Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

1
vote
0answers
25 views

Lost password for Encrypted External HD

Have an old filevault encrypted external hard drive. Would like to access but have forgotten the password. However I do remember the style of password (XKCD four word style) and remember two of the ...
0
votes
1answer
19 views

Is there any defense against this kind of attacks? (key comparison attack, or something)

is there any defense against this kind of attack? https://youtu.be/7U-RbOKanYs?t=974 I know someone who uses a password encryption hashing that generates the same length of keys as in this video and ...
1
vote
2answers
66 views

How to handle end to end encryption [on hold]

I am working on an app where the goal is to upload user data, store it, do some processing on that data and present it to user when asked. We want to follow end to end encryption model where the ...
0
votes
1answer
56 views

What exactly is unsafe in using openssl AES with a password?

An answer about AES encryption starts with a disclaimer: Please note: You can use this to hide birthday-gift-ideas.txt from your roommate, but don't expect it to be secure against a determined ...
2
votes
3answers
144 views

Should I encrypt sensitive form data with JavaScript on the client?

This is by no means a replacement for HTTPS, so please do not assume that is why I am asking this question. I am exploring, and I am curious. I am looking for some expert input on this, and I am not ...
0
votes
1answer
68 views

What encryption algorithm outputs 22 characters string?

I have a bunch of encoded strings and I am trying to figure the encryption algorithm behind it. I would appreciate if you could help me find which encryption algorithm it is, or if you could point me ...
1
vote
1answer
54 views

Does it make sense to keep encrypted versions of emails addresses?

My boss came up with a strange idea in my opinion. He doesn't want to keep email addresses in the database. However, we use them to log people in, and we keep newsletters to those who actively gave ...
1
vote
1answer
47 views

Why would TLSv1.0 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA still be used?

First, I may be asking a dumb question. I am trying to learn, so please, take it easy on me. Second, if this is not the right place for this question, or you can link me elsewhere, please tell me/ ...
0
votes
1answer
84 views

Mobile call encryption

Is the signals of a mobile phone-call encrypted between the phone and the mobile-tower or only between the towers? And is it possible for a non-authority individual to eavesdrop on your conversation ...
0
votes
1answer
39 views

Using AES encryption to generate MAC (and provide authentication/integrity)

Ignoring that there are far better and more standard approaches to providing authentication and integrity guarantees, what (if any) weaknesses would a system as outlined below that relies on AES (AES/...
2
votes
2answers
64 views

Is it safe to store GPG encrypted data publicly eg on GitHub?

I've been learning some basics of information security and GPG encryption and it's super intriguing. I wanted to understand vulnerabilities behind an idea that I had. After we create our public and ...
1
vote
2answers
61 views

public WiFi hotspot-What is leaking at that tiny moment before connecting to a VPN?

When you sign up for a VPN account you also download the service's client,be it for Android, Windows etc but this question is specifically for Android or portable devices connecting through public ...
0
votes
0answers
14 views

How can I find the publick key length of a dnssec public key

I have generated a DNS public-key (as far as I recall it is an rSA key). Given the key (ZSK and KSK), how can I figure our its length? how can I make sure it is RSA or another type? For example, this ...
4
votes
1answer
66 views

Is communication with printers protected?

If someone can break into my home network then they can record anything going over my WiFi network, which is why https is essential and VPN is useful. Now my printer is connected through WiFi, and ...
2
votes
1answer
31 views

Can I use Truecrypt/Veracrypt to “Wipe” a partition?

I am using a non-SSD drive: Western Digital Black 1TB. Windows XP (please don't judge why I'm still using XP. I've actually recentlly started to use Win 7). For ex: if I have 2 partitions. 500GB ...
2
votes
0answers
53 views

What security precautions should we take when letting a C# application send/receive emails?

I'm writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve S/MIME encrypted (and maybe also signed) emails ...
2
votes
0answers
14 views

Why is MySQL 8.0 AES_ENCODE unsafe for statement-based replication?

I read this interesting note in the MySQL 8.0 documentation that seemed a bit confusing to me: Statements that use AES_ENCRYPT() or AES_DECRYPT() are unsafe for statement-based replication. As I ...
2
votes
1answer
27 views

Is the range of the s2k-count parameter in GPG still adequate?

From the manual: the s2k-count parameter specifies how many times the passphrase mangling for symmetric encryption is repeated. This value may range between 1024 and 65011712 inclusive. Apparently in ...
0
votes
4answers
63 views

Should I change to VeraCrypt on win7 SSD from TrueCrypt 7.1a?

Is still safe for me to use TrueCrypt or should I change to VeraCrypt as the last update boot won`t take long anymore. Any backdoors to decrypt TrueCrypt?
2
votes
1answer
58 views

Why dont anti-viruses detect encrypted viruses in decryption?

Some viruses are encrypted so that the anti-virus cant identify them, but what i dont understand is, why wouldnt the anti-virus doesnt detect them, considering they have to decrypt themselves before ...
0
votes
0answers
18 views

Creating a JAVA Keystore (.jck) with a Symmetric Key [migrated]

I have a need to use a common key on 2 platforms. The key was created on Linux. It was wrapped and sent to platform 1, where it was added to the local keystore. I need to create the .jck there on ...
2
votes
1answer
66 views

After performing a SSL strip, can you upgrade back to HTTPS with your own encryption from the proxy?

Let's say you are performing a SSL strip. From what I can understand, it modifies either the client or server packets (in the http/https protocol), which indicate that it supports encryption to not ...
1
vote
1answer
57 views

Best practices to protect public/private SSH key pair in web interface?

I've got a dilemma here: I'm working on a system that will connect to remote linux servers for monitoring and automating some processes. Since user+pass is insecure for obvious reasons and public/...
3
votes
2answers
157 views

Is AES easier to crack when the input is small? [closed]

Say you just want to encrypt a number. For example, say the number could be any double. A double in C# and Java is 8 bytes. If you were to encrypt a double using AES: var cypherText = AES.Encrypt(...
0
votes
0answers
15 views

Encryption interop between Java (Cipher) & JavaScript (crypto-js) [migrated]

I've been tasked to fix an interoping encryption algorithm that was working perfectly fine from before but suddenly went haywire for reasons unknown, no one has touched any of the code for both of the ...
2
votes
0answers
43 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
2
votes
1answer
64 views

Can an old SSH session be reconstructed given root access to the server?

Say that A is behind a firewall that logs all packets, communicating with B over a publickey-authenticated SSH connection: A <-------- {ssh} --------> B v v [...
0
votes
0answers
54 views

“Malware” has been posting this to another server. Any idea what encoding this is? [duplicate]

I came across a site that is sending data like these to a remote server via javascript: ...
0
votes
1answer
22 views

Can I have a certificate on one server and the key on another?

Let's say I have a Server A with a valid certificate and a Server B with the key for the certificate. Client === Nginx Proxy with valid cert === Apache with key I don't want Ngnix to decrypt all ...
2
votes
2answers
90 views

is there a term for encryption where decrypting with the wrong key will still result in an intelligible message?

Suppose you encrypt a list of names of Americans with a 512-bit secret-key algorithm. Currently no supercomputer can break it, but someday a supercomputer might exist that could iterate through all ...
8
votes
3answers
2k views

Plausibility of DNA sequence for encryption

To start with: This is in consideration of in-body implants. The answer should (initially) assume there is no record of your DNA sequence mapped by a third party yet. The question boils down to ...
0
votes
1answer
50 views

Is a 14 character password safe enough for regular purposes? (Using A,a,1,!- Caps/Lowercaswe/Numbers/Special#'s etc etc) ex: 9(ax4$3#AZz22Z

I remember Truecrypt putting pressure on you to have at least 20 characters, but doing some research..... it seems even 14 characters is good enough (using Caps, Non caps, numbers, special #'s, etc) ...
0
votes
0answers
24 views

Can I use a docking station and turn my internal HD into an external HD and create and mount encrypted partitions safely?

If I use a docking station like this one: (Where I connect an Internal HD to it and turn it into an external HD and connect it to my computer with a USB cable). https://flash.newegg.com/product/...
2
votes
3answers
104 views

PHP - Needing help to encrypt/hash a password for small application

I have created a small script for work. It's an internal web script but has to be hosted on our public domain so I have created a very small PHP based login system using a login form and a session ...
1
vote
1answer
61 views

Encryption for multiple recipients without private key?

I have been looking into PGP, but do not want my users to have to worry about securely storing their own private keys. Therefore, I feel like maybe just symmetric encryption without private key would ...
-4
votes
1answer
44 views

How to figure out the four digit for American express having all the numbers besides the card or the 4 digit [closed]

How to figure out the 4 digit code for expiration without having the physical card in hand
3
votes
4answers
124 views

Asymmetric Encryption

I understand Asymmetric Encryption works by having the private key known only to your computer, while the public key is given by your computer to any computer that wants to communicate securely with ...
4
votes
1answer
75 views

Where does the encryption happen with an encrypted VPN?

I have been trying out ExpressVPN to connect to the internet. I have mostly used this at a coffee shop that I use regularly. I see this question with answers: Differences between using Tor browser ...
0
votes
0answers
43 views

Microsoft Cryptographic Service Providers

I have a few questions about Microsoft's Cryptographic Service Providers. I am creating an AES encryption method whose key is encrypted using the RSA. I am trying to figure out a way to store the RSA ...
1
vote
1answer
36 views

Is it reasonable to store encrypted TOTP keys + authentication credentials on a single device (for end-user)?

My current security model (at least for passwords) is to store them encrypted at rest and use GPG (in combination with an Yubikey) to perform encryption / decryption. I'm using pass (https://www....
1
vote
0answers
32 views

What is this key management scheme called

We are building a system, where the messages between services is encrypted with Data Encryption Key (DEK). The DEK is attached to the message, but encrypted with another key, Key Encryption Key (KEK)....
2
votes
0answers
32 views

GPG - Use case for embedded system

I'm looking to add encryption to an embedded data logger and I'd really appreciate some advice to make sure that my approach is reasonable/secure. The user will load a GPG public key onto the device. ...
1
vote
3answers
47 views

How to enforce confidentiality while keeping the authenticity?

Below is an illustration of the digital signing process. According to Wikipedia: A digital signature is an authentication mechanism that enables the creator of the message to attach a code that ...
1
vote
4answers
124 views

Methods for storing plaintext passwords on a client

I have been tasked with some backend automation that needs to scrape data off an internal website using an employee's username/password to log in to the site. There is a backend database server, but ...
-1
votes
1answer
82 views

Full disk encryption vs file based encryption

I need to protect a few hundred thousand files stored on a drive on a Linux server. I am thinking full disk encryption with file encryption on top would be the best option. Failing that, file based ...
2
votes
1answer
42 views

Can government authorities retrieve data from LUKS volume when it's accessed while turned on?

I've heard that there are attacks that can get passwords out of RAM while turned on. If a server, CentOS 7.5 and LUKS enabled, it's tty1 locked, which is on a VMWare hypervisor that is locked with a ...
0
votes
0answers
45 views

Can BitLocker simply be bypassed by just “waiting long enough” till it auto suspends due an update?

When you get an automatic feature or even only cumulative Windows 10 update with an activated BitLocker (password protected) system partition BitLocker will prompt you afterwards from the system tray ...
0
votes
0answers
16 views

Is there any open source SDK for implementing a KMIP server?

Is there any reputable open source SDK for implementing an OASIS Key Management Interoperability Protocol (KMIP) server?
3
votes
1answer
48 views

Symmetric Encryption Algorithm

I'm trying to learn more about cryptography and have devised an algorithm below for symmetric encryption. I know that we shouldn't use self devised algorithms but this one seems incredibly simple and ...
2
votes
1answer
62 views

Why doesn't public or open WiFi use unique encryption for each client (like GSM)?

I wanted to ask a networking security question about open or public WiFi. This question is not a duplicate of Why isn't open WiFi encrypted? Reading about cellular networks I found out that cellular ...