Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

0
votes
2answers
27 views

Is that a good idea? - Firefox/Chrome in-content encryption

I'm currently thinking about writing a Firefox/Chrome and Python/PHP/JS plugin to accomplish the following: Assuming you are on a non-SSL secured site or you simply don't trust any CA like Let's ...
1
vote
0answers
28 views

Is there any sense in encrypting a file for one's own later use?

Let's say you have a single sensitive document. You're traveling to somewhere high risk and are advised not to bring your data, but you also don't have safe storage at home. So you encrypt your ...
0
votes
0answers
35 views

Need to encrypt RTSP over LAN

I tried googling everywhere, but got no help with what I needed specifically. Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
1
vote
0answers
37 views

Who is responsible for Cipher selection and SSL handshake - Akamai, Load balancer, Publisher dispatcher, publisher

We have a AEM (Adobe experience manager) 6.2 application. I recently been advised to exclude/remove the weak ciphers for strict security policies. But I am not sure where shall I do the configuration ...
4
votes
2answers
179 views

Encrypting then Base64 Encoding

I notice online encryption tools encrypt the plaintext and output the ciphertext in base64 format. Why is ciphertext outputted in base64 format? Can the ciphertext be outputted in binary format?
-1
votes
0answers
37 views

How to make a TV recording box that prevents fast forwarding? [closed]

I have a receiver to record television. On some channels, even if you've recorded the whole thing, you can't fast forward your recording when you watch it afterwards (offline). So my question is if ...
0
votes
1answer
36 views

Encrypting data as a middleman

I'm working on a financial app that uses Plaid to provide financial data and updates as users spend money. As of right now, I'm using Hashicopr's Vault to encrypt the transaction/bank account data, ...
1
vote
2answers
93 views

Deriving 2 keys from user password - one for login - one for encryption? [duplicate]

Context We have a browser-based client-server application. The client registers with email and password. The password is enforced to some guidelines. Problem The User needs an encrypted vault on ...
1
vote
2answers
90 views

Is AES-256 not the best decision for mantaining performance in a Datalake?

I'm worried about performance in a Data Lake used for Data Science purposes. I need to encrypt confidential data and, because of definitions I won't dive into here, the algorithm to fulfill this ...
-2
votes
0answers
22 views

Determining data transformation approach [closed]

An application that I'm working with is transforming IPv6 addresses into an alternative format and then storing them in a SQL table. I'd like to read the SQL table and translate the data from its ...
0
votes
1answer
151 views

What is a secure way to encrypt critical secrets for a person likely to be individually targeted

I read several guides and Stackexchange answers, but the more I know, the more I realise how much I don't know. What I learnt is that details of implementation matter and that most popular tools do ...
3
votes
1answer
148 views

What happens to PKI once quantum computers can break encryption?

They say that public key infrastructure or PKI uses very complex encryption. What if that encryption breaks one day when quantum computers complete? What if they decrypt all private messages and data? ...
1
vote
2answers
48 views

Saving unhashed first name and last name on a non-encrypted database on phone

Using react-native, we save the first name and last name in Redux, which is a non-encrypted database within the app. I have been tasked to secure this data. Either encrypt these two fields or save ...
0
votes
0answers
55 views

Are emails from ProtonMail to Tutanota end-to-end encrypted?

So I know that sending emails from a ProtonMail Email to a ProtonMail email is end-to-end encrypted. And I know that sending emails from a Tutanota Email to a Tutanota email is end-to-end encrypted. I ...
1
vote
1answer
36 views

How can I encrypt messages sent over AWS PrivateLink?

I am working on a project where I need to send messages to a partner via AWS PrivateLink. Because these messages contain PII, the data needs to be secure. I have been unable to determine from internet ...
1
vote
1answer
41 views

Is a padding oracle attack possible with randomly generated keys?

In a project we collect data from devices in the field using a hybrid encryption scheme. When a device wants to send data it generates a random AES key (session key) and encrypts the payload with that....
0
votes
0answers
43 views

Advice on Site-to-Site VPN in China and protecting Intellectual Property

I know the title is an oxymoron, but our manufacturer is based in China, so I need to get as much information as possible so that management are aware of the risk/s and make this as air tight as ...
1
vote
3answers
88 views

Is it ill-advised to use the same password for lock screen and full disk encryption (Windows 10 BitLocker)?

I am wondering which attacks can be prevented by using a different password for the lock screen and full disk encryption. The goal is to prevent people from accessing my data. The details of my setup ...
0
votes
1answer
69 views

Does the stackexchange mobile app use HTTPS? [closed]

I am curious whether the stackexchange mobile app (specifically on the Apple app store) uses HTTPS protocols, does it? Is this the same with other apps that access the stackexchange network?
1
vote
0answers
6 views

Encryption: am I doing it right? [migrated]

I'm trying to get a per-user encryption key scheme off the ground and need some validation from wiser crypto pros. Consider the following procedure: User provides registration information to include ...
0
votes
0answers
8 views

Veracrypt system encryption help [migrated]

I had a system encrypted with Veracrypt. I cloned one partition on the drive to another drive and tried decrypting it with Veracrypt. It's not working. Any ideas why? Does Veracrypt need the volume ...
0
votes
0answers
39 views

Is Blowfish validated against any standards?

OWASP ASVS 3.0 V7.7 states the following: Verify that cryptographic algorithms used by the application have been validated against FIPS 140-2 or an equivalent standard. Blowfish is not included in ...
0
votes
1answer
93 views

Is using simultaneously a VPN on router and another on computer any good?

I know that the use of two VPNs on a machine is generally not advised for multiple reasons (security, stability, etc.) as well explained here : Connect through two VPN clients However I was wondering ...
1
vote
1answer
47 views

Why Bitlocker requires partition on some computers but not all

We have HP desktop computers all identical. I setup Bitlocker encryption on one, no partition was required and the computer was fully encrypted. Second computer gave me a different result, Bitlocker ...
-2
votes
1answer
87 views

Java Code for Pass Encryption/Decryption [closed]

I want to save an encrypted password (the encryption may be produced manually or using java code, and the encryption technique type does not matter), then the java code will read the encrypted pass ...
0
votes
1answer
57 views

BitLocker To Go password strength

When using BitLocker To Go, given that removable drives are inherently offline and may have to resist such attacks, what are the best practices / recommendations for password strength?
2
votes
2answers
141 views

Prevent ourselves from seeing messages

Background We are an API provider. We are unifying 3rd party messengers where we can't control the client app. What we need Even though we need to provide the 3rd party messengers with the ...
0
votes
2answers
93 views

What makes SoftHSM more security than other software solutions such as OpenSSL? [closed]

I see many people using softhsm just for encryption / decryption rather than using openssl.When I ask people they reply softhsm is more secure. Can anyone say in what ways softhsm is more secure.
0
votes
0answers
39 views

Veracrypt system encryption cloning properly [migrated]

I own a Windows laptop. I encrypted it with the Veracrypt system encryption. When the laptop boots, there is a black screen and it asks for the encryption password. There are four partitions on the ...
0
votes
2answers
79 views

Does it make sense encrypt an HTTP payload using JWE

I'm working in a project that the client must encrypt the HTTP messages payload to send to the server. In my first research I found the RFC 8188 and I think it solve my problem, but some people ...
0
votes
1answer
74 views

Giving whstapp code to a stranger [duplicate]

On Facebook I was chatting a stranger girl the girl asked for the phone number I gave her. But when I asked her number she replied she does not have one. After a while, a WhatsApp message came having ...
4
votes
1answer
59 views

How file-level security works?

How a file-level security system works internally? For example https://en.fasoo.com claims that if someone in your organization trys to leak information you will be noticed ( They didn't say this ...
7
votes
1answer
97 views

Will prepending random data (of random length) result in more secure communication?

Many files begin with a "well-known" header sequence which I imagine helps a lot in performing cryptanalysis over a huge number of data transfers. So I have the thought of prepending a block or two ...
2
votes
2answers
96 views

Committing encrypted passwords but not usernames

I’m arguing with a colleague about the security of storing encrypted password on GitHub. Our process is currently to commit a configuration file with environment variables including username and ...
1
vote
1answer
122 views

Do mobile phones automatically connect to spoofed cellular tower antenna?

I was told that an attacker is able to create a fake cellular tower antenna imitator near your mobile phone, and your phone will automatically connect to it, whether that antenna has an encrypted ...
3
votes
1answer
60 views

Can one use a Credit Card as a Smart Card?

Okay, first question on any Stack Exchange site, and Information Security seems the most fitting for this question. Anyways, I realized that my laptop has a smart card reader. I understand that ...
0
votes
1answer
71 views

Cipher that does not give confirmation whether decryption is successful

I was reading this question where the author wanted to know whether layered encryption would be better than a long password. The answers to this question all said the same thing: It would be easier ...
0
votes
1answer
57 views

Can a school look through your messages on a personal account if you logged in on your school computer? [closed]

Is it legal for a public school to scroll through your texts on a personal account of yours if it was on your school computer?
7
votes
3answers
274 views

Is PuttyGen secure?

I'm using PuttyGen to generate ssh keys for various windows computers. It requires a lot of manual user input, specifically in the form of swirling the mouse around in the window pane. I understand ...
43
votes
7answers
11k views

Is layered encryption more secure than long passwords?

The comments in this question debate about the added security of multi-layered encryption. There seems to be some disagreement, and I thought a proper question would be helpful here. So, to provide ...
13
votes
4answers
6k views

Is there a limit on the layers of encryption a file can have?

Consider symmetric GPG encryption of a given file my_file.txt. Something like (in command line) gpg --symmetric --cipher-algo AES256 my_file.txt After suppying the prompt with the new password, the ...
0
votes
1answer
124 views

Is my pseudo “password manager” solution secure?

My solution to store passwords is just using this free program, SafePad, and then writing in a document all my passwords, plain text; for example a line might be Facebook.com - user: johnsmith - ...
1
vote
0answers
35 views

Does using both a counter and a random nonce make sense for the purpose of reducing the likelihood of replay attacks?

I am aware that using a counter or a random value are both acceptable ways of generating nonces, depending on the circumstances. The tradeoff with using a counter is the necessity to keep state and ...
-1
votes
1answer
110 views

What's the purpose of Base64 if knowing its Base64 makes it easy to decode

The title I think gets the point across. Lets focus solely on these hypothetical situations: Basic Auth headers when making API calls with user:pass Storing passwords in an SQL database What makes ...
1
vote
0answers
68 views

Is GPG's AES encryption that much stronger than its RSA headers? [duplicate]

Correct me if I'm wrong at any point of this questino. I understand that AES is a lot cheaper to compute than RSA (or any form of asymmetric encryption) and that that is why GPG and similar programs (...
-1
votes
0answers
36 views

What is the best way to encrypt a directory name?

I have made a program which can encrypt a directory and its contents, and now I ran into the problem of encrypting the directorys name. The files get a part of the encryption output as file names. So ...
0
votes
0answers
11 views

Cloning encrypted drive [migrated]

I need to clone a Veracrypt encrypted drive before destroying the drive. The clone will be stored on a hard drive with other files. It has to be identical, include all data and able to be decrypted ...
2
votes
0answers
63 views

DES/AES invertibility [migrated]

My professor has posted a couple of practice questions that so far I haven't been able to find the answer for and I was hoping you could help. DES would remain invertible—it would still be ...
1
vote
0answers
51 views

Weak ciphers in TLS VPN

We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS. Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
3
votes
1answer
95 views

Why does Authenticated Encryption not decrease confidentiality?

Recently, another question here made me start thinking about authenticated encryption. In my understanding AE allows to check whether a key is valid for decryption without even decrypting the ...