Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

0
votes
0answers
14 views

How to use Username/Password in Signal Protocol

I am trying to create a communication app from scratch (more like an html parsed messaging app) using the Signal protocol. While I do have lot to of programming experience, I am a crypto novice and ...
0
votes
0answers
11 views

Single vs. multiple synchronous keys to encrypt list for multiple users to decrypt

I've found a few questions which address a single document that needs decryption by multiple users, but I would like to encrypt a list of words stored on mySQL datbases using PhP in such a way that ...
1
vote
1answer
52 views

ChaCha20Poly1305 with empty AAD

Is it safe to use ChaCha20Poly1305 with empty AAD? I tried to implement E2E encryption between two clients in network.
1
vote
1answer
74 views

Can we define a single immutant state of a device (modern computers at least) to derive a key from?

Please be open and bear with me, I read a lot about encryption, but practiced very little. I want to write a simple application that uses common encryption algorithms, but based on a derived key ...
0
votes
0answers
33 views

How does mbedtls RSA work when using raw keys and input for PK encryption?

I am trying to get mbedtls RSA to work on x86. I have test data obtained from an online RSA calculator, and I want to feed raw memory into RSA to encrypt the data. I am making the following calls: //...
0
votes
1answer
80 views

Understand the “Windows Key Store”

I work in a enterprise environment and I often hear the use of the "Windows Key Store" to store various keys including symmetric. I do understand there is a "Windows Certificate Store" which as the ...
-4
votes
0answers
32 views

How to decode this long string of decimals? [duplicate]

69299350231777143073933039096647200271721308179581238245359016367359518575223628522640775213009798215776023461621242930796666980119825788275816258161588748921874117803012120359108969918907476169787297....
1
vote
1answer
75 views

Isn't it almost always not helpful to just change the password of a container after a leak?

Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
0
votes
0answers
28 views

Is it still not advisable to use recent versions of EncFS >1.7 to encrypt Dropbox?

I'd like to use EncFS to encrypt files synced with Dropbox. Unfortunately, its Wikipedia page https://en.wikipedia.org/wiki/EncFS mentions security concerns from an audit of version 1.7: EncFS is ...
-2
votes
0answers
82 views

I would like to crack a very mysterious code but have no idea what algorithm it is or who made it [on hold]

Here is the text message my friend got, all of which is encrypted in some way. Here is a transcript: V-X4IÖøäV ≡5≡%aQ7oH£ivMÆ7iÖæØ$ ¤Φ:b£fÆìèæ4e¡L#ΨLÆ: ÜΘ¥BÅZ2fUkV-Θ9 DΩ¥ΦøæΔA¤ Sb)Σ:oZéìDX< ph)¥...
2
votes
0answers
23 views

Best luks setup disk [duplicate]

I want to encrypt my disk but I want to know what is the best configuration, I currently use ths: cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --key-file=- --hash whirlpool --iter-time ...
0
votes
1answer
169 views

How do I decrypt a .dmg image if I know details about the password?

I encrypted a folder and forgot to save the password. I remember how long I made the password (40 characters) I know the last two characters (40) I don't know the first 38 characters but I do know ...
0
votes
0answers
45 views

IP instead of domain name for non-public web client-server application

I am building an infrastucture that needs communication between a client and a server connected to the internet network. It is not a public web application, moreover privacy or any kind of encryption ...
22
votes
2answers
7k views

Do Veracrypt encrypted volumes have any kind of brute force protection?

I have a 10mb encrypted volume which I made with Veracrypt and was planning to upload it to the internet. I have a pretty strong password but was worried about its protection against brute force ...
1
vote
1answer
39 views

Which KEK can wrap AES, RSA and ECDSA keys securely?

If I have AES256, RSA4K and ECDSA-512 keys as CEKs, which I need to securely store, what KEK can I use to securely wrap these without reducing the bit strength? I am aware that an AES256 key can wrap ...
1
vote
1answer
54 views

Is my method of online banking from work secure? Chromebook + 4G + VPN

I need to do various online banking activities from work, about once a month. I have a Chromebook that I use exclusively for this task. I don't navigate to any other websites on it, or install any ...
-1
votes
0answers
51 views

How to reverse this VB code [closed]

I have a vb or a c# file am confused what language
1
vote
1answer
57 views

Does creating new subkeys change an existing master key?

I have a PGP master public / private key pair. I have created 3 subkeys for it. I want to add 3 more subkeys to this master key. Would doing so change my public and private keys?
0
votes
1answer
66 views

Validating a RSA public key

A a total noob to cryptography. Situation: Given only the public_key i need to know if it is valid; in that, if i use it to encrypt say a form submission, the form data will actually be encrypted. ...
3
votes
1answer
132 views

What are the security risks to displaying an image loaded over http in a page loaded over https?

I'm developing a PWA in which part of the app displays the content of emails to the user. However, many of the image URL's that are in the emails come from http domains, and therefore do not load in a ...
-2
votes
0answers
28 views

What type of encryption is being used? [duplicate]

«¦ ý³²µ²³¢ø The prompt says that it is vulnerable to brute force attacks but I'm not sure what type it is
1
vote
2answers
81 views

How do you use initialization vector? [duplicate]

My application needs to store some sensitive information. I want to encrypt the data before I store it. At some point in the future, I want to be able to read and decrypt all the data. For a ...
0
votes
1answer
72 views

What kind of hash does the VeraCrypt tool use?

Whirlpool? SHA-512? Or something completely different?
0
votes
1answer
67 views

For encrypted chat app, how can I store sent messages so that they are encrypted but still can be viewed by the sender?

Actual implimentaton will be in android but this is more about general security than actual implimentaton details. I'm making an end-to-end encrypted chat app and I know that in order to send ...
0
votes
0answers
6 views

How to encrypt whole folder in Ubuntu? [migrated]

I want to upload a folder to Google Drive. I don't want those Google bots to read my folder and files to make their company smarter (I assumed here that they read and learn from user's files too). ...
1
vote
1answer
153 views

How secure is full-disk encryption technology on LineageOS, or Android phones in general?

We're attempting to assess the information security on our mobile devices, and information seems rather varied on the question of encryption. Is the encryption technology employed by Android-based ...
0
votes
2answers
56 views

Encrypted folder with different access rights for different users

With the GDPR (General Data Protection Regulation of EU) comes the necessity for many companies to store certain personal data (CVs, certificates, passport copies, etc.) centrally and encrypted. The ...
1
vote
0answers
30 views

What is the default cipher for SSL connections in Azure for MariaDB?

According to Microsoft's Documentation, Azure should be configured to use SSL for connections. In regards to default settings, they state the following: By default, the database service should be ...
1
vote
2answers
154 views

Letting client encrypt his/her data. How to ensure the client doesn't lose his/her private data?

I am designing a web service where the client is allowed to encrypt his own data on client-side software & then send it to our server, so they can be sure their data is private on our side. Then, ...
1
vote
2answers
89 views

Is there any CBC based ciphersuite which are secure for known attacks like LUCKY13?

If you select the modern profile in https://mozilla.github.io/server-side-tls/ssl-config-generator/ , you can see it recommends to enable following four cipher suites also. ECDHE-ECDSA-AES256-SHA384 ...
0
votes
0answers
16 views

Whats this Encryption? [duplicate]

Anybody know whats this encryption ?? H4sIAAAAAAAAAH1Ry27bMBAE2qaA/oEFeE tkNQjdoEeKJt29LQqyU7TG2MxskyFMSTLdvL1pZUei/Cys5yZ3QH2E43SIBx53vHOP03Gtk0m9bbaGF6z30llTPOwwMYMGQwZc ...
1
vote
2answers
62 views

Is there a SAML scenario where you would need an encrypted assertion if you are using SSL?

I'm trying to understand the benefits of encrypting assertions in SAML requests, especially if those requests travel over SSL. As I have read, this isn't required. After authentication, if a service ...
0
votes
1answer
58 views

Can I use HTTPS to pass a symmetric key used for encrypting TCP packets?

I am making a multiplayer game for fun and wish to keep it secure. The client is written in C# and the server in node.js with a working connection over TCP at the moment. I am new to this subject, and ...
1
vote
1answer
95 views

Send and receive files in an air-gapped system

Is it possible to have an air-gapped system which can send and receive files? From a high level perspective, I can't seem to figure out how this can work and I am starting to think it is impossible. ...
69
votes
4answers
15k views

Why is so much ransomware breakable?

The site: https://www.nomoreransom.org/ offers many decrypter tools for ransomware. But why? It shouldn't be so hard to use the Windows Crypto API (e.g. just google "create AES Key in Windows") to ...
0
votes
0answers
39 views

Disk Encryption VS SQL TDE Encryption

I am trying to understand what would be the benefit of using SQL TDE on top of underlying disk encryption. My understanding is that disk encryption will prevent malicious users pulling out the disk ...
0
votes
0answers
131 views

Secure Http Connection With Authentication Header

I am trying to create an authentication header algorithm that can be used for authentication on HTTP server. Not sure it is good but it seems OK to me. I also used similar approaches for previous WS ...
0
votes
1answer
149 views

Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?

TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool? My threat model is archiving and backing up important and private files. Files will be stored in many places ...
1
vote
0answers
55 views

How to check if “data packet head” is encrypted by VPN?

I found here: Deep Packet Inspection (DPI) allows ISPs to identify the source of data via inference based on the data packet head. A good VPN will protect against this, so even the data packet head ...
39
votes
3answers
7k views

Does Lawful Interception of 4G / the proposed 5G provide a back door for hackers as well?

A common saying among people in the field of cryptography and security is that when providing a back door to law enforcement, you also provide a back door for hackers. I was trying to examine the ...
12
votes
3answers
3k views

Would encrypting a database protect against a compromised admin account?

I was discussing with someone ways to prevent data disclosure from a compromised admin account on a database server. The other person proposed encrypting the data at rest within the database. It ...
1
vote
0answers
27 views

Were PGP/MIME and PGP/Inline equally affected by EFAIL?

I saw this question about which out of those two protocols is more secure. The question was from 2016, but Efail was discovered late 2017. I understand that some email programs were affected while ...
1
vote
0answers
36 views

LTE data link security and integrity

I am studying LTE data link security features and have a few questions. As I understand there are 3 choices for ciphering algorithms 128-EIA1/2/3 and 3 for integrity - 128-EEA1/2/3. Which of them is ...
4
votes
5answers
188 views

AES256 with 128 bit key

A popular zero-knowledge file sharing site uses a 128-bit master key for encryption. However, they claim to be using AES256. When questioned, they explained the master key is widened using PBKDF2 ...
0
votes
0answers
54 views

TPM 2.0 Bus Encryption / Decryption?

It seems that in TPM 2.0 a call to TPM2_StartAuthSession() is able to start a decrypt/encrypt session. However, the caller forwards all the key generation material to the TPM in plaintext, and then ...
0
votes
0answers
32 views

Protect transaction counter agains roll-back attack

I am designing a application which should be used for transaction processing so required very good performance. There are requirements that transactions originating from the same client must have ...
-3
votes
1answer
85 views

if i send a mail on protonmail and close account straight away is it trackable [closed]

I sent an email via protonmail. I then closed my account. Can you trace my email from this?
1
vote
1answer
75 views

Null IV for AES CBC vs GCM [duplicate]

If we agree that using a null IV for AES in CBC and GCM mode is not a good idea, but for whatever reason one is encouraged to use a null vector for several messages using the same key, is there a "...
0
votes
1answer
66 views

Is it possible to add virus to an encrypted file?

If an attacker has physical access to your computer, could he modify an encrypted file as such that when you move the file to another computer and decrypt it there this new computer which you intended ...
0
votes
1answer
68 views

is there any need to encrypt sensitive images in a database?

I have a project that requires users to submit a photo of a driver's license as proof of identity. This image just needs to be seen once by an administrator, and has no use after their id is verified. ...