Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

-2
votes
0answers
33 views

Is Watermarking used in practice? [on hold]

I know this is not strictly security but the security crowd usually has the DRM/Steganography people as well. I am wondering how often digital watermarking is used in practice. I know DRM is used ...
0
votes
1answer
29 views

Crypto-shredding & backups of keys

I was wondering, how is crypto-shredding implemented in an environment, where data backups/mirroring is mandatory for the "key database" - as it must not be possible to lose the machine/db with all ...
1
vote
0answers
45 views

Help me understand Encryptpad and 7-zip for encryption

I was looking to encrypt some text files (containing sensitive data) so I could safely keep them online (e.g. Google drive). I have found three options: 7-zip, which does AES-256 Encryptpad, which ...
1
vote
1answer
15 views

Read NTFS / EFS encrypted files on iOS with saved certificate

I have data saved on old NTFS-format hard disks which were encrypted on Windows machines, using EFS (the native file encryption system built into Windows). I encrypted selected files/folders, only, ...
0
votes
3answers
50 views

Transfer encrypted objects and decrypt in browser

Im building a webclient where a tensorflow model needs to run in the browser. I would want the Model to be protected so that it cant be just downloaded off "Developer tools". The model has to be ...
4
votes
1answer
131 views

How was IronChat compromised?

How was IronChat compromised? https://hotforsecurity.bitdefender.com/blog/police-crack-encrypted-chat-service-ironchat-and-read-258000-messages-from-suspected-criminals-20530.html Dutch police ...
0
votes
0answers
11 views

Determine Which Encoder Used For? [duplicate]

I have encoded string as 3l2t2db0c5ow2f7s7bhr6mij4 I hope, it's decoded value is 494 There is another encrypted string as f0frccyrlq2jjihdraoie2e2d and i think it's decoded value is 520 I want to ...
0
votes
0answers
29 views

Is Sophos Home’s termination of my Mac’s DropBox.app a false positive?

I am trialing Sophos Home on my Mac. It is terminating my DropBox app because, it says, the app is trying to encrypt files; i.e. Sophos is concerned that DropBox.app might be a piece of Ransomware. ...
-1
votes
0answers
76 views

Is it possible to “prove” that a state change in a state machine is valid, without revealing the stat machine?

I have multiple clients who all run state machines and one mediator, who is used by the clients to communicate with each other. Is it possible for the client to proof that a proposed state change is ...
0
votes
1answer
32 views

Encapsulating DNSSec into Dot or DoH

I read a few articles on how DNSSec works (here and here). The DNSSec request are not encrypted, and I wanted to know if it's possible to encapsulate it into a DoH or a DoT request?
-1
votes
0answers
27 views

is the “unknown” in the path of this email, the source of the delay and does it occur prior to leaving Docusign?

Created at: 6/6/2016, 1:05:58 PM PDT ( Delivered after -13 sec ) SPF: pass DKIM: pass DMARC: pass # Delay From * To * Protocol Time received 0 ...
3
votes
2answers
141 views

How to choose between password derivation or encryption?

Suppose you use a password manager having all possible features of modern password managers: encryption with a key derived from your master password, auto-filling, cloud or local storage, browser ...
-5
votes
0answers
47 views

I'm trying to Decrypt the following Encryption - B-893bc61697fae28215bf8e5ecab3a81e [on hold]

I'm trying to Decrypt the following Encryption - B-893bc61697fae28215bf8e5ecab3a81e I do not have much knowledge of Encryption, Decryption etc. But all i do know is, i can't find anything on this, i ...
0
votes
0answers
5 views

AES 256 GCM encryption decryption in nodejs [migrated]

I am implementing a basic encryption/decryption set of functions in nodejs and I keep getting the following error in the decryption part: Error: Unsupported state or unable to authenticate data This ...
1
vote
1answer
51 views

Does Whatsapp change key when switching phone?

Alright so, I really didn't expect this but here's the story. I was doing some tests, I copied one of the .db.crypt12 in /sotrage/emulated/0/Whatsapp/Databases/ from my phone to my computer, then, I ...
2
votes
1answer
78 views

What has to occur for a hacker to monitor traffic from my LAN?

I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
2
votes
2answers
78 views

Can I see the MAC address of a router on an encrypted Wi-Fi network?

Say that I am within range of a Wi-Fi network that is encrypted using WPA2, but I don't know the password. Is it possible for me to learn the MAC address of the Wi-Fi router that is broadcasting the ...
1
vote
0answers
15 views

3rd party verification of separately encrypted files

I'm trying to figure out how to verify whether a file's contents are unchanged even though it has been re-encrypted and the 3rd party cannot know what is inside of the file. A contrived example to ...
0
votes
0answers
55 views

Forward secrecy in secret-key based chat application

Previous Title: How to generate keys to encrypt individual messages in a chat-like application I'm working on an application that effectively amounts to a one-on-one chat app. There is some project-...
25
votes
11answers
9k views

How to secure passwords over HTTP?

Say my password is abc. I want to send it to the server over HTTP. I could send it in plaintext and let the server hash it and compare it to the entries in its database, but then anyone that can see ...
-1
votes
0answers
19 views

Hydra error invalid target definition [closed]

I am using Hydra in termux cracking a Gmail password and it doesn't start to crack, the problem being invalid target definition. I execute the command hydra -l herisgeneyl@gmail.com and press enter, ...
1
vote
0answers
36 views

Where To Store Public and Private Key files?

I'm creating a Java web-application using a WAR file to be deployed on a server. I will only be using one single web server and hosting. In my project, I'm generating two files: Public Key file and ...
2
votes
3answers
113 views

Does every recipient receive a different version of “encrypted” email using PGP?

If I understood it correctly, PGP encrypts email by using receiver's public key. In a multiple-receiver scenario, does that mean each receiver will get a different version of "encrypted" email but the ...
1
vote
1answer
65 views

Is it exists a possibility to encrypt with several public keys and decrypt with any of them?

I need to implement the following scenario: application generates string - "Hello world" ask the user about his Public Key user gives his Public Key to application (no privacy violation) application ...
0
votes
0answers
27 views

Desktop login - Security about private keys

Simplified case of usage: I've been developing a desktop application storing a pair of public and private keys, which are completly encrypted as soon as they are created by a given user password ...
0
votes
0answers
40 views

Derive random output from payload & encryption key and verify it without knowing the payload

I want to know if this type of hashing or encryption scheme exists. Let's say there is a master key : 'abcdefg' I want to encrypt the payload : '2018-11-08 22:11:02' The output : '...
2
votes
0answers
98 views

SSD encryption vulnerability & TPM

I've recently read several articles about this paper: Self-encrypting deception: weaknesses in the encryption of solid state drives (SSDs) by Carlo Meijer and Bernard van Gastel. The thing I haven't ...
-4
votes
0answers
31 views

when it ask if you want to certify for evryone or my self what do i choose\ [closed]

when it ask if you want to certify for evryone or my self what do i choose\
0
votes
2answers
88 views

Openssl / OpenPGP file encryption - security advise [duplicate]

I am planning to use Openssl to encrypt our weekly offsite backups using a keyfile (symmetrical encryption) and after some research I found the following GnuPGP command: base64 -w0 <keyfile.jpg | ...
3
votes
2answers
70 views

Cipher Suite TLS 1.2 - Weak in OHS

I am trying to correct weak encryption in TLS, by doing a test in SSL Labs, it throws weak encryption in the following chpher suite: Current Configuration: SSLCipherSuite HIGH:!MEDIUM:!LOW:!aNULL:!...
25
votes
6answers
8k views

What would be the key size for a picture used as a key?

I'm working on a cryptosystem that uses colour pictures as keys for encryption. I'm trying to guess what is the key size of my cryptosystem in order to find the feasibility of a brute force attack. My ...
3
votes
1answer
44 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
1
vote
1answer
35 views

Public Key Crypto - sign Bob's name into Alice's message or encrypt Alice's name

I was reading Defective Sign & Encrypt in S/MIME,  PKCS#7, MOSS, PEM, PGP, and XML and in section 5.1  Naming Repairs By signing Bob's name into her message, Alice explicitly identifies him ...
1
vote
1answer
54 views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
3
votes
1answer
73 views

How to prevent participants from cheating when establishing an OpenPGP-like structure

I would like to share documents within groups and make sure that the member of each group can only access the documents shared in his/her group. I also want to make sure that non of the parties can ...
1
vote
1answer
26 views

Share Document within user group

I would like to share documents within groups and make sure that the member of each group can only access the documents shared in his/her group. Situation: There are 5 participants (A, B, C, D). ...
1
vote
1answer
53 views

How to identify the sender of a message in asymmetric encryption?

I am working on a chat application, and I am trying to secure the communication by using asymmetric encryption. I am able to encrypt a message with the receiver's public key and decrypt a message with ...
13
votes
2answers
898 views

How secure is the Ciphersweet library for searchable encryption, and why is a duplicate entry leak not a problem?

I'm currently managing a code base in which we've got a mysql database with all records encrypted using the php-encryption library. This works well for our current setup. We now got a new business ...
0
votes
1answer
43 views

What does the existence of this file indicate? [closed]

C:\Documents and Settings\Sarah\Recent\DSCN0275.JPG.lnk on a Microsoft Windows system, and use the xxd program to dump the contents of this file:
1
vote
1answer
46 views

Does PGP encrypt all messages or only that one send with PGP?

If I encrypt my Email with PGP will all of my emails will be encrypted or only that ones that people send to me using my PGP key? If I register on Facebook or Dropbox and they send me an email: "...
1
vote
1answer
60 views

Signal Protocol: How is identity exchanged if a key exchange hasn't happened yet?

On Signal's blog they mention that keys for accessing your profile are exchanged normally with your contacts using the Signal Protocol just like messages are (implying they are already contacts and ...
1
vote
2answers
148 views

Is it possible to bruteforce a file encrypted with a keyfile?

If someone used a keyfile (4092 bit of entropy) to encrypt a file, and bruteforced it with Hashcat... would Hashcat have to guess the blob data in the keyfile to crack the encrypted file? $ dd if=/...
0
votes
0answers
40 views

Why trust AWS S3 with SSE-C?

Referring to Protecting Data Using Server-Side Encryption with Customer-Provided Encryption Keys (SSE-C): I was wondering why I should believe that AWS only keeps a salted hash of the encryption key ...
0
votes
1answer
44 views

How can I make my Windows Server accessible from another Windows PC over the internet safely, without using VPN?

First, some backrgound context as follows: I have a Windows Server 2008 running for my company. It contains an ERP, which is accessible by other computers/clients on LAN. During the client setup, the ...
0
votes
1answer
27 views

OpenSSL: what's the difference between -kfile and -pass?

It seems both -kfile and -pass can be used to encrypt files with a 2048 bit keyfile? I don't understand the difference between the two methods: $ openssl enc -salt -aes-256-cbc -in inputfile.txt -...
9
votes
1answer
319 views

How secure is a land line phone call?

What are the risks of communicating sensitive information using a land line? Once my voice gets digitized does the carrier use encryption during transport? We have all heard about rogue cell towers (...
2
votes
0answers
43 views

GPG: how to encrypt using a keyfile? (symmetric)

In Ubuntu this produces a "filename.txt.gpg" file and works: $ gpg --symmetric --passphrase-file keyfile.key filename.txt In debian, I get a popup requesting I enter a password... How do I encrypt ...
-5
votes
3answers
386 views

Which encryption algorithm allows for the less output data than source data? [duplicate]

I am trying to figure out how to get my source information to compile smaller using encrypted text. This could potentially change the game in transferring large-chunked data and offer security at the ...
4
votes
1answer
59 views

Generating QR code from seed in browser - possible security issue?

I need to implement 2FA in my web app. I'm doing this the standard way: the newly created user's seed is retrieved from the server(I use speakeasy) and the QR code is generated. The thing is, it's ...
0
votes
0answers
37 views

Encryption Method for Open-Source “Decentralized” Network

I am currently creating an open-source decentralized chat system in Python. It originally started off as being something to train my programming skills, but after talking about it to some friends, I ...