Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
5,852
questions
1
vote
1
answer
31
views
Apple Mail versus GMail app content security
I am trying to determine if there is a benefit to using the GMail app over the built in iOS one when it comes to security. I know that both store data locally on the phone, but the question is whether ...
- 111
0
votes
0
answers
17
views
which DH protocol is safer in communication with given condition? [migrated]
I am trying to understand some concepts such as DH problem and its variants. I have the following question from the book I read. (note that I translated the question from my language to english)
...
user301634
-2
votes
2
answers
92
views
Can Cellebrite be used to access any phone by the government? What is the point of encryption if they can get into any phone?
I'm currently studying forensics, and one thing that keeps coming up is the authorities breaking into phones.
There are several third party tools they can use, but one of the most popular is '...
0
votes
0
answers
62
views
How to prevent public key tampering
I have to store a document (e.g. a JSON file) on a remote PC (that my App is running on) alongside a signature to be able to verify that this file was signed by me. I have no access to this PC nor ...
- 1
1
vote
0
answers
40
views
CrypTool - How to determine what type of encryption has been used?
I have a few questions about CrypTool.
How can you use the text analysis tools available in CrypTool to determine the encryption algorithm for a given ciphertext?
How can you use CrypTool's text ...
- 11
1
vote
3
answers
92
views
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
Assume that I have a server storing sensitive user information (think medical records). I want this data to be encrypted on my server at almost all times. Only when a doctor needs to access the data ...
- 11
0
votes
0
answers
59
views
How can I understand the zip2john hash format?
I had a .zip file that was apparently encrypted with AES-256 deflate.
7z l -slt archive.zip | grep Method
Method = AES-256 Deflate
Then I used zip2john to get a "hash" out of it:
archive....
0
votes
0
answers
10
views
How Does a Database that Supports TDE Work In Practice? [migrated]
I'm very curious on how does TDE is implemented in practice. My goal is to get understanding on the usability constraint and possibility performance impact of applying such technique.
Thus I'm trying ...
- 101
0
votes
0
answers
6
views
Is it possible to detect Stealthy False Data Injection attack through chaotic cryptography? [migrated]
I am doing a research on detecting Stealthy False Data Injection (SFDI) attacks in a smart grid context (a related paper). Besides I am working on a chaotic cryptography (e.g. with Lorenz attraction) ...
- 101
2
votes
1
answer
118
views
What are good data-at-rest encryption strategies for sensitive data?
I need to protect sensitive data by doing data encryption at rest. Context : I have at least the data of 20 app to protect. I want protection from those with legitimate access to the virtual machine ...
- 21
0
votes
0
answers
84
views
I need help properly encrypting my computer SSD
My main laptop recently broke down and i've been forced to use an older laptop I had in storage.
This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage.
...
0
votes
0
answers
27
views
Wpa ptk and gtk in detail
I have been checking Pairwise and Group Transient keys in a network for security. I understand
PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address
...
- 207
0
votes
0
answers
138
views
Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works
I have a very strange problem and i would like to get some guidance on this.
Problem description:
My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
- 111
0
votes
1
answer
52
views
Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?
I created a signature with:
openssl pkeyutl -sign -inkey rsa.key.bob -in plain -out plain.sig.bob
and to verify, Alice just needs to use Bob public key to check the authenticity of the message.
So ...
- 115
0
votes
0
answers
10
views
How to encrypt with LUKS a live Ubuntu usb stick that has been customized with Cubic? [migrated]
I'm using Cubic (https://github.com/PJ-Singh-001/Cubic) to create a custom Ubuntu. So far so good, everything is going smoothly.
However, I would like to encrypt the USB stick that contains my custom ...
- 304
0
votes
0
answers
4
views
Construction of Blake2 and Cha Cha [migrated]
Recently, I was reading about Blake2B and its properties regarding randomness and security, and its connection to Daniel Bernstein's CHA CHA digest. As a budding cryptographer, I find it doable to ...
- 11
0
votes
3
answers
179
views
Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?
In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP).
Due to encapsulation ...
- 6,661
3
votes
1
answer
155
views
Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?
Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is ...
- 6,661
1
vote
1
answer
105
views
Decrypt python source code at runtime [closed]
I'm wondering if it's possible to get the source code of some python program if the developer encrypted this source. We download a program in which the source is encrypted. But in order to translate ...
1
vote
1
answer
118
views
How to break poorly implemented One-Time-Pad
I have a cipher text, that was created using One-Time-Pad, but the idea is that it was encrypted badly. The message, a section of a book, was encrypted using a pad 256B long repeated many times over (...
- 11
2
votes
2
answers
639
views
Did Phantom Secure use the same level of encryption as WhatsApp?
I've been following a story for some time now about a high-ranking Canadian official who was charged in leaking operational data to the makers of Phantom Secure. There was a very deep level of concern ...
- 129
10
votes
5
answers
4k
views
How to best obfuscate a built-in key in an application?
We're building an application that needs to log into a website using built-in credentials. It's not optimal to say the least, but we're stuck with "knowing" the username and password ...
- 219
0
votes
0
answers
75
views
Is openssl enc safe enough for securing a Bitcoin recovery phrase?
Is openssl enc considered secure enough to protect a bitcoin recovery passphrase?
An attacker might get the encrypted text and invest several thousand dollars in computing power trying to decrypt it.
...
- 113
0
votes
0
answers
47
views
Mixing argon2/HKDF to generate both password hash and encryption key?
I am trying to use a user password in my application to both generate a password hash (for authentication) and to derive a secret key to encrypt user data.
Using argon2 is an expensive operation so i ...
- 101
1
vote
0
answers
109
views
Do I retain plausible deniability if using "quick format" in veracrypt on new SSD?
I bought a new 2 TB SSD (NVMe). I want to turn it entirely into a veracrypt volume, nearly all of the drive being for a hidden volume. First, I told it to do a "quick format", which was done ...
- 111
0
votes
1
answer
171
views
Verification of Password without Storing Hash - Security Considerations
Question:
I am working on a password-based file encryption and decryption system in Python using the PBKDF2 key derivation function and Fernet encryption. I have a specific requirement: I want to ...
0
votes
0
answers
46
views
How much does manually entering a key at process start help?
I have an application that encodes data when writing it to a database, and unencodes it when reading from the database. The encoding is done with a symmetric algorithm using a fixed secret key.
I'm ...
- 215
0
votes
2
answers
154
views
How much security do DigitalOcean managed databases provide?
DigitalOcean offers managed databases. From what I can understand, the advantages are:
You don't have to worry about management tasks such as set-up, updates (including security updates), and backups....
- 215
0
votes
3
answers
271
views
Gmail encryption
Is sending emails between Gmail accounts encrypted, can ISP read gmail content in transit??
0
votes
0
answers
44
views
What is the best way to encrypt asymmetric metadata?
As a hobby project I'm thinking about how to write a secure chat where even all metadata are encrypted so that it is impossible to leak any (meta) information by design.
My basic idea is right now:
...
- 133
0
votes
0
answers
34
views
PGP keys as a hashing method
The context is described in another of my question, and is as follow : i've got to securely store identifiers, called TIP. We need (1) a method to derive always the same UID from a TIP, so that no ...
- 133
1
vote
1
answer
69
views
Why is TLS communication within a VPC important? [duplicate]
In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to ...
- 113
1
vote
0
answers
126
views
LUKS: How many iterations are enough?
The luksFormat command accepts iteration time as a parameter, not iterations. That obviously leads to quite different number of iterations depending on the hardware doing the encryption. However if ...
- 405
0
votes
0
answers
105
views
Sophos home blocks explorer.exe from encrypting several files (ransomware?)
Here's what happened:
I was transferring a quite large number of small files (.CSV, .PNG above all) from an old USB stick that never gave me any problem from one (allegedly safe) laptop (win10, win ...
- 101
0
votes
1
answer
34
views
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
- 295
0
votes
0
answers
69
views
Choosing Encryption Strategies for Secure Long-Term Storage of Sensitive Data
When considering external drives for secure long-term storage of sensitive data, what are the pros and cons of using the same password for encrypting all files versus using random passwords for each ...
- 163
2
votes
0
answers
58
views
Is MacOS encryption as secure if FileVault is switched on after installation?
Regarding turning on MacOS' FileVault after it was not turned on for installation, it says here...
If FileVault is turned on later — a process that is immediate since
the data was already encrypted — ...
- 1,187
0
votes
1
answer
60
views
Is deploying a web application to a customer's encrypted drive a secure solution against code theft?
I have developed a web service for customer. The web service is written in Python and running in Docker containers. It is managed by docker compose.
The customer wants my web service to run on their ...
0
votes
0
answers
38
views
Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?
Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
- 1,039
0
votes
0
answers
121
views
Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory
Intro
Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode!
The idea is to
use gocryptfs --reverse from any existing (...
0
votes
1
answer
95
views
How to avoid performance issues with envelope encryption when using separate DEK's for each piece of data?
Posted this first on stackoverflow but was suggested to repost it here.
I am planning on using envelope encryption for data stored in a database in a multi-tenant solution. Envelope encryption suggest ...
0
votes
3
answers
132
views
AES mode for reusing same keyset
I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
- 123
0
votes
1
answer
81
views
Securely transfer encrypted file and private key from server to phone to offline device
I have a file that is encrypted on the server with a private key. I need to transfer the file through a users phone to a device that does not have an internet connection. In order for the offline ...
- 3
0
votes
1
answer
69
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
1
vote
4
answers
231
views
Is there any benefit of encryption if the password is known?
Is there a benefit of encryption of a file (for example with AES-GCM), if the password is included alongside the encrypted data?
I know it sounds like a useless question, but I am curious about its ...
- 17
0
votes
1
answer
41
views
Discovering already encrypted REQUEST key AES128 and sending already encrypted REQUEST with other data
I'm working on a college project to understand how the IOS application sends the password in the REQUEST already encrypted in AES128, what is its key, and send a REQUEST with our string transformed ...
- 1
17
votes
2
answers
6k
views
Is Tor over VPN a security risk?
In his talk about OPSEC, The Grugq stresses that you first have to go through TOR before connecting to a VPN. Otherwise, the VPN would be a direct link from the endpoint to you. He summarizes:
TOR ...
- 171
0
votes
1
answer
87
views
Should unique string part of an invite-link be encrypted?
Consider an invite link like this: https://mysite.com/invite-link/{uniquestring}
The uniquestring part of the URL is the part with which server-side application can lookup the invitation information ...
- 115
0
votes
2
answers
77
views
Encryption on IP Tables network Gateway
I have created a network gateway on an Ubuntu server. It has 2 interfaces and forwards the traffic from one interface to another. One of the interfaces is connected with a pfsense firewall that ...
- 1
0
votes
1
answer
220
views
Why are there so many different encryption algorithms?
Taking a quick look at Wikipedia, there happens to be a vast amount of different encryptions/cryptographic algorithms. Yet, many of the listings show that these encryption methods are not in use today ...
- 21