Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

1
vote
0answers
24 views

Name of this cipher/encoding method?

I see a common method of encoding in PHP malware where there's some bytes of key, which gets used to decode that many bytes of encoded text. Decoded bytes get appended to the key on the fly. The ...
0
votes
1answer
49 views

dm-crypt/LUKS: one-time password

I've setup arch using dm-crypt / luks, with a passphrase and a key, lost one of them will fail to login. But I feel I need more secure of passphrase, how to setup dm-crypt / luks that has one-time ...
-1
votes
0answers
23 views

How to calculate WPA2 handshake offline? [on hold]

How to calculate WPA2 handshake offline if I have the Mac address and the password thanks
0
votes
0answers
13 views

Two-factor authentication on Galaxy Watch - should secrets be encrypted, and is this SQLite example secure?

I recently got a Galaxy Watch and to get acquainted with developing apps for it I'm writing a simple two factor authenticator to generate TOTP codes from entered secrets using the Google Authenticator ...
1
vote
0answers
15 views

Where to store encryption based tokens in Encryption based Token Pattern?

Reading OWASP encrypted tokens pattern they describe the flow as follow: After successful authentication, the server generates a unique token comprised of the user's ID, a timestamp value and a ...
0
votes
1answer
29 views

Difference in Results: a Query to DuckDuckGo and the Same Query to Google.com [on hold]

Why? FAQ does not adequately cover: Result based on “Amanpour and friends Brexit:” Using DuckDuckGo: —————— #1 Result From DuckDuckGo: “Leftist Shill TRAITOR WITCH, Christiane Amanpour on BREXIT” (...
0
votes
1answer
33 views

How does key exchange work? Using symmetric algorithm such as AES

I was wondering how does the sender give the encrypted file and the key to the receiver securely? Particularly on situations where the sender doesnt meet with the receiver (through email or through ...
-1
votes
1answer
34 views

Is a md5 actually unable to be reversed? [duplicate]

If a md5 is one way and supposedly unable to be reversed why do we still have large data breeches with user names and passwords. Are these companies storing passwords in plain text?
-1
votes
0answers
18 views

Secret conversation identity key

On my messenger I have one encrypted key code. On the messenger that I and my husband share there are three encrypted keys. What is this mean? And do you receive a new key identity each time you begin ...
0
votes
1answer
71 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
23
votes
1answer
304 views

Is a password manager better than an encrypted file for storing passwords?

For any passwords other than websites I log into regularly (such as Gmail, Facebook, etc.), I use apg to generate a random 20 character password. I then add that password and a username or email ...
-2
votes
1answer
32 views

How to identify the private key encryption algorithm using OpenSSL API? [on hold]

I am creating a C++ application which involves loading in private key files (RSA/DSA/DH) into their respective class containers. Is there an OpenSSL function that can take a file as a parameter and ...
0
votes
0answers
9 views

ECC protocol practical implementation in python [migrated]

My goal is to code a program for ECC implementation. Right now i am at the basics and i am trying to follow an example found on the internet. I will give the code below. The problem is the after ...
-3
votes
0answers
54 views

How am I writing encrypted language naturally without software/computer [closed]

Ghcgibh. H can cc hc h This is not a joke, should I be concerned? I can use this method to find any information I need, but not necessarily what I want. yjctv yhfhch xt
2
votes
1answer
108 views

How does wireless keyboards' encryption prevent frequency analysis?

I've found very little information on this topic after much googling. The only partial answer I found was by Microsoft: Microsoft_AES_Technical_Factsheet By adding random data to each message, each ...
2
votes
3answers
102 views

Encryption Key vs. One-Time Pad Brute Force

How does an attacker know when they've cracked a traditional encryption key? Wikipedia describes the one-time pad: A 140 character one-time-pad-encoded string subjected to a brute-force attack ...
2
votes
1answer
22 views

What attack vectors does AWS SSE-S3 help mitigate?

Reading into the various SSE options on S3, I'm can't understand the following: What exactly does the SSE-S3 (fully-managed, transparent at-rest encryption) protect you against? I can only think of ...
0
votes
0answers
25 views

Unkown encryption type? [duplicate]

200 character long string ...
0
votes
0answers
24 views

How to decrypt an openssl_encrypt() encrypted value using MySQL query? [closed]

If I am using the following php script to encrypt a field in my database: <?php require_once('../api.php'); $newApi = new api(); $conn = $newApi->connection(); //$key previously generated ...
2
votes
1answer
81 views

Asymmetric public-key cryptography: can either key be used to encrypt or decrypt?

Key exchange describes a public key encrypting plaintext and the private key decrypting, while in digital signatures the reverse is true where the private key is used to encrypt a hash that the ...
1
vote
4answers
175 views

If I have the input and output, can I know the encryption technique?

I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
1
vote
2answers
112 views

KeePassXC for managing passwords, threat model: Entire world actively trying to decrypt my password given the file

I use KeePassXC on a Linux distribution for managing my passwords. For the sake of the argument, let's assume that the file is publicly accessible, and the entire world's number 1 priority for the ...
0
votes
1answer
42 views

What security arrangements do I need to think about when passing a password through my site server

I want to automate some of my home admin. I'm writing a small-ish website, to do that. Written in C#/.NET, hosted on Azure, backed by an Azure SQL DB, codebase available publicly on GitHub. One of ...
0
votes
1answer
76 views

About file encryption [closed]

I'm here to consult those who know more about encryption issues, since I do not have much knowledge on the subject. A few years ago, I acquired a program that allows me to store information in a ...
-5
votes
1answer
66 views

Can someone tell me what is this encryption method? [duplicate]

DQUC//S+y9uZxanuAS0WTQBlAG4AZQBkAHwBZQByACAAegBhAGQAYQBEASAAVwBpAG4AZABvAHcAcwAC3/...
1
vote
0answers
58 views

Is decryption in the Browser or on the Server better?

I am wondering if it is better to send encrypted data to the browser from the database and have javascript decrypt the data or send a password to a php file (that verifies it with a salt and hash) ...
0
votes
0answers
20 views

How to read Security Technical Details for Connection Encrypted [duplicate]

I'm doing some research on encryptions websites and could use some help. How do you read/interpret this connection detail: Connection Encrypted (TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_256 BIT ...
0
votes
0answers
16 views

How to determine what type of encoding/encryption has been used?Please Any Suggestion [duplicate]

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format ()^$!%^$#&%$!$($)...
2
votes
1answer
92 views

If PGP is 2048 or 4098, then what is 128-bit encryption? [duplicate]

PGP is 2048 bit encryption? That a whole lot more than 128 bits. But, I thought 128 bits is more "serious" and "legit"
0
votes
1answer
43 views

I can't get gpg-zip to work. What am I doing wrong?

I haven't used gpg-zip before. I am trying to compress and encrypt a directory with more than 200 files. I did a test run with a smaller directory containing just a dozen PDFs in it, a folder I'll ...
0
votes
0answers
33 views

X.509 Certitificate Authentication between Client / Server (REST Implementation Model)

Can you please list of advantages /disadvantages on X509 Certificate based authentication instead of traditional username/password model ? Architecture Scenario : Lets suppose i have Client ...
1
vote
0answers
26 views

How to protect data at rest in a small web application where it’s hard to protect keys

A small web application typically consists of a web server (e.g. Apache or nginx) and a database server (e.g. MySQL or PostgreSQL). Often, the two are hosted on a single physical server or on a ...
-2
votes
1answer
101 views

Is it possible for the government to recover data from a encrypted ssd (veracrypt) that was wiped

Just as the title states I'm wondering if its possible for the government to recover data from a encrypted ssd that was wiped? Thanks in advance!
2
votes
1answer
71 views

Can Kerberos encrypt network traffic between servers?

Working in a coporate environment, which uses Active Directory, I overheard someone making a comment stated the Kerberos protcol can be used to encrypt network traffic between Windows servers. Can ...
3
votes
1answer
43 views

Can information somehow be secured from the host on a KVM guest?

With KVM guest systems so prevalent now, I was wondering if there is any merit in using LUKS encrypted storage, as the guest will usually be always on, so the information is always accessible ...
0
votes
1answer
45 views

Disabling RC4 HMAC encryption in Windows Active Directory prevents current Kerberos attacks?

Disabling RC4 HMAC encryption in Windows Active Directory prevents current Kerberos attacks? I understand that RC4 HMAC encryption is dangerous in Windows Active Directory, since it relies on the ...
4
votes
2answers
390 views

A site supports Public key length of 256 bits while best practice is 1024+ - what does this mean?

Given that this is asymmetric cryptography with private/public key, I am not sure if reduced bit length is breakable easier than longer keys. I understand that the key population is reduced (hence ...
1
vote
1answer
39 views

When is Veracrypt an acceptable solution?

To manage security risks effectively, a non-profit organization has the following high level requirements; Limit access to authorized staff. Sensitive data is only accessible to authorized staff. ...
1
vote
1answer
84 views

Should hard drives be encrypted prior to an operating system installation?

When employing full disk encryption, should hard drives be encrypted prior or post the installation of an operating system? If the former, is this supported by operating systems such as Microsoft ...
3
votes
3answers
204 views

A protocol for encrypting the data on the server, but with a password on a mobile device

I want to implement the following encryption scheme. The data is created and stored on a web server, but related to some user of the system (i.e. it is entered "on behalf" of the user). Both ...
3
votes
1answer
71 views

Encrypt User specific Information without a password

Given scenario: I have an application (NodeJS) running on Heroku, the database is RDS on Amazon and I use Auth0 for authentication. I don't have access to passwords of the users, some users use social ...
2
votes
1answer
101 views

AES/Rijndael Encryption Does block size matter for security?

Would AES with a 256-bit block size be more secure than a 128-bit block size? I'm curious if block size really makes something more secure. I'm dealing with a third party to use their API and they ...
0
votes
1answer
69 views

Using the filehash as the key [closed]

I want to ensure that everyone who encrypts a given file gets the same encrypted file without knowing the password. So, my idea was the following: hash the file encrypt the file (e.g. AES) with the ...
8
votes
3answers
290 views

Where would you recommend me to store a Keepass-file?

Where do you store the KeePass-DB? Where would you recommend me to store a Keepass-file? Usually I have my personal documents in my cloud account - but i am not sure if this is safe. Would it be ...
0
votes
2answers
64 views

Hiding the salt for key derivations functions

what I Know: Password based key derivation functions generate a key suitable for ciphers from a given password. It relies only on the original password being kept secret. The purpose of the salt is ...
3
votes
1answer
71 views

How much less secure is a password with a repetitive pattern of characters?

I want to make sure my password is very difficult to bruteforce but also easy to remember and convenient. So my idea is to just use a short password and repeat it a few times like this: ...
1
vote
1answer
68 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
1
vote
1answer
78 views

OpenSSL - how to renew certificates in production?

Have a number of private network services deployed on different nodes outside of optionally encrypted mesh systems, like Docker or Consul. The services have high value and should communicate via TLS ...
2
votes
1answer
32 views

What options are there to clone or image a disk to an encrypted drive?

To ensure that cloned or image disks remain secure and are not accessible by others, there is a requirement to have these stored on encrypted drives. When attempting to use tools such as Macrium ...
0
votes
3answers
84 views

Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]

Title says it all. If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?