Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

0
votes
0answers
2 views

Secret conversation identity key

On my messenger I have one encrypted key code. On the messenger that I and my husband share there are three encrypted keys. What is this mean? And do you receive a new key identity each time you begin ...
0
votes
1answer
58 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
20
votes
1answer
137 views

Is a password manager better than an encrypted file for storing passwords?

For any passwords other than websites I log into regularly (such as Gmail, Facebook, etc.), I use apg to generate a random 20 character password. I then add that password and a username or email ...
-1
votes
1answer
20 views

How to identify the private key encryption algorithm using OpenSSL API?

I am creating a C++ application which involves loading in private key files (RSA/DSA/DH) into their respective class containers. Is there an OpenSSL function that can take a file as a parameter and ...
0
votes
0answers
9 views

ECC protocol practical implementation in python [migrated]

My goal is to code a program for ECC implementation. Right now i am at the basics and i am trying to follow an example found on the internet. I will give the code below. The problem is the after ...
-3
votes
0answers
52 views

How am I writing encrypted language naturally without software/computer [on hold]

Ghcgibh. H can cc hc h This is not a joke, should I be concerned? I can use this method to find any information I need, but not necessarily what I want. yjctv yhfhch xt
2
votes
1answer
98 views

How does wireless keyboards' encryption prevent frequency analysis?

I've found very little information on this topic after much googling. The only partial answer I found was by Microsoft: Microsoft_AES_Technical_Factsheet By adding random data to each message, each ...
2
votes
3answers
93 views

Encryption Key vs. One-Time Pad Brute Force

How does an attacker know when they've cracked a traditional encryption key? Wikipedia describes the one-time pad: A 140 character one-time-pad-encoded string subjected to a brute-force attack ...
2
votes
1answer
20 views

What attack vectors does AWS SSE-S3 help mitigate?

Reading into the various SSE options on S3, I'm can't understand the following: What exactly does the SSE-S3 (fully-managed, transparent at-rest encryption) protect you against? I can only think of ...
0
votes
0answers
25 views

Unkown encryption type? [duplicate]

200 character long string ...
0
votes
0answers
22 views

How to decrypt an openssl_encrypt() encrypted value using MySQL query? [on hold]

If I am using the following php script to encrypt a field in my database: <?php require_once('../api.php'); $newApi = new api(); $conn = $newApi->connection(); //$key previously generated ...
2
votes
1answer
78 views

Asymmetric public-key cryptography: can either key be used to encrypt or decrypt?

Key exchange describes a public key encrypting plaintext and the private key decrypting, while in digital signatures the reverse is true where the private key is used to encrypt a hash that the ...
1
vote
4answers
172 views

If I have the input and output, can I know the encryption technique?

I have a program that can encrypt text, I tried to discover the encryption that is used in this program and could not figure it out, knowing that if the plaintext is P and the encrypted text is C, if ...
1
vote
2answers
105 views

KeePassXC for managing passwords, threat model: Entire world actively trying to decrypt my password given the file

I use KeePassXC on a Linux distribution for managing my passwords. For the sake of the argument, let's assume that the file is publicly accessible, and the entire world's number 1 priority for the ...
0
votes
1answer
39 views

What security arrangements do I need to think about when passing a password through my site server

I want to automate some of my home admin. I'm writing a small-ish website, to do that. Written in C#/.NET, hosted on Azure, backed by an Azure SQL DB, codebase available publicly on GitHub. One of ...
0
votes
1answer
73 views

About file encryption [closed]

I'm here to consult those who know more about encryption issues, since I do not have much knowledge on the subject. A few years ago, I acquired a program that allows me to store information in a ...
-5
votes
1answer
61 views

Can someone tell me what is this encryption method? [duplicate]

DQUC//S+y9uZxanuAS0WTQBlAG4AZQBkAHwBZQByACAAegBhAGQAYQBEASAAVwBpAG4AZABvAHcAcwAC3/...
1
vote
0answers
58 views

Is decryption in the Browser or on the Server better?

I am wondering if it is better to send encrypted data to the browser from the database and have javascript decrypt the data or send a password to a php file (that verifies it with a salt and hash) ...
0
votes
0answers
20 views

How to read Security Technical Details for Connection Encrypted [duplicate]

I'm doing some research on encryptions websites and could use some help. How do you read/interpret this connection detail: Connection Encrypted (TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_256 BIT ...
0
votes
0answers
16 views

How to determine what type of encoding/encryption has been used?Please Any Suggestion [duplicate]

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format ()^$!%^$#&%$!$($)...
2
votes
1answer
88 views

If PGP is 2048 or 4098, then what is 128-bit encryption? [duplicate]

PGP is 2048 bit encryption? That a whole lot more than 128 bits. But, I thought 128 bits is more "serious" and "legit"
0
votes
1answer
40 views

I can't get gpg-zip to work. What am I doing wrong?

I haven't used gpg-zip before. I am trying to compress and encrypt a directory with more than 200 files. I did a test run with a smaller directory containing just a dozen PDFs in it, a folder I'll ...
0
votes
0answers
30 views

X.509 Certitificate Authentication between Client / Server (REST Implementation Model)

Can you please list of advantages /disadvantages on X509 Certificate based authentication instead of traditional username/password model ? Architecture Scenario : Lets suppose i have Client ...
1
vote
0answers
26 views

How to protect data at rest in a small web application where it’s hard to protect keys

A small web application typically consists of a web server (e.g. Apache or nginx) and a database server (e.g. MySQL or PostgreSQL). Often, the two are hosted on a single physical server or on a ...
-2
votes
1answer
96 views

Is it possible for the government to recover data from a encrypted ssd (veracrypt) that was wiped

Just as the title states I'm wondering if its possible for the government to recover data from a encrypted ssd that was wiped? Thanks in advance!
2
votes
1answer
68 views

Can Kerberos encrypt network traffic between servers?

Working in a coporate environment, which uses Active Directory, I overheard someone making a comment stated the Kerberos protcol can be used to encrypt network traffic between Windows servers. Can ...
3
votes
1answer
40 views

Can information somehow be secured from the host on a KVM guest?

With KVM guest systems so prevalent now, I was wondering if there is any merit in using LUKS encrypted storage, as the guest will usually be always on, so the information is always accessible ...
0
votes
1answer
44 views

Disabling RC4 HMAC encryption in Windows Active Directory prevents current Kerberos attacks?

Disabling RC4 HMAC encryption in Windows Active Directory prevents current Kerberos attacks? I understand that RC4 HMAC encryption is dangerous in Windows Active Directory, since it relies on the ...
4
votes
2answers
389 views

A site supports Public key length of 256 bits while best practice is 1024+ - what does this mean?

Given that this is asymmetric cryptography with private/public key, I am not sure if reduced bit length is breakable easier than longer keys. I understand that the key population is reduced (hence ...
1
vote
1answer
38 views

When is Veracrypt an acceptable solution?

To manage security risks effectively, a non-profit organization has the following high level requirements; Limit access to authorized staff. Sensitive data is only accessible to authorized staff. ...
1
vote
1answer
84 views

Should hard drives be encrypted prior to an operating system installation?

When employing full disk encryption, should hard drives be encrypted prior or post the installation of an operating system? If the former, is this supported by operating systems such as Microsoft ...
3
votes
3answers
199 views

A protocol for encrypting the data on the server, but with a password on a mobile device

I want to implement the following encryption scheme. The data is created and stored on a web server, but related to some user of the system (i.e. it is entered "on behalf" of the user). Both ...
3
votes
1answer
70 views

Encrypt User specific Information without a password

Given scenario: I have an application (NodeJS) running on Heroku, the database is RDS on Amazon and I use Auth0 for authentication. I don't have access to passwords of the users, some users use social ...
2
votes
1answer
98 views

AES/Rijndael Encryption Does block size matter for security?

Would AES with a 256-bit block size be more secure than a 128-bit block size? I'm curious if block size really makes something more secure. I'm dealing with a third party to use their API and they ...
0
votes
1answer
69 views

Using the filehash as the key [closed]

I want to ensure that everyone who encrypts a given file gets the same encrypted file without knowing the password. So, my idea was the following: hash the file encrypt the file (e.g. AES) with the ...
8
votes
3answers
270 views

Where would you recommend me to store a Keepass-file?

Where do you store the KeePass-DB? Where would you recommend me to store a Keepass-file? Usually I have my personal documents in my cloud account - but i am not sure if this is safe. Would it be ...
0
votes
2answers
64 views

Hiding the salt for key derivations functions

what I Know: Password based key derivation functions generate a key suitable for ciphers from a given password. It relies only on the original password being kept secret. The purpose of the salt is ...
3
votes
1answer
71 views

How much less secure is a password with a repetitive pattern of characters?

I want to make sure my password is very difficult to bruteforce but also easy to remember and convenient. So my idea is to just use a short password and repeat it a few times like this: ...
1
vote
1answer
64 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
1
vote
1answer
77 views

OpenSSL - how to renew certificates in production?

Have a number of private network services deployed on different nodes outside of optionally encrypted mesh systems, like Docker or Consul. The services have high value and should communicate via TLS ...
2
votes
1answer
32 views

What options are there to clone or image a disk to an encrypted drive?

To ensure that cloned or image disks remain secure and are not accessible by others, there is a requirement to have these stored on encrypted drives. When attempting to use tools such as Macrium ...
0
votes
3answers
79 views

Does a self-hosted VPN (openvpn) at home encrypt traffic for my ISP? [duplicate]

Title says it all. If I host my own VPN at home (using openvpn), and connect my devices to it, will my ISP be able to see the contents of my traffic?
1
vote
1answer
56 views

What are the benefits of a full format versus a quick format when encrypting an external hard drive?

According to a post on the Veracrypt forum, it is recommended that new hard drives are fully formatted. It does not appear to make a distinction between internal and/or external hard drives or USB ...
6
votes
1answer
193 views

How do end-to-end encrypted chat services ensure that the server admin doesn't add new members to a chat?

This question is about any chat service that supports end-to-end encrypted group chats, for instance Signal, XMPP + OMEMO (closed group chats in particular), WhatsApp, and the like. How do these ...
2
votes
2answers
51 views

Use combination of digital certificates and symmetric key cryptography

Assuming that: - A have CertA and secret key KsA - B have CertB and secret key KsB A need to transfer data M to B with the requirement of confidentiality and authenticity, BUT Data encryption must ...
1
vote
0answers
42 views

Securing an android smartphone [closed]

Recently I got a new smartphone (OnePlus 6T, Android 9 Pie) and would like to do everything right from the start. My main concerns are, I would like to be able to backup my data, I would like the ...
1
vote
1answer
97 views

AES Encryption is this overcomplicated encryption?

I'm working with a vendor's API and it recommends the following steps for transmitting an encrypted value: 1) Convert the encryption password to a byte array. 2) Convert the value to be ...
0
votes
0answers
79 views

What are KeePassXC Encryption Settings?

I'd like to know what is an extremely secure configuration with the given options for KeePassXC database: Encryption Algorithm: AES 256, Twofish 256, ChaCha20 256 Key Derivation Function: Argon2, AES-...
0
votes
1answer
31 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
-2
votes
1answer
74 views

Which scheme provides the shortest public key, while being secure? [closed]

I was wondering about whether there exists a scheme that would have the following properties: Be asymmetric (Encrypt with public key, decrypt with private key) Be secure by today's standards (as hard ...