the alg and enc similarly to JWS alg whitelisting?

Use of JWS may suffer from flaws when relying on the "alg" attribute as described here: Critical vulnerabilities in JSON Web Token libraries. The advice is to verify that the signing JWS algorithm is ...
-2
votes
0answers
34 views

How can I determine which algorithm a certificate implements for data encryption? [duplicate]

I'm attempting to discover which encryption algorithm(s) are available on a particular Certificate. Is this possible? I have examined some certs in CertMgr and I see things like: Signature ...
0
votes
1answer
116 views

Is asymmetric encryption is safe on the Internet? Can't a hacker just pose as a valid user?

When I read the RSA asymmetric encryption: In the environment: Rules are: blue boy, red girl, and black men. blue boy and red girl all have their own public key (blue) and private key (red). In ...
1
vote
2answers
214 views

Should Encrypted Data Not be Obfuscated

TLDR; Are there precedents saying not to obfuscate encrypted data? If I'm using some standard, and a client is using the same standard, the only thing we pass back and forth is the key. This is how ...