A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
-2
votes
0answers
12 views

what type of encryption this is?

Is there a way to find what type of encryption/encoding is being used? For example, I am testing a web application which stores the password in the database in an encrypted format ({"data":"myPYj0/...
0
votes
2answers
32 views

Storing email addresses in plain text is okay?

You know one of those news when someone says "thousands of users' passwords and personal emails have leaked...". It's the type of stuff that I assume would be prevented if the emails were encrypted in ...
0
votes
0answers
26 views

Is it fine to store the key used to encrypt data, in encrypted form alongside the encrypted data?

There is a need to encrypt data and upload somewhere on a periodic basis. We have a master key that is used to generate data keys. On each instance of upload, a new data key is generated and the data ...
1
vote
0answers
37 views

Does a shared (but encrypted) private key for a group of users reduce the effectiveness of the encryption?

That is, is it generally considered more secure to save a single application-wide private key on the web server compared to storing (protected/encrypted) private keys in the database? More ...
1
vote
1answer
67 views

How to listen on all encrypted (SSL/TLS) traffic of a (Windows) system under your control?

On one of my Windows machines (so I am admin and basically can do whatever I want with it) I'd like to analyse traffic which obviously is directed to a malware C&C server. The traffic is TLS ...
0
votes
1answer
85 views

Some questions about encryption in Java

I have some questions about encryption in java as I'm trying to develop a password-manager-like application for my final test in Computer Science in High School (Germany). The password manager uses a ...
1
vote
0answers
47 views

Store passwords local with plain text access on WinPE

I have an application that needs to store Network Credentials for a Network Drive/Share on the disk. The user shouldn't need to enter the password every time. The OS is WinPE, so he cannot map the ...
-1
votes
0answers
37 views

iPod Touch 5th Gen - forgotten password - is it possible to recover data? [closed]

I have an iPod Touch 5th Generation Model: A1421 OS: iOS 9.3.5 (I'm guessing based on this being the latest version for this hardware) Password: sometimes with letters and numbers. But it has been ...
-1
votes
1answer
62 views

Is it possible to setup email servers to encrypt communication in transit?

I understand that generally email communication is insecure by default and would like to know if its possible to setup email servers so that the emails get encrypted when sent between hosts. I want ...
1
vote
1answer
88 views

When you use a cellular connection how is your internet connection encrypted

When you use a cellular connection how is your internet connection encrypted? Usually there is some sort of key like with WIFI the wifi password is the key used to encrypt data? How does encryption ...
0
votes
1answer
61 views

PBKDF2 hash over PBKDF2 key derivation

Imagine an app where any user provides a username and a password. This password is used to generate a 'strong' encryption key (for AES encryption) with the PBDKF2 key derivation algorithm. This ...
0
votes
1answer
82 views

How to securely store decryptable passwords

I'll quickly outline the purpose of our application: The user logs in using his username and password. He will receive a list of servers he can connect to. After choosing a server the connection to ...
1
vote
1answer
65 views

Can you restrict the services a certificate can access on the client side?

I have a verification certificate signed by my organisation’s CA, which I can use to authenticate my user account on intranet web services. Is there someway I can sign a new certificate which can ...
1
vote
1answer
61 views

Would there be a secure way to store an encryption key on server side for front-end decryption?

I am currently working on a web application with sensitive data to store (personal medical data). The app is on the very first stages of conception and I am to quickly produce a beta version that ...
0
votes
1answer
63 views

Can end-to-end encryption be securely implemented on a web application?

There are a lot of arguments around whether web applications can implement end to end encryption. Most of the arguments against javascript based solutions are centered around the fact that the the ...
2
votes
0answers
37 views

How challenge response password recovery mechanism works with disk encryption?

For the sole purpose of learning, I am trying to figure out how disk encryption software is able to recover password of an encrypted disk using a challenge response mechanism. Th recovery process ...
0
votes
0answers
49 views

Storing safely files in the cloud - what is the current state of the art encrpytion method for it?

What is considered as safe method to store files in the cloud currently and in the future (quantums) so that no potential hacker could open the file? Which current encryption methods to use for it to ...
2
votes
1answer
146 views

If my protonmail password is compromised, does that potentially mean that my whole account is, permanently?

My (limited) understanding is that my password is used to encrypt the keys which are used to encrypt my mail messages on protonmail's servers. Does that mean that knowledge of my password could ...
0
votes
0answers
29 views

SSD : Bitlocker and overprovisioning

If you use a SSD, with an overprovisioning partition created with the manfacturer's tool, and use BitLocker to crypt the remaining drive partition you really use everyday, is there a way to get part ...
1
vote
0answers
26 views

Writing encrypted syslogs [migrated]

I have a request to find out if there is a way to store syslog messages encrypted. I don't have a problem with making logrotate (or a bash script) encrypt messages nightly, but is there a way that I ...
0
votes
1answer
33 views

PIN transfer between payment schemes

I am wondering, if it should be possible to transfer PIN in case of migrating between different payment schemes like Mastercard or VISA. For example, when I have a card issued by Mastercard, and it ...
0
votes
0answers
31 views

Is there something like a secure hashmap? [migrated]

TL;DR: Is there such a thing as a hashmap whose contents cannot be read unless you have the right encryption key, and where each encryption key only works for a specific key value pair? More context: ...
0
votes
0answers
96 views

How to determine what cipher I encrypted a file with?

Years ago I had a bunch of bitcoin in a wallet that I encrypted. This was back when bitcoin was like $0.20 or $0.30 each. At one point I couple hundred of them but didn't know what to do with them. I ...
0
votes
0answers
5 views

How to double the AES keysize in keepass? [migrated]

keepass is open source on github right? Is there any way to "append" its existing AES256, double the key size, make the program support AES512? What are ways to achieve that result Thanks
0
votes
1answer
93 views

Encryption strength veracrypt vs keepass?

can you please explain the strength of veracrypt and keepass compared? Whats theoretically easier to break if both use the exact same password for their respective containers, the vcrypt or keepass ...
-1
votes
0answers
49 views

Bitlocker security with physical access?

I searched online for how to make a 3d printed weapon, the police came and seized all my printing equipment and I'm suspected for weapon manufacturing. I was searching out of curiosity. I haven't made ...
0
votes
1answer
104 views

Is Android encryption secure? [duplicate]

As far as I know Android (Pie) is encrypted by default with some hardware-based password. But how secure is this encryption? I am not talking about password compromise, but if somebody gets my phone,...
3
votes
0answers
58 views

How can we protect encrypted files and directories from being fingerprinted when stored on online storage services?

Assuming that online storage providers are considered untrusted, if files and directories are encrypted, how can these be protected against fingerprinting? The files are encrypted using rclone's ...
0
votes
0answers
30 views

Determine the type of encryption used [duplicate]

I am trying to determine the type of encryption used for a site whose password is stored in the database. The site is built using the fuelphp. It has the password of the form (...
7
votes
3answers
304 views

How does Widevine, FairPlay, and other DRM's work under the hood?

I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here. After some attempted research, I found it ...
3
votes
2answers
148 views

Are ECB and CBC modes of operation generally insecure?

In some Java code that I'm reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(...) method: AES/CBC/PKCS5Padding DESede/ECB/PKCS5Padding RSA/ECB/PKCS1Padding ...
1
vote
1answer
43 views

Public Digital Signature Validation with JWE

After reading JSON Web Encryption (JWE) and making a Node JS JWE POC demonstrating key mode using Key Encryption. I'm a bit confused as to how to validate that the sender of the message was in fact, ...
2
votes
1answer
79 views

Strategies to protect SANs in branch offices in risky places

A company has several remote branch offices located in relatively dangerous places, such as Iraq, and I'm looking into strategies to secure the SAN in the event of theft or looting. The data is ...
0
votes
0answers
50 views

Can bruteforce attacks be prevented with tables of valid inputs?

Can this method of encryption prevent bruteforce attacks? If I had a hypothetical table (or function) where every grammatically valid sentence (in existence, limited to some number of words) was ...
1
vote
1answer
72 views

Breaking SAM windows password file offline

Is it possible to break a Windows encrypted SAM file where passwords are stored if you have the physical drive offline? Thanks
1
vote
1answer
91 views

Encrypt data within the TOR network

They say that the last TOR node presents all the information in clear. If I want to send some sensitive information by TOR, could you encrypt it, and in this way be encrypted by both the TOR nodes, ...
0
votes
1answer
60 views

Is there a reasoning encrypting a GPL binary where I have to publish the sourcecode?

We're a company selling embedded devices. Our devices use u-boot & Linux, both being GPL and therefore we have to release the sourcecode as used to build our binary. We're in the process of ...
1
vote
0answers
45 views

Is more ECDHE or RSA currently recommended? [migrated]

Lately I have seen that many websites warn us of changing RSA for ECDH, and that the latter is much better if we use its "ephemeral" form or better known as ECDHE. So is ECDHE recommended to use more ...
0
votes
1answer
40 views

Understanding patch for my report

I reported a flaw to the security team and they changed the UIDs from regular integers to hash kind of a thing. Like this, XXXX-XXXX-and-so-on I still want to try and bypass things but I don't ...
1
vote
0answers
62 views

Verify Encryption Key with Non-Interactive Zero-Knowledge Proof

I wrote an implementation of a non-interactive zero-knowledge proof system as outline in this research paper. As far as I can tell, it functions flawlessly as intended with text secrets such as ...
2
votes
0answers
67 views

Disk encryption with automatic reboot and no-network [duplicate]

I am using crytsetup with LUKS to encrypt a data drive, separate to the system drive, under Ubuntu 16.04. The issue I am facing is that this system will also be required to automatically start itself ...
0
votes
0answers
32 views

What form of encoding is this? [duplicate]

I know That this question has been asked before, but I couldn't find the encoding that is used in this particular case. I am also very new to this, so if my question is off topic or something like ...
1
vote
1answer
182 views

Possible to decode md5 hash of a malicious URL?

Context: I had a virus on my WordPress website server that injected itself into every functions.php file on the server across two different sites. After removing the heavily obfuscated virus code I ...
1
vote
0answers
35 views

Is the shared secret from ProtonMail SRP actually used for anything after logging in?

Is this value just used to log in or is it used as a key for anything else later on? I see that the pm-srp code does make a point of keeping it around but it isn’t clear for what purpose, and some ...
2
votes
1answer
73 views

Encrypting session cookies on an Android device

One of our clients has an issue with a government security audit on one of their mobile applications. The finding states that the application stores session cookies on the device in clear text format ...
0
votes
0answers
8 views

ValueError: MAC check failed [migrated]

I am doing a super small and simple program, where it seeks to understand this module a little more, but something very strange happens. The code below returns: Traceback (most recent call last): ...
2
votes
1answer
36 views

Are TCP socket connections over private wifi encrypted using WPA2 PSK?

I recently made a very basic TCP client/server system in C++. I got the client and server running between two computers connected to my private Wi-Fi. Since a private Wi-Fi is encrypted, does that ...
0
votes
0answers
51 views

Is this symmetric key system secure?

I am creating a secure network data transfer system, and would like to know if there are any obvious flaws in this scheme. Secrets The secret is a password that is known to both clients. This ...
1
vote
2answers
158 views

Required a simple guide for secure messaging application

For my personal research, I have to create a messaging app, but security is only important part of application, security from MITM (man in the middle attack), at device end, and at server level. (note:...
0
votes
0answers
44 views

Implementing encryption at rest on a remote virtual file system

Imagine I had a virtual file system that I am using to store some data (similar to an FTP). I am trying to figure out a scheme where I can implement encryption at rest for the files local to the file ...