Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
1answer
25 views

How to send a fixed size encrypted message to be broadcast to multiple (known) recipients without letting the broadcaster decrypt the message

I am creating a network with three layers. A sender layer, A gateway layer, and a Receiver layer; each having different platforms. See diagram below All platforms have published their public keys on ...
-4
votes
0answers
63 views

Encrypted communication system without CPU backdoor that is able to resist quantum computers [closed]

This is a process I invented for secure communications to be resistant against CPU backdoors and quantum computers: Personal public keys are transferred in person to each person's offline device. ...
0
votes
1answer
36 views

How is this Identity aware encryption description different from simple authorized access?

I was reading this article by Credit Karma (An American fintech). They mention that this system of "identity-aware encryption" helps them better protect the data of their users and to keep ...
0
votes
0answers
37 views

Multi-party computation: how to avoid a single point of weakness?

I'm trying to understand how to eliminate a single point of weakness given the problems MPC claims to solve. Take a simple example where some secret is split between servers B and C. If either B or C ...
3
votes
1answer
49 views

GoCryptfs on cloud

I read the audit docs on GoCryptFS website (https://nuetzlich.net/gocryptfs/threat_model/). There dragon has full information about the read write done in the gcfs partition, what does this mean and ...
0
votes
2answers
188 views

Staying anonymous vs a Five Eyes adversary?

If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it? The person ...
1
vote
1answer
72 views

How to prevent mobile data from being viewed when leaving VPN server?

Please correct me if i'm wrong. As far as i know, when we use vpn service, our datas are only encrypted from us to vpn server. After leaving the server to intended recipient, our data is decrypted and ...
14
votes
4answers
604 views

Solution to the ‘Browser Crypto Chicken-and-Egg Problem’?

Edit 2/27/2021 I've developed a small browser extension for Firefox, incorporating many of the ideas in this question and the following answers and responses, aimed at solving this problem. See my ...
1
vote
1answer
124 views

What is the correct way to create a backup copy of a PGP key pair?

I am using GnuPG 2.2.20 to create my key pair. I have successfully created a key pair, now I want to create a backup copy in case of HDD failure. Following the instruction here, I have tried gpg --...
0
votes
0answers
31 views

Open source alterntives to gallery vault [closed]

Are there any open-source alternatives to gallery vault? Please suggest references.
0
votes
0answers
29 views

JS client side encryption & Oauth [migrated]

We are building a open source SaaS app and there is some information that the server doesn't need to know, and that the user would prefer to keep private. This is not super confidential/life ...
0
votes
1answer
45 views

Is rsyncd secure? (except for the lack of transport encryption)

I have been using an rsyncd server for backups for what feels like a decade. I saw that rsyncd has no transport encryption (not even for username and password). I wonder what other security issues ...
0
votes
0answers
14 views

How to determine what type of encoding/encryption has been used in this file? [duplicate]

I take this file from resource of game and I Want to know how to decrypt this , this is small line from the code : §ö ¨ö È)4Ì~u”]Èr L;Ùúe£¼’Q7ŠzY½¹Í„¶Qö¨¤s„³JØW rest of the file here : The Code
1
vote
1answer
69 views

Use the public key of a certificate as the key for HMAC SHA

Consider the following scenario. A company has several computers for each users on the same domain. They purchase an RSA certificate from a recognized authority which will be deployed with private / ...
5
votes
2answers
9k views

HSM Software Vs HSM Hardware

Can I have a software version of an HSM? I have a client that requires me to connect to its HSM, but I don't have any. Can I get software to do this job? The spec document speaks of MAC key & PIN ...
12
votes
4answers
7k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...
0
votes
1answer
171 views

SMIME email decryption using a private key - what am I doing wrong?

I have an encrypted .eml file and a private key. I've looked it up a lot on the internet but couldn't find a way to decrypt the email using OpenSSL. I've tried this command: smime -decrypt -in ...
0
votes
1answer
43 views

Is IPsec VPN still necessary when already using HTTPS protocol? [duplicate]

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
2
votes
0answers
97 views

Long-term symmetric key storage

I have some sensitive data that I need to encrypt and retain long-term (i.e., 5+ years at least). I'd ideally like to secure it using multiple hardware devices via a Shamir share. Something like: ...
1
vote
0answers
31 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
1
vote
2answers
86 views

How are passwords stored in the database of a decentralized peer to peer system?

I want to use username and password instead of public key cryptography for a decentralized peer-to-peer application, but since the passwords are stored on users' computers, there is a possibility of ...
1
vote
1answer
42 views

Hybrid Encryption: What is the format for storing the encrypted key and the cipher text together?

In the scenario of a hybrid encryption for which I use RSA (asymmetric) to encrypt the encryption key used with AES (symmetric) to encrypt my message, I need to store the encrypted key with (together) ...
2
votes
0answers
34 views

Is the RSA Private Key non-exportable option protected from key extraction?

I would like to know if the non-exportable private key option, virtualized based security, selected when importing an RSA certificate guaranteed although the user will never be able to see the RSA ...
0
votes
1answer
64 views

How to encrypt data so only clients can read, but not the server

I am building a system where the clients should be able to communicate with each other. However I want all the data to be hidden from the server where the information is stored in a database. How can ...
0
votes
2answers
116 views

how do i find the number of possible keys / password to decrypt a plain text

i like to know if there is any way to decrypt a plain-text that is encrypted 55 rounds using Caesar ciphers with different key for each round. and using brute force attack without knowing the length ...
0
votes
0answers
21 views

Public key RSA vs SHA [duplicate]

If a person had four choices : store unencrypted passwords . Use SHA-1 on the password and store . Use SHA and salt then store that . Use public key encryption and throw away private key . Which is ...
1
vote
0answers
52 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
0
votes
1answer
70 views

What's the best encryption strategy to go with when everybody needs to be able to write data but only a select people can view it?

I really just need an encrypted support ticket system essentially. The user who writes the ticket doesn't need to be able to view it afterward but a handful of staff need to be able to decrypt the ...
0
votes
1answer
319 views

Still able to recover files after running cipher.exe on windows 7

After running cipher.exe on my entire C: drive, I'm still able to recover deleted files using recuva. In fact, doing a before and after, I see no discernible difference in the files that are able to ...
1
vote
1answer
122 views

Proper Passing of Oauth2 Key to RobinHood API

Original question is here https://stackoverflow.com/questions/59256905/r-and-shiny-app-secure-connection-to-third-party-robinhood-api To summarise there is an R package that allows users to enter ...
4
votes
2answers
786 views

Encrypt DB Fields preserving search functionality

I would like to protect sensitive information stored on a Postgresql database, but I would not like to encrypt it all. The idea is to encrypt only those fields which hold sensitive information. I was ...
0
votes
1answer
146 views

Encryption/decryption at client or server side with hybrid cryptosystem?

I've read a lot of documentations about encryption in the last weeks and I think I now have a good idea of what system I will use for my project (standard hybrid cryptosystem using RSA/AES). However, ...
1
vote
1answer
53 views

Does knowing part of a passphrase for sure really mean that you can “disregard” that entire part when trying to crack it?

Alice bought 1 Bitcoin and encrypted her wallet.dat in Bitcoin Core. Samantha, Alice's friend, notices the Bitcoin price skyrocketing and, while Alice is in the bathroom, steals Alice's wallet.dat as ...
10
votes
1answer
1k views

Permanently delete a record

Say there is a SQL database that stores certain records in encrypted. A person wants deletion of a record in a way that even hard drive recovery services cannot recover it without breaking the hard ...
0
votes
1answer
87 views

The risk of RSA encryption. Would individually encrypted characters be risky?

Is it possible to decrypt a RSA message if the characters of the message are individually encrypted? The info you have is the message, the public key and the n which is too big to be factorizable.
3
votes
1answer
324 views

Decrypting possibly compromised Veracrypt hard drive

I have a Veracrypt encrypted hard drive, a system drive encryption with the operating system. The laptop is possibly compromised, which is why I can't decrypt it directly on the laptop I don't know ...
7
votes
4answers
826 views

Asymmetric encryption and signature performed by hand

There are some methods of encryption so easy that you can do them be hand, but is there an easy(ish) method of private & public cryptography and signing that a human can perform it by hand? The ...
2
votes
3answers
6k views

Is it possible to combine RSA and AES? [closed]

I'm working on a new project that encrypts folders on my personal computer.No sending of files are involved(networking). It is only for protection and security. Is it possible to combine RSA and AES ...
2
votes
2answers
219 views

Attacks against unencrypted android phones?

So, I keep reading again and again that one should encrypt his android device. But from an attacker's perspective, what can be done with an unencrypted phone? Can I extract all the files or possibly ...
110
votes
9answers
78k views

Why can we still crack snapchat photos in 12 lines of Ruby?

Just came across this bit of ruby that can be used to decrypt Snapchat photos taken out of the cache on a phone, apparently adapted from here. To my surprise, it worked without a problem, considering ...
29
votes
3answers
9k views

Can I use WhatsApp to securely send public key, symmetric key and private key?

I am asking this because WhatsApp says it is end-to-end encrypted. Are there any problems with sending a public key through WhatsApp? There might be some objections to sending symmetric and private ...
23
votes
2answers
6k views

Homomorphic encryption used for e-voting?

I was reading wikipedia about homomorphic encryptions, and one part got me a bit confused: "The homomorphic property of various cryptosystems can be used to create secure voting systems, ..." ...
1
vote
0answers
47 views

Temporary storage of sensitive information in Javascript

I am working at a university where we are creating a Website that allows students to apply for scholarships. Rather than print the application form, sign it then scan it then return it back, the ...
1
vote
0answers
52 views

E2E media data encryption methods [closed]

To me, security is most important topic for messaging or video conference applications. I am searching if end to end encryption is possible for group chat or group video conference. There so some ...
0
votes
1answer
138 views

How to get a Windows 10 complete memory dump on demand?

I was wondering what to do if by any chance I got infected with a Ransomware that could trick my AV suite, and my conclusion is that a complete memory dump would be the best option, as probably the ...
0
votes
2answers
54 views

Key derived from source files; deduplicated file storage

I'm wondering if the following system would be a secure way to store frequently duplicated files. Hash the source file, deterministically derive a key from it. The source file(s) are likely to be ...
1
vote
4answers
118 views

Encryption and guest users

I have a website where a registered user can exchange any number of offline messages with a guest. The guest only has to enter his e-mail address and should not have to create an account. The messages ...
2
votes
2answers
127 views

How to secure a web-only end to end encrypted chat with message persistence?

Currently, I'm trying to create a web-only end to end encrypted chat, with message persistency. I did some readup on how to create an end to end encrypted chat in JS, I found out there are quite some ...
0
votes
0answers
39 views

Would confidential computing/hardware-based TEE be the missing security jigsaw puzzle to counter data exfiltration?

Is confidential computing/hardware-based trusted execution environment (TEE) the missing security jigsaw puzzle to counter data exfiltration? Today, we already have data encrypted at rest and data ...
0
votes
0answers
30 views

How does collecting mouse movements increase cryptographic strength? [duplicate]

Excuse me if this is obvious, but while encrypting one of my disks, I got bored and read the text on the window. And the question came to me, how the heck can I move a mouse in a way that a computer ...

1
2 3 4 5
108