Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1 vote
1 answer
35 views

How are Root CA Certificate Lifecycles handled at a large scale?

From my research, it sounds as though a root certificate store is completely managed by your operating system. Which is to say, if I install software, or updates to the OS or browsers (or anything ...
1 vote
1 answer
80 views

Why does some Ransomware encrypt also the file header and trailer?

Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
  • 13
0 votes
0 answers
6 views

PGP disk passphrase not recognized [migrated]

I have an external drive fully encrypted with Symantec encryption desktop software using a pgp key. It has been done 15 years ago. Today I try to access the disk, but it's not working. It doesn't ...
1 vote
0 answers
14 views

MySQL encrypt fields and decrypt them with a password

I'm trying to figure out the best approach to store some information into a DB that will only be accessible by specific users through a password. So let's say I've got user X that stores something ...
  • 11
1 vote
1 answer
31 views

Changing openssl key/IV when encrypting diffrent rows of data in database?

I'm looking for a way to encrypt data in MySQL database securely. The data come from a web interface from a POST form and each POST request from the user insert a new line in the database. Right now, ...
0 votes
0 answers
16 views

When I encrypt a file with gpg, am I encrypting it with a key that lives on my local machine? [closed]

I can encrypt a file with gpg in the following manner: gpg --symmetric --cipher-algo AES256 ./test.txt This allows me to encrypt the file with a password. Does this also use a key I have locally, or ...
0 votes
1 answer
50 views

When to use application layer encryption

When to use application layer encryption? Is it important in backchannel communication (machine-to-machine) without users? And e.g. when we create state in OpenID Connect's client and redirect the ...
1 vote
0 answers
20 views

Presenting users their API Keys on frontend

I'm not talking about showing them a popup upon api key generation, where the user is specifically warned about the fact that This is the only time you will see it. Make sure to save this to a safe ...
  • 11
0 votes
0 answers
40 views

Which of these filesystem encryption philosophies and methodologies are better for which purpose?

Currently on the "FLOSS market" there are multiple options for encrypting remote cloud storage following different security models and different philosophies. To name a few: encfs (I guess ...
0 votes
0 answers
26 views

Is Google Cloud Database encryption with customer specified keys PCI and / or HIPAA compliant?

Amateur Question... We've written a SaaS application that runs in Google Cloud on a GCP-managed MySQL database. We now need to make our application PCI and / or HIPAA compliant. I know we need to ...
  • 101
0 votes
1 answer
53 views

Is there any encryption method that uses TRNGs?

Can we create a true random generator whose entropy source is the loss of electrical signals that a binary architecture cannot detect? If we have a system that let's say could do this, could we be ...
0 votes
1 answer
51 views

Password reset encryption mechanism based on username [duplicate]

Short I known 0x02135 gets encrypted to -> NzY4MzY5 0x02136 gets encrypted to -> NzcxMzc0 ...etc I want to know 0x02137 will get encrypted to -> ??? (in ...
0 votes
1 answer
38 views

Does Google share it's international database of search queries with LEA agencies for purposes of breaking encryption?

So, suppose a person accidentally typed their complex encryption password into Google search. They weren't logged in to any Google services so the search was anonymous, and they continued to use this ...
0 votes
1 answer
22 views

When using Bitlocker and I am logged into a PC is the data accessible for outside devices? (mounted)

I am wondering what happens when I log into an encrypted Windows PC - could an attacker steal data from the PC while logged in or is it encrypted and to access the drive he would need the Bitlocker ...
  • 31
0 votes
0 answers
4 views

ADFS and ColdFusion setup regarding certificate [migrated]

I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, ...
2 votes
2 answers
102 views

Data and Account security on Android phone in case of it being stolen

How secure are Android smartphones when someone gets physical access to the phone, in other words, someone stealing my phone and how to improve this security? I'm especially worried about all the ...
  • 21
1 vote
0 answers
23 views

Secure way to transfer all of my Dropbox files to my Koofr account

I want to securely Transfer my Dropbox files to Koofr. What's the best way to do this? Here some additional information: My Dropbox file are not encrypted. Koofr can connect directly to Dropbox. Do ...
0 votes
0 answers
30 views

EAP-TTLS and certificates

Wi-Fi user is getting autheticated via RADIUS server using EAP-TTLS by providing username and password. User needs to have X.509 CA certificate on their device. I am having problem understanding how ...
  • 129
0 votes
1 answer
34 views

Concatenating timestamp to data before encrypting it - is this a commonly used technique?

I have a web app that communicates with a backend server, and the users of the web app are organisations that each have a single login for the entire organisation. The app is meant to be used for ...
  • 213
0 votes
1 answer
70 views

How do you trust two different cloud provider servers?

I've found a question with an answer here on Security StackExchange or on Unix StackExchange, but I can't find it anymore apparently :( If you find this answer already, help would be appreciated, I ...
1 vote
3 answers
171 views

Can Windows invade my privacy by accessing files from my Linux OS?

I have a 500 GB SSD drive with Windows 10 installed, and a 250 GB SSD drive with Ubuntu 22.04 installed. I use the latter mainly to maintain my privacy; Ubuntu is like my personal computer, with ...
0 votes
1 answer
73 views

Is it sufficient to put /var, /tmp/, and /home on their own encrypted partitions?

I want to encrypt my system, but I don't want the hassle of having to put in two passwords on boot; I just want to put in one password on login that would decrypt the other partitions. I have heard ...
  • 123
2 votes
1 answer
161 views

Can data be be pulled from the RAM of a locked device?

Say, for example, you have a laptop with encrypted drives so data can't be pulled from those drives if they are physically removed from the device. If you close the lid of the laptop, thus locking it (...
  • 123
0 votes
2 answers
95 views

Can a one-time pad prevent a meet-in-the-middle attack?

I am confused regarding this: I am working on a project but I want to use a one-time pad and want to launch a meet-in-the-middle attack on my new scheme for data security. As block ciphers are ...
2 votes
2 answers
193 views

What is the name of the box that hackers connect to a router in order to spy on all your traffic?

I watched a documentary where hackers entered a victim's house by pretending to be from the ISP and then connected a box to a router in order to spy on all of the victim's traffic. Later, the hackers ...
  • 23
0 votes
0 answers
141 views

Suspicious SSD corruption exactly at LUKS encryption header

I am helping with an interesting data recovery issue. The laptop was running Debian 11 Linux with LUKS full disk encryption on a Samsung 970 Evo Plus 2TB SSD for quite many months. Suddenly the LUKS ...
0 votes
1 answer
70 views

Does signing make any sense when encrypting with secret key is used?

When I use secret key which only one server know for symmetric encryption done with XChaCha20-Poly1305, is any benefit to use signing aswell? As long as only one server knows the secret, doesn't it ...
0 votes
2 answers
71 views

How can an attacker cryptolock a database content after having compromised the application server, which protection to setup?

I have an application server accessible from the Web, behind a reverse proxy. Its database is secured on a separate VLAN and the database admin password is strong. Say the application or the operating ...
  • 587
0 votes
0 answers
27 views

Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]

If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters? HDD is APFS AES 256 ...
0 votes
1 answer
99 views

Is it safe to store data on APFS 256 AES encrypted external HDD disk?

I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk. How safe is setting up APFS AES 256 encryption with disk ...
0 votes
1 answer
98 views

Why is this simple encryption protocol not enough for messaging?

Signal Messenger is basically state of the art chat when it comes to security and privacy: It uses only phone numbers for user identification, doesn't store user chat and the encryption protocol is ...
1 vote
1 answer
147 views

Is the Web Crypto API secure when the server is trusted?

I've heard a lot of people say that the Web Crypto API is not very safe. For example: https://tonyarcieri.com/whats-wrong-with-webcrypto, Problems with in Browser Crypto. However, I'm looking to use ...
0 votes
3 answers
92 views

Encryption certs protected from decryption by thumbprint

Is it true that you can only decrypt data that was encrypted by a certificate using the same exact thumbprint? My thought was that you can decrypt the data using an updated version of the same ...
  • 1
1 vote
1 answer
98 views

ThinkShield secure wipe - SSD does it forbid data recovering?

I have to give my computer back to my boss. I want to delete all the data from my SSD. I found "ThinkShield secure wipe" which is implemented in the BIOS apparently. It gives me two options: ...
  • 13
-1 votes
1 answer
62 views

Where could I find a list of keys not to use for DES encrypting

We have a process that encrypts a URL, it uses DES encryption. I suspect someone may have figured out the key and is decrypting it to crawl information. This was set up many years ago, I just want to ...
  • 109
0 votes
0 answers
28 views

oauth2 with additional secret

I'm using Spring boot to create an application that stores user secrets in a database (I have to store the secrets); each secret is stored in the database after being encrypted with the user's ...
  • 1
0 votes
2 answers
125 views

Encryption method for file that can only be read by program

I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs. Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
0 votes
0 answers
50 views

Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?

I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "...
1 vote
1 answer
72 views

LibreOffice password vs cryptocontainer (LUKS, VeraCrypt etc.)

How much worse is encrypting a LibreOffice document with the built-in mechanism than using a cryptocontainer (LUKS, VeraCrypt, etc.) and storing the document in it? I am more comfortable using the ...
  • 11
0 votes
0 answers
36 views

Android FBE securely wipe all data

According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage. Does a factory reset of an FBE phone reset the keys of ...
  • 1
0 votes
1 answer
79 views

How to encrypt with a private RSA key in Openssl

The RSA_private_encrypt is deprecated in OpenSSL 3.x. It is not clear how to get the same functionality in 3.x without using the deprecated functions. And, before you ask, IEC_62351-9 Section 9.1.3....
  • 1
1 vote
4 answers
115 views

End-to-end encryption with multiple recipients?

As far as I understand, end-to-end encryption is used to encrypt the content on the client (sender), send it to the server and decrypt it on the client (recipient). The clients store their private ...
0 votes
0 answers
37 views

How to encrypt an e-mail to many recipients in an effective way? [duplicate]

Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it. What encryption method can I ...
0 votes
0 answers
51 views

In asymmetric encryption, is there a meaningful difference between the public and the private key? [duplicate]

Is it possible to swap them, so that the public key is kept secret while the private key is public? Or do they actually function differently? Thinking specifically about DSA though I'm interested if ...
2 votes
1 answer
108 views

How do I ship my SSL keys with my application?

I have an executable, and I have the SSL certificates and keys necessary to establish the secure connection. The application performs self-updating by downloading and replacing itself with an updated ...
  • 121
2 votes
0 answers
76 views

Cell tower to cell phone encrypted communication

I have done some search here but I can't understand how phones and antennas share the keys used for encryption and decryption. As far as I understand, mobile phones today use LTE i.e 4G (sometimes ...
  • 25
0 votes
1 answer
50 views

Does filesystem compression aid cryptanalysis?

I use LUKS to encrypt all sensitive data on my computer. If I switch to using a filesystem with on-the-fly data compression such as ZFS, should I use its compression feature together with LUKS? Does ...
  • 23
0 votes
2 answers
66 views

Using hash to search encrypted records

If I am using SHA-512 hash values merely as a means to search fields that have been encrypted elsewhere, is it cryptographically secure enough to hash without salt? For background, I have been given a ...
14 votes
4 answers
3k views

How can we determine if there is actual encryption and what type of encryption on messaging apps?

There are many new messaging apps that claim to be the most secure. How can we be certain if there is actual encryption and what type of encryption? Molly, signal, WhatsApp, briar, wire, telegram, ...
0 votes
0 answers
25 views

Securing many infrastructure servers sitting behind a centralised web server

Problem We have 100+ servers that we are looking to manage through a REST API. The REST API for each of these servers will only ever be consumed from our Centralised Management Server (CMS). Therefore,...

1
2 3 4 5
114