Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

What is currently the most dominant encryption method for working with Node.Js and mongoDB [migrated]

I generally use "crypto" module of Node.js and google 2.0 authentication. But I would like to learn more advanced methods. Please guide.
0
votes
0answers
40 views

How does JCEKS Password Based Encryption work

I want to get my hands on some recent documentation or an explanation on how Password based encryption works inside of JCEKS KeyStores Some questions I am looking to get answers to are What is the ...
0
votes
0answers
51 views

Is Microsoft Forms adequately secure to collect personal health information? [closed]

I want to make a survey on a website using Microsoft Forms. This is a service that allows users to create surveys that can be disseminated to others to fill out. My patients could input personal ...
0
votes
1answer
65 views

AES encryption (in Java) of different JSON strings always produce same encrypted string as result. Why? [closed]

I have a program written in Java which takes JSON string as argument, encrypts it using AES then encodes it using Base64. JSON string is like: {"a": "b"} or {"a": "n"} or {"a": "k"} I.e related ...
0
votes
0answers
17 views

MDC and MAC in cryptographic hash function [closed]

What is the difference between MDC and MAC in cryptographic hash function
1
vote
1answer
67 views

Need of Encryption for storing Health Information

I am managing development of a platform for health service providers and thus, it houses health information about patients registered. The patient register themselves on the system and maintain their ...
2
votes
2answers
98 views

Methods for backing up key on paper

What are the methods to backup a key to paper? The idea is to have reasonable protection and the ability to restore the key in case of the digital backup is lost. Are there things that convert a ...
0
votes
1answer
40 views

SMIME email decryption using a private key - what am I doing wrong?

I have an encrypted .eml file and a private key. I've looked it up a lot on the internet but couldn't find a way to decrypt the email using OpenSSL. I've tried this command: smime -decrypt -in ...
2
votes
2answers
87 views

Storing credit card information - encrypted at rest

A client is asking for a way so his app can receive credit card information and store them. He needs this to process scheduled payments from his clients. I told him that I can build a asymmetrical (...
0
votes
1answer
41 views

how do i find the number of possible keys / password to decrypt a plain text

i like to know if there is any way to decrypt a plain-text that is encrypted 55 rounds using Caesar ciphers with different key for each round. and using brute force attack without knowing the length ...
-1
votes
0answers
43 views

Comparing 2 files [Steganography] [closed]

I am sure that something malicious is going on with the 1st file (bigger file size) Please compare the two files and test if something malicious is found 1st file(malicious) -- https://funksyou.com/...
-1
votes
2answers
113 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
0
votes
0answers
43 views

Is AES ECB mode safe for one block Encryption then MAC with same key?

I want to do something really basic but I need to be sure that the process is safe : Problem Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and ...
0
votes
0answers
44 views

Password Vault Storing Passwords

I've been working on just a fun side project in C++ to practice encryption algorithms and I sort of ran into a bit of a roadblock of sorts. To summarize the project I have a text file of encrypted ...
2
votes
1answer
74 views

How secure is BitLocker without TPM?

My laptop doesn't have TPM. If I enable BL PIN and someone steals my laptop and remove the drive, will they be able to read it's content on another computer? How am I vulnerable without TPM?
0
votes
1answer
59 views

Store credit card data in google sheets - Asymetric Encryption

Yes! this sounds crazy, and it is, please let me give you some background about this... I'm doing a self-checkin app for a hotel, this app will store this checkin data in google sheets, where the ...
0
votes
2answers
30 views

Transmit over CAN-FD a RSA-ecrypted and signed message, how to deal with message length?

As said in the title, I've to encrypt a message with RSA, generate a signature, and transmit everything over CAN-FD (suppose keys are already been exchanged). The problem is that a CAN-FD frame ...
0
votes
0answers
31 views

Does `netplwiz` store user passwords in a reversible form on the filesystem?

The utility netplwiz is included with all versions of Windows. It allows you to select an "auto-login" user which will automatically be logged in upon first boot. After selecting an auto-login user, ...
5
votes
3answers
760 views

Should we encrypt all REST API calls from a mobile device?

I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we ...
-1
votes
0answers
45 views

How can I encrypt something with a PGP private key?

I understand the normal operation is to encrypt with someone's public key and decrypt with the private. And I'm also aware of how signatures usually work. However I'd like to ensure that in order to ...
0
votes
0answers
32 views

Exporting SSL Certificate to 3rd Parties

One of our 3rd party service provider wants us to create a certificate PFX file in order to host an application outside our network from xxx.companyname.com What are the security risks about this? ...
1
vote
1answer
36 views

Thick Client memory encryption

I came across a thick client application recently. The application temporarily stores sensitive data (like username and password) in clear text in memory and the data is flushed once the user logs out ...
1
vote
1answer
29 views

What affect does modulus have on CSPRNG outputs?

I work in security and I've seen modulus (modulo) used in many encoding and crypto algorithms. However, today, a friend of mine mentioned that using modulo like this: unsigned long int result = ...
2
votes
3answers
122 views

Folder level encryption on a Windows 10 Pro laptop

Most of the stuff on my laptop is benign; and the hassle of full disk encryption is not worth it. On the other hand, one or two folders I would love to encrypt and password protect. What's the best ...
1
vote
3answers
137 views

Is it really that unsafe to store passwords in a text file on my computer?

These days, we have pretty secure systems. I have a mac with T2 security chip and the whole disk is encrypted via FileVault. iPhones are known to be pretty secure, with even FBI having a hard time ...
0
votes
1answer
37 views

Credential encryption scenarios using certificates

Situation: We have several service accounts (AD) that need to use a limited set of credentials. These service accounts run scripts (PowerShell & Python), etc on different servers, requiring these ...
0
votes
0answers
34 views

What's Gitlab token generation policy?

I'm searching for the GitLab token generation policy but nothing found on documentation : encryption method (RSA, ECDSA, ...), key length, expiration policy, ... It's to know if it's in agreement with ...
0
votes
2answers
78 views

What if an attacker gets access to public key through an insecure media in digital signature?

If A encrpyts the message and creates signature using his private key and sends through the network then only B with the public key of A can decrypt that message. But what if the attacker gets access ...
0
votes
1answer
31 views

How to secure a web-only end to end encrypted chat with message persistence?

Currently, I'm trying to create a web-only end to end encrypted chat, with message persistency. I did some readup on how to create an end to end encrypted chat in JS, I found out there are quite some ...
0
votes
0answers
37 views

Once I create and get a digital certificate signed, what next? [duplicate]

At the moment, I used this to make what I believe is a signed certificate in php <- Please correct me if I'm incorrect with this. But either way, after making a signed certificate, what next? How ...
0
votes
0answers
27 views

Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?

I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
2
votes
1answer
49 views

Has there ever been a known case of Bitlocker breach through lock screen?

Scenario: A Windows user with Bitlocker-encrypted OS drive uses Win+L shortcut to lock their computer, but leaves it powered on. At this point, their house is raided (by police, or thieves, or FBI, ...
1
vote
1answer
80 views

Crack windows excel password

I have many password protected microsoft excel worksheet and I need to be able to edit it. I have forgotten the password, and I know that I can edit the file and take out the password check, but I ...
0
votes
1answer
47 views

A good approach to implement end-to-end encryption for a groupchat application in Node.js?

I'm experimenting with a self-made groupchat application, similar to Slack. It currently has the notion of public channels, private channels and one-to-one channels, all using a common datastructure '...
0
votes
0answers
48 views

Architecture of smartphone security: why FBI needed apple's help? [duplicate]

I want to focus on technical aspects, not on the fact that they wanted to make a precedence. i assume the smartphone security architecture is following: cryptography chip. it's read only and ...
0
votes
0answers
29 views

How does android boot and shows notifications with full encryption but without pre-boot authentication

i have android 5.1 (motorola moto g xt1039). i encrypted the phone and set screen password. then after every password change i can choose one of an two options: 'require the password at startup' '...
1
vote
1answer
94 views

What are security issues about sending bank alerts via email/SMS?

Banks offer to send alerts for each transaction happening on a customers account. My bank is offering three options: SMS alerts, email alerts and push alerts into their own app. Only sms alerts are ...
1
vote
1answer
83 views

Does knowing part of the key make encryption weaker?

I am asking specifically about AES CBC mode. Is it safe to assume that an encryption key of length X with N characters known by an attacker is just as secure as a key of length X − N? For example, ...
43
votes
2answers
12k views

Aren't keyfiles defeating the purpose of encryption?

I just added a drive to my system which is basically a partition mounted for extra storage. I'd like to encrypt it to protect my data in case of god knows what, and by doing that I'd need to enter the ...
1
vote
1answer
53 views

How can one detect and mainly bypass TLS inspection as a user with an enterprise managed device?

Let's assume Alice is an employee of the Chuck company. Alice likes to communicate with Bob, a server somewhere in the internet. Chuck, being a security orientated company, inspects all TLS ...
1
vote
0answers
30 views

Is it possible to adjust the header size in eCryptfs?

If I understand it correctly, eCryptfs creates a file in the "lower" directory whose content is a header, plus the encryption of the file in the "upper" directory. But when I create an empty file in ...
0
votes
1answer
62 views

Database breach protection [duplicate]

I'm developing an API which requires an API key to use. These keys are assigned to users. To figure out which user the key belongs to, I have to store some information in that key. But I don't want it ...
0
votes
2answers
74 views

Can I find a private key for a known encrypted file?

Let's say I create a 100KB file only containing 1234567890, that is, a known value. This file would be sitting on several folders as bait. Once a Rasomware hits the folder and encrypts this file (...
2
votes
1answer
53 views

how to protect smartphone data against theft?

i assume typical android has fully encrypted disk with a key stored in a header. header is encrypted using pin / pattern / fingerprint or not encrypted when there is no lock. is that correct? when ...
0
votes
1answer
47 views

How I can encrypt Windows if I use a SSD and HDD?

I need to encrypt my Windows Disks with full disk encryption. Windows is already installed and all drives have data. My Drives/Disks: 1 SSD - C: drive 1 HDD - D: drive and I have a drive where Linux ...
0
votes
1answer
35 views

Directly signing a file with gpg or instead its checksum file?

It is my understanding that when file is signed with gpg the signature will provide 2 guarantees, a proof of ownership of the signature and the integrity of the signed data. lets say I have a doc.txt ...
0
votes
1answer
42 views

Store provided external user data encrypted in the database

I hope this is the Right Place I have implemented a full user encrypted data storage solution. This works well and I can sleep well in the knowledge that neither I nor anyone else except the user can ...
1
vote
0answers
54 views

Is this reasonable privacy for storing sensitive information?

Outline I am writing a web app that will need to store some transaction data (amount, date, merchant...). Objective I want to keep this data reasonably private from unwelcome eyes. Threat Model ...
1
vote
1answer
87 views

Alternatives to TAILS for anonimity on TOR unfriendly websites

I'm a happy TAILS user since a while. I've immeditaly fallen in love with the simplicity of the installation and user experience in general: no code, minimal competences required to get everything up ...
3
votes
0answers
50 views

Best practices for storing long-term access credentials locally in a desktop application?

I'm wondering how applications like Skype and Dropbox store access credentials securely on a user's computer. I imagine the flow for doing this would look something like this: Prompt the user for a ...

1
2 3 4 5
103