Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1 vote
2 answers
29 views

Should deprecated versions of TLS not be used

I'm setting up an server, the default configurations allow for connections with deprecated TLS versions. Should I remove deprecated TLS versions from my server? What is the difference between a ...
user avatar
  • 225
-1 votes
0 answers
44 views

Encryption database on app that runs on client side

I'm having a discussion at work and I want to know the opinion of the community and know if I'm wrong or not. We have a product that runs on client computers (on-premises) and it uses a local database ...
user avatar
  • 1
0 votes
0 answers
15 views

Storing strings in a Database that are only visible to their owner who stored them when they were logged in

In my application, logged-in users create some strings, and those strings are stored in the Postgres database. But, because they are in plaintext, their values are visible to me, as I have access to ...
user avatar
1 vote
1 answer
85 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
user avatar
0 votes
0 answers
19 views

Question about video downloader websites and encrypted response [closed]

I am interested in to find out how download video from different social networks websites work. As I understand, we sending post request with video url, after that, on the backend we somehow get this ...
user avatar
0 votes
2 answers
50 views

How does bitlocker work when unlocking a removable drive on another PC using a password?

Here's the scenario: I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC. Surprisingly, when I do this, all ...
user avatar
  • 113
-1 votes
1 answer
52 views

What are symmetric and asymmetric encryption and what would be a good example from daily life? [duplicate]

I understand that to "encrypt" something means to "code" it, to make it understandable for two parties, giver and receiver and generally only for them, but I don't know what it ...
user avatar
  • 5
0 votes
1 answer
64 views

P-384 vs. SHA384

Forgive my inexperience with encryption, I've been researching this for the better part of the morning and still cannot find a smoking gun answer. A vendor is requesting that we verify a website we ...
user avatar
  • 1
0 votes
2 answers
67 views

Does my receiver have a public key for email encryption?

I'm using an email service with encryption option and I need to send an encrypted email. So if I need my letter to be sent encrypted, I need to take my receiver's public encryption key and apply it to ...
user avatar
  • 11
-3 votes
0 answers
33 views

Can anyone decipher this I am not that good at deciphering and need some help [closed]

PCtvaGM3cUhSTEVhYGMsO2U5SFpBVFZAJEdwJSQ7K0VWOi4rQEJnVkRJbW0jK0BDJ2FEMDlgMUYqJk8kQDwtSTgrREdtPkRmcChDRioyR0JBU2whJEVjbDIwRVplZS5BMD8pLStFcU85Q2BtZUBAPGl1LURmVEU0QVRBbzBEZz5jLSs+...
user avatar
0 votes
0 answers
33 views

What is symmetric or asymmetric in public and private keys? [closed]

only lock == public key only open == private key both open and lock == regular key What here is symmetric, or asymmetric here, if at all?
user avatar
  • 5
-1 votes
0 answers
18 views

I am looking for how you can Identify what type of cipher this encoded message is in? [duplicate]

PCtvaGM3cUhSTEVhYGMsO2U5SFpBVFZAJEdwJSQ7K0VWOi4rQEJnVkRJbW0jK0BDJ2FEMDlgMUYqJk8kQDwtSTgrREdtPkRmcChDRioyR0JBU2whJEVjbDIwRVplZS5BMD8pLStFcU85Q2BtZUBAPGl1LURmVEU0QVRBbzBEZz5jLSs+...
user avatar
0 votes
1 answer
57 views

OS on external drive -- is it safe?

So I'm installing macOS to my external hard drive partition, so I can have a 100% clean environment where I can engage with cryptocurrencies. (Exchanges, stable coins, protocols, putting actual money ...
user avatar
30 votes
3 answers
5k views

Why is one-time pad informationally secure?

I am reading "Serious cryptography" and he wrote the following: Informational security is based not on how hard it is to break a cipher, but whether it’s conceivable to break it at all. A ...
user avatar
  • 403
1 vote
1 answer
63 views

How is the stream cipher key shared on GSM?

I read that phones encrypt communication (GSM as implemented in 2G,3G..) - particularly voice as SMS are unencrypted - using a stream cipher. Symmetric Stream ciphers use the flip-flop machinery to ...
user avatar
  • 15
3 votes
2 answers
104 views

Does any real world protocol makes use of the associated data in AEAD?

I'm trying to find evidence of use of the associated data (authenticated cleartext associated with the encrypted and authenticated data) feature offered by AEAD (Authenticated Encryption with ...
user avatar
  • 4,295
1 vote
0 answers
29 views

multi-user deterministic symmetric encryption [migrated]

I was wondering whether there exists a symmetric encryption scheme such that there is 1 sender and n receivers. Each receiver has 1 random and independent symmetric key. The sender knows the ...
user avatar
3 votes
1 answer
274 views

Always leaking ext4 superblock

An encrypted ext4 container will always leak the superblock information. So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks? Shouldn't it then ...
user avatar
0 votes
1 answer
25 views

why is gpg subkey getting a warning

I just begain studying how GPG works on Linux(Ubuntu20.04) and can't get my head around as why my subkey keeps getting a warning when encypting a file using the GPG command. I have also tried signing ...
user avatar
1 vote
0 answers
20 views

Would adding encryption to an MPLS provide additional protection for application access which is over TLS?

I have users at a remote site who access business application via an MPLS. The applications use HTTPS (TLS). The MPLS connection that we have is non-encrypted. The data is sensitive. Would adding ...
user avatar
0 votes
1 answer
65 views

Are self-signed certificates better for local usage?

When generating a certificate what would more secure - generating a self-signed certificate using PGP or using a public CA like Let's Encrypt? We are using it for signing and encrypting. What are the ...
user avatar
  • 190
0 votes
0 answers
66 views

Encrypt SVN for passwords

Could anyone give me advice on the best way to encrypt the SVN version control system on a Amazon Linux 2 instance? I am planning to encrypt or disable the SVN from asking if unencrypted passwords ...
user avatar
0 votes
2 answers
56 views

Secure data (+ private key) storage in an insecure public cloud environment

We are trying to encrypt files in a manner that they can be completely secure in an insecure environment (like a public cloud). We're talking about military grade secure. The data should be so secure ...
user avatar
  • 190
0 votes
1 answer
25 views

Can third-party authentication yield a static user-specific encryption key?

I'm writing a REST server + frontend with two goals that seem to conflict: Signing in yields a static, user-specific key (K1) to decrypt a document (D) stored encrypted on the server. The key should ...
user avatar
20 votes
9 answers
7k views

Need to leave computer in repair shop. How can I secure solid state drive contents?

I need to take my desktop into a PC repair shop and leave it for a few days. It would be easy for them to copy the drives without me knowing. I am running Windows 10 with a password but this doesn't ...
user avatar
  • 431
0 votes
0 answers
12 views

Import BDK encrypted under the Transport Key KEK on HSM

I received a two-component KEK TDES key and a BDK cryptogram, which is encrypted for this KEK. Do you have any suggestions on how to load such a key into the HSM device? Eg. Luna HSM
user avatar
0 votes
0 answers
29 views

Why aren't search engines encrypting search queries? [duplicate]

As you will know most search engines pass the search information url-encoded, i.e a get request with the parameters on it. But given all the fuzz about security and surveillance, why aren't SEs ...
user avatar
  • 15
0 votes
0 answers
10 views

How to determine type of encoding/encryption has been used? [duplicate]

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format for example (...
user avatar
0 votes
0 answers
50 views

AES 256 encryption Java to PHP [migrated]

i've a problem, i hve a source code for data encryption aes256 based, but this code is Java and I want transform to php, i was try with this example, but isnt correct, can u help me, the examples in ...
user avatar
1 vote
0 answers
99 views

Is there any way to get the BitLocker password from the laptop? [migrated]

I have a personal hard disk of 1TB with lot of data. I connected it to my office laptop and the drive got bitlocked automatically within a second. I talk to the office administrators and we ran the ...
user avatar
  • 111
0 votes
1 answer
33 views

Burp suite: URL encoding of request body - Is this safe?

Analyzing an android app's traffic POST request, it sends some important pieces of data in the form of URL encoding. This is pretty easy to decode and get the data. The data is sent over HTTPS. But is ...
user avatar
0 votes
1 answer
51 views

Encryption options when one-way secure channel is available

I would like to ask what encryption options are available for the following real scenario: There is an unsecure, full-duplex communication channel between a server and client There is also a secure ...
user avatar
0 votes
0 answers
21 views

Encrypted/Encoded text in the Burp HTTPS request - Android [duplicate]

I am analyzing the HTTPS traffic from a particular Android app using the Burp proxy. So every 5 minutes, the app hits an endpoint and sends an encrypted/encoded text in its HTTPS request. I tried ...
user avatar
2 votes
1 answer
82 views

Veracrypt and Bitlocker VS Bad Sector

Want to know what happen to: Bitlocker partition Veracrypt partition Veracrypt container If there's bad sector appear in the encryption area. Can I still mount/open the encryption to save non-...
user avatar
2 votes
2 answers
108 views

How would you go about generating fake sensitive-looking file for plausible deniability encryption

I was reading the VeraCrypt documentation about hidden volumes [[1]] (plausible deniability), and they recommend putting "sensitive-looking files that you actually do NOT want to hide" in ...
user avatar
0 votes
0 answers
45 views

Alternative to AWS CloudHSM?

I am not using AWS, google cloud or similar. I have a vps on another webhosting service. I am going to encrypt my data but don’t know where the best place to save the encryption keys would be? I can ...
user avatar
7 votes
6 answers
5k views

What's the point of hashing a password and then sending it to the server?

If the password is hashed and then sent to the server where the hash is compared to the stored hash, this basically means that if someone had that hash they can still log in by sending the hash in the ...
user avatar
1 vote
1 answer
74 views

End To End Encryption Model

I have an architecture which requires a certain subset of data to be more heavily secured and encrypted. The main parameters which I believe meet the scope of the project are as follows: Data should ...
user avatar
0 votes
1 answer
73 views

TPM use without secure boot

I've been asked to improve the security of my company's iot device, and encrypt a storage partition. It's a general purpose arm based device, and currently can boot from a variety of sources (USB, ...
user avatar
  • 101
5 votes
2 answers
1k views

What standards should a commercial encryption device meet?

I am trying to build a commercial encryption device. Ok, I know how to write code, how to transform encryption algorithms from the book into code and construct electronics. But my question is: what ...
user avatar
1 vote
0 answers
60 views

How does Tor's second node know the key to decrypt the second layer?

I was watching this video explaining how tor works: https://youtu.be/QRYzre4bf7I It explains it with the example of 3 intermediate nodes between client and server. It says that each of the nodes can ...
user avatar
0 votes
1 answer
67 views

How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]

When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint. For example, if I enter the following CR ID : "CR-13261150" it POSTs the ...
user avatar
0 votes
0 answers
47 views

PubKey decrypted differences when Sending an encrypted email via a bash script and when sending it via Thunderbird

This is a 2-part question. When GnuPG is used externally in Thunderbird 91.7.x, i tested email encryption from Account A to Account A, the message was received perfectly encrypted and in the "...
user avatar
1 vote
1 answer
49 views

Why does `openssl ciphers -v eNULL` list `TLS_CHACHA20_POLY1305_SHA256` (and similar)?

I hope this question is on-topic: Learning about the eNULL "encryption" and the related warning, I wanted to list all ciphers than include eNULL: ~> openssl ciphers -v eNULL ...
user avatar
  • 137
0 votes
1 answer
33 views

Hidden Input prevent value changing - Laravel

So I was testing my application for some vulerabilities and found one that I missed: <input class="hidden" type="hidden" name="event_id" value="{{$event->id)}}&...
user avatar
0 votes
1 answer
82 views

Running encrypted application

So, we've got a ROS application running on a robot, which is going to be distributed to potential partners/customers. The code on the robot's computer will be compiled, but we want to add extra layers ...
user avatar
0 votes
0 answers
59 views

Secure logs on an embedded IoT device

I need to secure logs on a IoT device (Infineon TC233). It has 2 MB flash and a HSM. We are at the design stage of development. Since logs will be primarily event & data logs, the size of the log ...
user avatar
0 votes
1 answer
51 views

Is there anything that can be deduced from a ciphertext?

Given some strong cipher (like TLS uses), what can be deduced from its ciphertext? For example, is the length of the ciphertext the same as original text? Are spaces preserved? Or some letter ...
user avatar
  • 205
0 votes
1 answer
94 views

Does full disk encryption securely remove data?

I was just catching up on best practices for securely erasing data from a Mac. At one point I remember reading: For SSD drives it is no longer recommended to fully write ones/zeroes/random bits on the ...
user avatar
0 votes
2 answers
86 views

Best practices for storing many certificates and private keys

I am responsible (among many other things) for managing TLS/SSL certificates for a couple dozen or so websites for a large multinational. Some sites are hosted on Apache, some are on IIS. I use ...
user avatar
  • 221

1
2 3 4 5
113