Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
32 views

MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA? [migrated]

Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
0
votes
0answers
15 views

Measuring entropy of a uniform distribution source

I have a problem to understand what entropy is at all. When I was reading about uniform distribution, one article stated: When there is an equal chance for all items to appear, we have a uniform ...
0
votes
0answers
8 views

How to tell if Windows laptop has “Device encryption support” [migrated]

When opening Windows 10 System information as administrator, a device shows that the field Device encryption support says Reasons for failed automatic device encryption: Un-allowed DMA capable. An ...
1
vote
2answers
62 views

Do I transmit a plaintext password to my PostgreSQL server?

PostgreSQL supports multiple authentication methods, and I think it supports SSL and plaintext connections. How do I find out which authentication method a server uses? I do not have access to the ...
0
votes
0answers
7 views

Is there any chance of failure in Cryptography [migrated]

With my limited knowledge of cryptography and its correct terms, functions (md5, base64, sha, aes or whatever) turn an input into encrypted output. For example, if the following input turns into ...
2
votes
0answers
40 views

What is the simplest post-quantum asymmetric cryptographic algorithm for key exchange?

This question has been burning in the back of my head for the past few days, and a quick Google search doesn't yield any usable results. As the title suggests: What is the easiest-to-understand post-...
0
votes
0answers
29 views

design and implement a hybrid crypto system that involves 3DES and RSA [closed]

RSA must be used at the beginning to securely exchange the session keys of 3DES between Alice and Bob. 3DES must be used for encryption/decryption of the exchanged data. OFB should be used as a mode ...
0
votes
0answers
33 views

Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)

I am trying to send a password from a client to the server. I just don't know how to encrypt it. method: I used a website (Instagram) as a guide here. Here the password is encrypted with AES and the ...
2
votes
1answer
66 views

I am unable to use an RSA key generated with the -aes-256-gcm option in openssl, help

When I run: openssl genrsa -aes-256-gcm -out rootca.key 4096 Then I get the following output: $ openssl genrsa -aes-256-gcm -out rootca.key 4096 Generating RSA private key, 8192 bit long modulus (2 ...
1
vote
0answers
68 views

Why is end-to-end encryption not used in regular web browsing? [closed]

Normal web browsing has slowly been shifting towards HTTPS over HTTP, but this still allows the ISP to view ones traffic. What the downside to using e2e encryption for regular web browsing? Why are ...
-1
votes
0answers
50 views

gpg stopped decrypting a symmetrically encrypted file

Just yesterday I decrypted this same file using a key that I have written down, but today every time I try the same key gpg returns: gpg: decryption failed: Bad session key I suspect that either I ...
0
votes
0answers
51 views

What's the best encryption strategy to go with when everybody needs to be able to write data but only a select people can view it?

I really just need an encrypted support ticket system essentially. The user who writes the ticket doesn't need to be able to view it afterward but a handful of staff need to be able to decrypt the ...
1
vote
1answer
81 views

When is a private and public key given to a user, and why can the private key not get hacked?

Trying to understand assymetric encryption. To my knowledge, it deals with the key management problem by having each user have their own private key and public key. But when is this private and public ...
2
votes
2answers
134 views

If Whatsapp media messages are e2e encrypted, what is the point of storing popular messages on the server?

There is something I don't understand about whatsapp's privacy policy. Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (...
0
votes
1answer
101 views

Did The Wire invent the “Jump 5” cipher?

N.B. Asking this here instead of Movies.SE because I'm wanting to know about the cipher itself and any history, which this site is more suitable for. In S01E05 of The Wire, at around 45:00, it's ...
0
votes
0answers
5 views

Does a DMG encrypt filenames? [migrated]

I created an encrypted DMG on MacOS and sharing with my team (sharing password separate from DMG). My question is: if this file gets in the wrong hands, can someone figure out the filenames inside the ...
0
votes
0answers
3 views

Best way to encrypt a text file in ubuntu (and possibly Android) [migrated]

I am currently using a simple 7zip archive that I open with Gnome Archive Manager, and that level of encryption would be fine for my needs, but Gnome Archive Manager does copy the file to the temp ...
2
votes
1answer
84 views

Can a SIM card lock be circumvented?

If so, how would one go about that, and realistically, how long would it take? Is there something we can do proactively to make this more difficult? This seems more relevant than ever since we would ...
0
votes
1answer
31 views

Whether TLS session resumption reuse the symmetric keys?

I am learning TLS Session Resumption. What I got is session resumption can reduce 1 RTT for TLS 1.2 by reusing MasterSecret. Both the client and server needn't to run key exchange algorithm. My ...
0
votes
1answer
38 views

How to identify this hashed text and if it encrypted using a key? [duplicate]

I have 2 hashes which I don't remember which type of encryption I used or if i used a secret key. can you help me identify these I will just give all details but not paste the whole hash here. hash1 ...
0
votes
1answer
63 views

Is there use for Windows built-in file/folder encryption if the PC has only one user?

From what I gathered, Windows 10 built-in encryption decrypts file/folder when a specific user logs into Windows. In a PC that only has one user, I want to keep the files encrypted until the user is ...
1
vote
0answers
19 views

Encrypt an sqlite3 database using python [migrated]

I am trying to create a password manager, I have successfully been able to create the encryption key by using a key derivation function on the master-password using PBKDF2 and SHA256. The passwords ...
0
votes
0answers
25 views

Secure memory buffer

We are designing a Python application and we need to "load" encryption secret key in "memory" at the application boot. It can be also an admin pin code. Anyway, just some data. Our ...
1
vote
2answers
78 views

Can the user get the private key from the encrypted and the decrypted data?

Can the user get the private key from the encrypted and the plaintext data or does it make it easier for an attacker?
1
vote
2answers
54 views

Why our key and our plaintext should have a same size in One Time Pad

I was reading Serious Cryptography book. I am a newbie in cryptography field who try to learn as possible as he can. In this book, there is the following section of phrases: For example, if a ...
0
votes
1answer
64 views

Calculate AES-GMAC

I have a symmetric key and I have the data that needs to be authenticated. So one of the solution that I have in mind is to use the AES GMAC. I know there are other MAC's such as HMAC or hash ...
0
votes
0answers
48 views

What encryption protocol is Kleopatra using to protect the private key?

What encryption protocol is Kleopatra using to protect the private key? I checked PGP RFC document and found out different protocols can be used, it's up to the software developer. Has anyone be able ...
1
vote
0answers
35 views

Is it theoretically possible to resize a partition encrypted using Bitlocker (without decrypting the data first)? [migrated]

From what I've been reading, the guideline regarding manually changing the size of a Bitlocker encrypted partition is: (a) decrypt the partition. (b) resize the partition. (c) re-encrypt the partition....
1
vote
1answer
68 views

Is it worth using an http proxy?

Sorry for my lack of terminology in the field, that's something I've little (or none any) practical knowledge about. I've browsed similar questions on the security risks of using (web) proxies, but ...
1
vote
0answers
65 views

How to build a highly secure End to End Encryption React Native messaging app [migrated]

I am currently working on an instant React Native messaging app and I want to implement E2EE (End to End Encryption between the sender and the receiver) for better security. The libraries/frameworks I ...
2
votes
0answers
57 views

How do you rate proposed LoRa joining scheme, pairing based encryption. Modified version of OTAA

I'm developing a protocol for private LoRa (Any RF by abstract) product, It consists of a gateway and a sensor node. I don't use LoRaWAN. I want the user to dynamically 'pair/link' one to multiple ...
2
votes
2answers
161 views

Can your internet provider monitor your data (passwords, etc?)

Was typing in my password into an HTTPS website when I started to wonder if my home WiFi (whether a neighbor could have hacked into and monitoring it) is secure. When I type in Username123 Password123 ...
2
votes
1answer
64 views

how message authentication code share keys?

How are secret keys shared between receiver and sender, especially when we want to have confidentiality that sender and receiver are using two keys, one for MAC algorithm and one for encryption and ...
1
vote
1answer
90 views

Why does Kaspersky anti-virus not consider this executable as malicious?

I was trying to learn file I/O and related function in C, and thus tried to create a baby-version of a virus. Following is the exact code: #include <stdio.h> #include <stdlib.h> int main(...
1
vote
2answers
76 views

Private key Proof of Ownership [closed]

Given 2 entities, A and B: A has a public key( x ) and a private key( x* ). B has a A's public key hash( let's call it h(x) ). A has to prove ownership of x* to B. How could this be achieved, ...
0
votes
1answer
58 views

SSH in AWS vs SSH on GitHub [closed]

This is not much of a technical but more of a practical question. Both in AWS-EC2 instance and GitHub repos I had to generate a cryptographic key pair to encrypt data sent over SSH tunnel. For AWS the ...
1
vote
0answers
11 views

How to erase encryption keys from memory in C#? [migrated]

I was browsing through the Cure53 audits and found a mention of 'Secure key deletion ineffective (Medium)' on pg. 3 here. The Cure53 team was saying that there's no real way to erase sensitive data in ...
0
votes
1answer
47 views

Is Array.Clear() in C# suitable for zeroing sensitive byte arrays?

Is it worth calling Array.Clear() to clear sensitive byte arrays such as those containing encryption keys? It's not clear whether this is worth doing since the language has a garbage collector.
1
vote
1answer
79 views

E2E Encrypting User Data [closed]

I'm building an end-to-end encrypted web-app. I plan to use ECDH + P256 curve for generating private/public keys. The private keys are saved onto the user's computer and the public keys are stored on ...
0
votes
0answers
26 views

Does this seem like a secure way to transfer wireless data from a keyboard to a host?

I'm making an adapter to convert a wired keyboard I have into a wireless keyboard. I am going to use nRF2401 modules for wireless with some STM32 microcontrollers. I'm trying to come up with a method ...
1
vote
1answer
69 views

Difference between Symmetric and Asymmetric encryption

I was watching this short video and apparently every time users open an HTTPS connection, a handshake between client & server happens. They interchange the public keys, keeping the private keys. ...
0
votes
0answers
47 views

What can my employer see if I’m on my email on my personal phone [duplicate]

Basically I have the outlook app on my phone, if I connect to work WiFi what can they see? For example the emails in my inbox can all of them be read? Or the emails I have sent from let’s say my home ...
0
votes
0answers
48 views

How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)

I have a private file encryption project that I'm working on that currently uses Encrypt-then-MAC. However, I've been looking at age and the article that's referenced in the spec that discusses ...
0
votes
1answer
61 views

RestApi Libsodium SealedBox end-to-end request encryption scheme

I am making an API that uses the following steps for encryption. All of this is implemented using libsodium. First of all the client has to make an initial request to the server for getting his public ...
2
votes
1answer
56 views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
1
vote
2answers
115 views

Is the following a secure method for file encryption?

So the goal is to use AES-CBC-256 to encrypt the data in a file. To derive the AES key and IV pbkdf2 will be used to generate a 384 bit output using a given password and salt, where the first 256 bits ...
2
votes
1answer
80 views

How can Bitwarden claim it cannot access your passwords if the vault password is the same as the web account password?

Bitwarden claims that it is more secure than traditional cloud password managers (such as Google) as it only stores the encrypted version of the passwords database. But for some reason the password ...
0
votes
1answer
35 views

key escrow vs secure storage(software/TPM/HSM)

From the definition of key escrow (a method to store important cryptographic keys providing data-at-rest protection), it sounds very similar to that of secure storage which could be basically software-...
0
votes
0answers
21 views

Are there any formal tests to estimate encryption strength? [migrated]

So I'm trying to design/make my own encryption algorithm and I believe it to be ok. I'm not saying it's extra secure but I know it's not useless so, what I was wondering is if there are any specific ...
1
vote
1answer
37 views

How am I supposed to use a revocation certificate, and can there be multiple revocation certificates for the same private key?

I just generated a revocation certificate for my key. Unfortunately I don't fully understand the concept. Here are my questions: How exactly am I supposed to use it? Suppose for example that my ...

1
2 3 4 5
107