Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0 votes
1 answer
62 views

Feedback wanted regarding my functions to Encrypt/Decrypt data using PHP (Openssl) [closed]

I am creating a web app (HTML, CSS, JavaScript, PHP & MySQL) where the users register, and only logged users can create and save personal Notes (encrypted) in a MySQL Server database I have for ...
  • 9
0 votes
0 answers
48 views

My script to Encrypt/Decrypt data using PHP [closed]

I made these scripts to Encrypt/Decrypt data, example: Messages or a simple string and be able to transform the encrypted data to plain text again. At the end, I am going to explain why I think these ...
  • 9
3 votes
1 answer
26 views

Storage options would give the organization the best chance of recovering data

I am studying information security, I have a question that I need help with. Which of the following storage options would give the organization the best chance of recovering data? A. Encrypted ...
0 votes
0 answers
30 views

Can you require both a password and a smart card to unlock a bitlocker drive?

I seen you can associate a smart card when you encrypt the drive with bitlocker, but I am not sure if ... You can unlock with a smart card as an alternative to your password that you set (not the ...
  • 140
-3 votes
3 answers
136 views

If all encryption schemes are eventually broken, shouldn't we avoid sending encrypted archives to a remote server?

I need to protect a few gigabytes of private information. I had the idea of encrypting them and placing them in a 7z archive, which I would then upload hourly to a cloud storage provider. Then I ...
0 votes
0 answers
21 views

disk or file encryption using the TPM2_EncryptDecrypt2 command of the TPM

Are there any disk/file encryption methods that utilize the TPM2_EncryptDecrypt2 command? All TPM disk encryption tutorials I can find use the TPM to secure the disk encryption key, and not use the ...
  • 113
-1 votes
2 answers
100 views

Is end-to-end encryption really secure?

If a software uses end-to-end encryption and the encryption key of a client never leaves the device, isn't it still relatively "simple" to get the encryption keys of clients? A hacker just ...
  • 99
0 votes
2 answers
85 views

Asymmetrically Sign Cleartext before Symmetrically Encrypting it

So, there's that scenario, where I do want to encrypt data which is shared among a group of users. Every user has their own key-pair (RSA-OAEP) where the public key is known to everyone else on the ...
  • 233
0 votes
0 answers
26 views

Using different public keys on the same (encrypted) column

Generally, when encrypting sensitive-data columns, we use the same public key for all the rows. I have noticed that it is possible to use different public keys for different rows. For example, ...
  • 413
2 votes
1 answer
102 views

A web browser localy encrypted by default

Some years ago, I've found a web browser which I can't remember the name. It had pretty impressive security standards. For example: Symmetric encryption key (password) is mandatory for saving ...
0 votes
1 answer
43 views

Generating AES 256 key from ECDH P-384

Is there anything wrong with hashing(with SHA256) the shared secret generated by ECDH that is 384 bits long and using that as the AES key? Is there a difference between that and, say, truncating the ...
1 vote
1 answer
97 views

Storing encrypted password in database but decrypt it on the client side

Language used is Javascript. For context, I am making a password manager where users can store different accounts of service and their passwords. The idea was to store multiple encrypted passwords in ...
  • 11
1 vote
1 answer
64 views

Best practice for sharing and storing encrypted data between server and client

I'm working on a system that shares data between a client and server. The end goal of this system is to store server-encrypted data on the client's hard drive, using keys generated by the server. the ...
0 votes
0 answers
58 views

Is using the CSN of a mifare desfire EV2 safe?

From what I know, Mifare Classic cards are easy to copy/clone using a device such as a flipperzero, and it has to do with authentication using the CSN (card serial number) However, let's say that a ...
  • 1
0 votes
0 answers
42 views

Build Ransomware analysis lab

Could somebody help me with the following questions: Does a sandbox adds extra security over a virtual machine host-guest interaction, or does it only provide a security analysis (API call sequences ...
  • 35
0 votes
0 answers
25 views

External and internal OS whole disk encryption using TPM 2.0 module for centos

I am new to disk encryption, I have gone through the encryption topic basic, need to do whole disk encryption using TPM2.0 on cent OS server along with some external HDD or ssd disk attached to the ...
0 votes
0 answers
13 views

How to determine what type of encoding/encryption has been used helpe me? [duplicate]

LVHeZ6Ynv1BT4xSKrNoE8+QiNpK+BXMealZLa9lNisI+pmFtWhbaN4GfpHB2/18TNtfdIs8Ej/GG/te1d46sAuzXeUgyw1F5iM8WU0GHsH7/91z8f0CLDabg6Y50tcE2E1sA10Lqv/qI6O/...
2 votes
2 answers
2k views

Signal — Can message previews of the messages you send be disable in the chats’ list of your addressee?

Premise Signal is armed with measures to instill a sense of a privacy in users by preventing undisclosed screenshooting and screencasting message threads, and by enabling the sender to set their text, ...
0 votes
1 answer
104 views

How does Ransomware encrypt files? [duplicate]

I have a question about how ransomware works. According to the authors of this paper: https://www.cise.ufl.edu/~traynor/papers/scaife-icdcs16.pdf (page 2 - 3) , class C is: ransomware reads the ...
1 vote
2 answers
75 views

Why not use the KEK directly to encrypt data?

This answer seems to suggest that the KEK (Key Encrypting Key) can be used to securely encrypt data. Why have a DEK (Data Encryption Key) at all?
0 votes
0 answers
15 views

which encryption method is it? [duplicate]

i have a file and i want to edit it to do some changes but i think the file is encrypted anybody knows the encryption method? thanks ELF > @æ@ @ F¾ @ 8 @ 0 / @ @ @ @ @ ...
2 votes
1 answer
202 views

Do wireless (2.4 ghz) headphones use encryption?

I've noticed that there are two types of wireless headphones / headsets / earbuds on the market – bluetooth and 2.4 GHz wireless (via proprietary dongles). Good example of headset that has both – ...
  • 131
2 votes
0 answers
54 views

Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?

I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
0 votes
0 answers
30 views

Providing encryption and password for an IOT device over gRPC

I've been breaking my head over how to do this, as it doesn't seem to fit any example I could find online. My IOT device servers will run on the client network and may be accessed over it or over the ...
  • 101
1 vote
2 answers
70 views

In client-side encryption, if the server provides the encryption/decryption methods, is it really "client-side"?

Google recently introduced the client-side encryption functionality in several services of Google Workspace (see https://support.google.com/a/answer/10741897?hl=en). The purpose of client-side ...
user avatar
1 vote
0 answers
36 views

Open Veracrypt container (password+keyfile) without password? [duplicate]

I lost my password for encrypted disk. Is there a way to do something without dumb cracking? Maybe recovery mode? Because I just lost 50% of my auth data...?
0 votes
0 answers
33 views

ECDH or DH sharing using onion routing

I have come up with a new ECDH sharing method, where I give the common key to dozens of people in advance and then randomly select about 8 people to share the ECDH with whom I want to talk by relaying ...
1 vote
1 answer
39 views

Is there a way someone can read arrays of bytes which I send with java sockets while using TLS 1.2?

If anyone can answer me pls I just need an anwer. I know thus isn't maybe right place for this question I created chatting app with sockets in Java 8 and i use TLS 1.2 My question is: Is there any way ...
1 vote
1 answer
43 views

Guess encryption algo and parameters from pair of raw/encrypted text

I have a several tuples of raw and encrypted text from a blackbox service. What would be the most reasonable approach to guess/bruteforce the encryption algorithm and parameters (IV, key) that are ...
0 votes
0 answers
66 views

Are there any attacks against TLS 1.1 encryption? [duplicate]

I've been researching the main TLS 1.1 vulnerabilities, and from what I've seen, TLS 1.2 only improves the cryptographic hash functions, because TLS s 1.1 are broken. If these hash functions are ...
  • 13
0 votes
2 answers
85 views

Verifying that certain data is encrypted (or at least indistinguishable from random data)

Question The question is in the title, but here are more details: I want my server to have an upload endpoint (single POST for small data or multipart for larger data) where clients can upload data. ...
0 votes
0 answers
76 views

Is Synology's Active Backup for Business Destination Encryption Secure or Snake Oil?

Synology's Active Backup for Business has a feature for Destination Encryption which only seems to work with BTRFS. It works so that you have to set it up when creating the BTRFS storage. At this ...
  • 203
0 votes
1 answer
39 views

Understanding AWS/KMS Keyring Encryption, Genkeys and Plaintext Data Keys

I'm reading up on the AWS Encryption SDK (JavaScript flavor but this is the same for Python and Java, and my question is really on the underlying security principles, which are language agnostic). On ...
2 votes
3 answers
107 views

How to build a PSK website

Pre-Shared Key (PSK) with simple symmetric encryption is a popular way of solving both client and server authentication when SSL cannot be used for some reason (for example, can't trust or deal with ...
1 vote
1 answer
113 views

Android File Encryption without screen lock

I am trying to understand the FBE Key generation and verification process at every boot. My device is going to be handled without a lock screen (Android 11 with FBE + Metadata Encryption Enabled), so ...
0 votes
1 answer
33 views

e-signature + digital signature aws md5

I am trying to implement e-signature + digital signature to secure the e-signed document from altered, something like Docusign. I am using AWS s3 to store the documents. My question are: Is MD5 (...
1 vote
0 answers
31 views

Symmetric key importance During encrypt and decrypt

I am performing a small command line operation the goal is to generate a symmetric key using openssl and store the key in TPM FAPI keystore. Issue--> after modifying the symmetric key , the ...
  • 151
1 vote
1 answer
161 views

SNI visible in HTTP/3, QUIC connection?

Client Hello should be encrypted in HTTP/3 and QUIC, but in Wireshark I can still see SNI of the QUIC connection when using DoH. The names should be encrypted inside the Handshake/CRYPTO packets. is ...
user avatar
0 votes
1 answer
94 views

Storing a key in a reasonably safe way

I’m developing an application that will run on a private, on premises network. The application will be accepting requests through an API, read some encrypted data from the disk, decrypt them, do some ...
1 vote
0 answers
45 views

Enabling ECDH KeyExchangeAlgorithm in Windows Schannel while disabling CBC based ciphersuites

On our Windows Servers, we have disabled the following key exchange algorithms in registry SCHANNEL\KeyExchangeAlgorithms\ECDH SCHANNEL\KeyExchangeAlgorithms\PKCS This leaves us with only 2 ...
  • 111
1 vote
1 answer
83 views

Can someone access my veracrypt quick formatted container's files more easily than if I'd performed a full format?

I'd like to perform a quick format on my external HDD through veracrypt but I'm not sure if a quick format will allow an outsider to download my data from the HDD with ease compared to a full format. ...
0 votes
2 answers
188 views

Storing sensitive data in Local Storage with encryption?

I have a notes app that's offline-first and syncs with remote database when online. Currently, when a user creates a note, I'm encrypting it with AES. I ask the user to enter their decryption ...
0 votes
1 answer
85 views

Signed but Unencrypted HTTP Traffic

A lot of the web is moving to HTTPS, which to my understanding does two things: Making the data unreadable by third parties, and verifying it's coming from the expected sender. The latter seems ...
0 votes
2 answers
55 views

Ransomware - Decrypt partially encrypted file

I just read about the lockbit ransomware, which is widely used. What really surprised me is that the ransomware only encrypts the first 4kb of each file (for better speed, considering it will encrypt ...
0 votes
2 answers
151 views

Ransomware public key: can I find the respective private key?

I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded). Is it possible to extract the private key from the public key?
1 vote
1 answer
119 views

How can I find out if a wireless keyboard is encrypted / secure?

I bought wireless keyboards from Ali Express (brand is Royal Kludge) that connect to the pc using either Bluetooth or a 2.4GHz USB dongle, and I want to make sure no one can read my keystrokes when I ...
  • 663
1 vote
1 answer
61 views

SAML AuthnRequest encryption

I would like to make sure that SAML login is secure. Company mandates to sign and encrypt SAML, and most of the assertions are encrypted and signed already, although I have received an answer from a ...
1 vote
1 answer
72 views

Should old versions of TLS be disabled at the OS level and the server level?

My environment has a variety of operating systems (Windows, Linux, etc.), servers and applications. Infrastructure scans are showing old versions of TLS that need to be disabled at the OS level, while ...
  • 133
6 votes
2 answers
1k views

What is the function of Intel's Total Memory Encryption (TME)?

https://edc.intel.com/content/www/us/en/design/ipla/software-development-platforms/client/platforms/alder-lake-desktop/12th-generation-intel-core-processors-datasheet-volume-1-of-2/002/intel-multi-key-...
0 votes
0 answers
52 views

Securing the Server Hello in TLS 1.3

I've been trying to better understand TLS, and am stuck on one point with TLS 1.3. I understand that the Client makes an assumption regarding which Cipher Suite the Server will select, and includes a ...

1
2 3 4 5
115