Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
27 views

Is client-side encrypted data really personal data [migrated]

Scenario: My service that is storing customer files is hosted on my own personal physical server, “on-prem”. It is then using one of the popular cloud storage services (Azure blob storage, AWS S3) to ...
0
votes
1answer
87 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
0
votes
0answers
50 views

Where is the source for OpenSSL RSA_private_encrypt? [closed]

I'm currently doing research on OpenSSL's encryption algorithm for RSA. The problem I'm facing is actually finding where the source code for the RSA_private_encrypt function is defined. What I've ...
0
votes
0answers
9 views

Is it possible to create a ZIP file with NUL password? [migrated]

I want to know is it possible to create a ZIP file with NUL password? If it is possible, how?
1
vote
1answer
103 views

Will encrypting a dual boot OS prevent viruses from spreading between the two?

Will encrypting a dual boot OS prevent viruses from spreading between the two? Also does linux have any MBR viruses? Will locking the bios in Windows and GRUB stop viruses from attaching and ...
0
votes
0answers
72 views

Are emails sent from ProtonMail to Tutanota (or vice versa) ever not encrypted?

Both mail accounts, ProtonMail and Tutanota are encrypted, and as the knowledge base from ProtonMail states, ‘emails from ProtonMail users to non-ProtonMail users’ are ‘otherwise encrypted with TLS if ...
0
votes
0answers
9 views

Is it possible to securely factory wipe a phone directly after encrypting it? [migrated]

I would really like to make my phone more secure. But at the same time I want to be able to factory wipe it any time. I'm afraid that factory wiping could brick the phone/makes it unusable. So is it ...
0
votes
0answers
46 views

Why do cloud providers as AWS or Google Cloud recommend client-side encryption? [closed]

As per this definition on Wikipedia: https://en.wikipedia.org/wiki/Client-side_encryption We can see that client-side encryption is mostly related to Cloud services. What are the technical reasons ...
3
votes
3answers
182 views

Why use an IV when the message length is only one block?

I have read that IV's are used with block ciphers in case a sequence is repeated in a message and produces repeated sequences in the ciphertext. I see IV's being used in cases where the message is ...
0
votes
1answer
28 views

Why would you use random algorithm for CSFLE if you can't query the inserted data?

I think I really misunderstand something about data encryption. This guide (https://docs.mongodb.com/manual/core/security-client-side-encryption/#randomized-encryption) says the following: "...
0
votes
2answers
73 views

Need some clarification regards end-to-end encryption process

Let's say I want to make a messaging(just an example, take it as any data) web(react + node) application(more like an email rather than chat) with end-to-end encryption. So at some point, I will want ...
5
votes
1answer
909 views

How to ensure identity for server-to-server communication over IP

How would one go about ensuring that a server at a given IP address is who it says it is? I need to send confidential data to another server at another IP address. If the server had a public domain it ...
0
votes
1answer
73 views

When to use envelope encryption and when not?

in our SaaS application we store different integration tokens from apps like Trello, Pivotal, Intercom etc, based on Oauth tokens, which we want to additionally (on top of the default database ...
1
vote
1answer
95 views

How best to crack password for MacOS encrypted .dmg, given I know the majority of the password content?

Encrypted .dmg on MacOS High Sierra, tested password before sending for repair. Upon return from repair, password does not work. The possibilities I see are the .dmg file is corrupted, or I'm wrong ...
0
votes
0answers
25 views

Client-side encryption of a password? [duplicate]

I'm trying to wrap my head around authentication/authorization process within web-app that encrypt data on the client-side and I'm getting very confused about it. Hopefully, you could clarify it to me....
0
votes
1answer
53 views

Storing a key in a symmetric encryption for password manager using cryptography module

I am making a password generator and manager, I make a the user create login information, I hash their password. I then generate the password and I encrypt the password with a key that is stored ...
0
votes
0answers
34 views

Is state management of deciphered data a security risk?

I'm not sure if I have my terminology right here or that my question is accurate, I will expound here: Homomorphic encryption seems to be impractical but from my limited knowledge looks like the only ...
0
votes
0answers
29 views

How much data can we encrypt using AES 256 before changing the key? [migrated]

Although this question has been answered in this link (After How Much Data Encryption (AES-256) we should change key?), I am not satisfied with the answers because the Recommendation for Block Cipher ...
0
votes
0answers
48 views

Is it possible to attack a one-time pad encrypting only slightly more than its length? [migrated]

This question might be uncannily similiar to this one posted over 6 years ago, but the structure is completely different. It's written nearly everywhere that OTPs are incapable of sustaining more than ...
0
votes
1answer
80 views

Database password encryption compromised

A company has a database with user's passwords encrypted. An attacker compromised the password encryption now it needs to be changed. In this situation does the company needs to change the encryption ...
6
votes
6answers
4k views

Can I compare 2 same encrypted files by checking it on binary mode?

I have been working on testing whether same encrypted files are same without decrypting it. I have a test file provided to me one with normal data and another encrypted version of it. I need to check ...
1
vote
0answers
46 views

PII best practices

I'm looking for some guidance and advice on data security best practices, specifically on how to best separate, store and secure personal identifiable information from other data. The background is ...
4
votes
2answers
2k views

Can I use VeraCrypt with an SSD?

I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
2
votes
1answer
70 views

Is GPON uniquely vulnerable to eavesdropping exploits from neighbors on same network? If so, why?

Background A fellow in my social circle is involved with a cybersecurity company that secured a patent. I want to learn more. Simple Explanation US Patent Office Listing Patent analysis is a very ...
1
vote
1answer
120 views

Are bcrypt hashes safe enough if exposed?

Considering: A VERY motivated attacker, A large entropy password, as in 256bits¹ hashed in bcrypt (with recommended cost factor of 12), and Attacker knowledge of everything he might need (except the ...
2
votes
2answers
65 views

How to update large encrypted files on a server

I'm curious how large cloud computing services that might secure encrypted data would update an encrypted file. For example, let's consider a user is using RSA to encrypt a large file, maybe gigabytes ...
15
votes
4answers
3k views

PBKDF2 usage will slow REST API down?

When implementing password hashing using PBKDF2 for authenticating access to a REST api,when we say that PBKDF2 is slow does it mean that it's going to take a lot of time to hash the password and ...
1
vote
0answers
46 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
0
votes
0answers
20 views

VeraCrypt taking a very long time (~1 hour) to create volume? [migrated]

To get to 50% on a 1.8TB volume, VeraCrypt has taken about 30 minutes. If it takes another 30 minutes to finish, that's 1h to create the volume. Is this normal? (if it in't should start over after ...
0
votes
0answers
56 views

Bitlocker TPM + PIN vs pre-boot DMA attack

In this link there are talks about pre-boot DMA attack: https://eclypsium.com/2020/01/30/direct-memory-access-attacks/ If the user would have a Bitlocker TPM + PIN enabled, would an attacker with a ...
1
vote
1answer
56 views

Is Acronis True Image encryption safe? [duplicate]

This question has been asked before but a lot of time has passed since then. The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part. Can ...
0
votes
0answers
47 views

DigitalOcean Spaces for personal backups

Sorry for the naive question. I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups. I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
0
votes
1answer
44 views

VPN data encryption from VPN server to destination

When we connect to a VPN server, all data that we send and receive are in encrypted form. But when data is sent from the VPN server to the destination, is the data encrypted? If not then any hacker ...
1
vote
0answers
30 views

Reading is much faster than writing with AEGIS-128

I want to use cryptographic integrity checking in Linux. Naturally, I measured performance of different implementations on my computer in order to choose the best. The block device is in tmpfs, in ...
1
vote
0answers
48 views

Samsung Galaxy Note 10+ 5G - cellebrite mobile forensics data extractions - locked with pattern

I've got a locked Samsung Galaxy Note 10+ 5G (running the latest android 10 and patches) The phone is locked with a pattern (unknown) What are my chances of any data extraction with cellebrite or ...
3
votes
2answers
66 views

How to send a fixed size encrypted message to be broadcast to multiple (known) recipients without letting the broadcaster decrypt the message

I am creating a network with three layers. A sender layer, A gateway layer, and a Receiver layer; each having different platforms. See diagram below All platforms have published their public keys on ...
1
vote
1answer
47 views

How is this Identity aware encryption description different from simple authorized access?

I was reading this article by Credit Karma (An American fintech). They mention that this system of "identity-aware encryption" helps them better protect the data of their users and to keep ...
0
votes
1answer
56 views

Is rsyncd secure? (except for the lack of transport encryption)

I have been using an rsyncd server for backups for what feels like a decade. I saw that rsyncd has no transport encryption (not even for username and password). I wonder what other security issues ...
0
votes
0answers
15 views

How to determine what type of encoding/encryption has been used in this file? [duplicate]

I take this file from resource of game and I Want to know how to decrypt this , this is small line from the code : §ö ¨ö È)4Ì~u”]Èr L;Ùúe£¼’Q7ŠzY½¹Í„¶Qö¨¤s„³JØW rest of the file here : The Code
3
votes
1answer
65 views

GoCryptfs on cloud

I read the audit docs on GoCryptFS website (https://nuetzlich.net/gocryptfs/threat_model/). There dragon has full information about the read write done in the gcfs partition, what does this mean and ...
1
vote
1answer
89 views

Use the public key of a certificate as the key for HMAC SHA

Consider the following scenario. A company has several computers for each users on the same domain. They purchase an RSA certificate from a recognized authority which will be deployed with private / ...
0
votes
1answer
48 views

Is IPsec VPN still necessary when already using HTTPS protocol? [duplicate]

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
1
vote
1answer
50 views

Hybrid Encryption: What is the format for storing the encrypted key and the cipher text together?

In the scenario of a hybrid encryption for which I use RSA (asymmetric) to encrypt the encryption key used with AES (symmetric) to encrypt my message, I need to store the encrypted key with (together) ...
1
vote
0answers
32 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
2
votes
1answer
113 views

How are passwords stored in the database of a decentralized peer to peer system?

I want to use username and password instead of public key cryptography for a decentralized peer-to-peer application, but since the passwords are stored on users' computers, there is a possibility of ...
2
votes
0answers
35 views

Is the RSA Private Key non-exportable option protected from key extraction?

I would like to know if the non-exportable private key option, virtualized based security, selected when importing an RSA certificate guaranteed although the user will never be able to see the RSA ...
2
votes
0answers
101 views

Long-term symmetric key storage

I have some sensitive data that I need to encrypt and retain long-term (i.e., 5+ years at least). I'd ideally like to secure it using multiple hardware devices via a Shamir share. Something like: ...
0
votes
0answers
21 views

Public key RSA vs SHA [duplicate]

If a person had four choices : store unencrypted passwords . Use SHA-1 on the password and store . Use SHA and salt then store that . Use public key encryption and throw away private key . Which is ...
1
vote
0answers
57 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
12
votes
4answers
7k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...

1
2 3 4 5
108