Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
1answer
231 views

SMIME email decryption using a private key - what am I doing wrong?

I have an encrypted .eml file and a private key. I've looked it up a lot on the internet but couldn't find a way to decrypt the email using OpenSSL. I've tried this command: smime -decrypt -in ...
0
votes
2answers
59 views

How easily can ISP/mobile network operator employees read or decode traffic data?

When I sign up for a mobile subscription or internet connection with my ISP (also a mobile network operator), the company's privacy policy says that certain information is processed such as personal ...
1
vote
2answers
98 views

VeraCrypt analogs that support unsafe shutdown?

I am completely satisfied with Veracrypt except for one thing. If you open a Veracrypt volume, write something there or deleting. And then you use unsafe shutdown (for example, using the RESET button ...
0
votes
1answer
94 views

How to encrypt data so only clients can read, but not the server

I am building a system where the clients should be able to communicate with each other. However I want all the data to be hidden from the server where the information is stored in a database. How can ...
4
votes
1answer
382 views

Why does GPG --recipient only pick one (arbitrary) key for identical names, instead of all of them?

I have a recipient with four hardware keys (HKs) that they use interchangeably. These HKs contain different GPG keys that have all been generated inside and have never left the HKs, thus resulting in ...
0
votes
0answers
57 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
0
votes
1answer
80 views

Combining confidentiality, authenticity and data integrity to form secure URL

There are clients (mobile application), they can share links to their profile info, which should be confidential. The link expires in 5 minutes (configured). They set Auth-Code so that the one who ...
1
vote
0answers
147 views

Proper Passing of Oauth2 Key to RobinHood API [closed]

Original question is here https://stackoverflow.com/questions/59256905/r-and-shiny-app-secure-connection-to-third-party-robinhood-api To summarise there is an R package that allows users to enter ...
0
votes
0answers
41 views

How does SSH protocol encrypt the data in transit when using user and password for credentials? [closed]

From my understanding, the SSH protocol encrypts everything that is sent over channel and this is why it is secure. My question is for setup when authentication is done using username and password. My ...
1
vote
1answer
63 views

How bad is it to store credentials in clear text on disk and in memory?

Yeah, it depends. A good answer would provide some reflections on this. I have two concrete scenarios in mind, in two concrete (and I believe common) contexts. Context 1. At home, you’re the only one ...
3
votes
1answer
338 views

Decrypting possibly compromised Veracrypt hard drive

I have a Veracrypt encrypted hard drive, a system drive encryption with the operating system. The laptop is possibly compromised, which is why I can't decrypt it directly on the laptop I don't know ...
1
vote
0answers
43 views

How to encrypt and hide a GNU/Linux operating system and create a decoy system?

My goal is to be protected against key disclosure laws and possible extortion. I know dm-crypt can be used to perform full disk encryption for GNU/Linux distros. However, it is not enough. I want to ...
0
votes
1answer
51 views

Bypass encryption by altering source code

In the Cryptsetup Frequently Asked Questions page it says: You are asked a passphrase of an existing key-slot first, before you can enter the passphrase for the new key-slot. Otherwise you could ...
23
votes
3answers
10k views

Why does an encrypted message sometimes end in “==”

As a programming exercise I need to decrypt a message. The only clues that I have is that it seems are: The encoded message contains only Base64 Characters a n letter sequence (n in 1,4,7,10) times ...
35
votes
4answers
20k views

What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?

I would like to ask what happens when an email is sent from Gmail, Yahoo or Hotmail public web email services? I don't understand email protocols in details, but as far as I know email traffic is ...
0
votes
1answer
186 views

How to get a Windows 10 complete memory dump on demand?

I was wondering what to do if by any chance I got infected with a Ransomware that could trick my AV suite, and my conclusion is that a complete memory dump would be the best option, as probably the ...
1
vote
4answers
142 views

Encryption and guest users

I have a website where a registered user can exchange any number of offline messages with a guest. The guest only has to enter his e-mail address and should not have to create an account. The messages ...
3
votes
2answers
225 views

Encrypt User specific Information without a password

Given scenario: I have an application (NodeJS) running on Heroku, the database is RDS on Amazon and I use Auth0 for authentication. I don't have access to passwords of the users, some users use social ...
5
votes
2answers
1k views

Is it cryptographically safe to use veracrypt in a virtualbox virtual machine?

Does virtualbox provide enough entropy (random numbers) for the veracrypt program on the virtual machine? Is it cryptographically safe to use veracrypt inside a virtualbox in a windows 10 guest?
-1
votes
1answer
62 views

How exactly is RSA used in SSH [duplicate]

I can find oodles of websites that tell me the server retains the public key and the client retains the private key. But nothing on how the client authenticates to the server and - perhaps - how the ...
51
votes
3answers
29k views

Is Signal still more secure than WhatsApp?

WhatsApp has "recently" deployed end-to-end encryption using the Signal protocol, which is of course also being used by Signal itself. The related white paper (PDF). Now this raises the question: Is ...
0
votes
1answer
48 views

Decrypt Soap xml encryptedKey session key using AES-128/PKCS-1#rsaes-kem-kdf2-kw-aes128

I'm familiar with cryptography and I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA. I tried using OpenSSL ...
15
votes
1answer
22k views

What are the differences between the RSA, DSA, and ECDSA keys that SSH uses?

In my /etc/ssh/ directory, I can see three keys which contains three different types of ssh keys: -rw------- 1 root root 607 Oct 4 22:43 ssh_host_dsa_key -rw-r--r-- 1 root root 623 Oct 4 22:43 ...
2
votes
2answers
315 views

How secure is this communication chat?

I have created a chat between two parties (using c#), and I am wondering what kind of weaknesses have I overlooked. Description of its functionality: There are two individual applications: Client (2 ...
1
vote
1answer
330 views

How to securely store decryptable passwords

I'll quickly outline the purpose of our application: The user logs in using his username and password. He will receive a list of servers he can connect to. After choosing a server the connection to ...
2
votes
1answer
3k views

Could other people steal my Internet connection if they had my PPPoE data?

Would it be possible for other people to use my PPPoE data to get Internet access or is it somehow restricted to my house? Then what about my neighbors downstairs, could they do it? And what about ...
1
vote
1answer
99 views

How dangerous is Code With Me, a remote pair programming tool from Jetbrains?

I've been looking into this very useful remote pair programming plugin from JetBrains called Code With Me, but want to understand all the security implications. From their FAQ page: How is data ...
0
votes
1answer
39 views

When changing a PGP passphrase, does it only affect the same key on the other machine?

If I change the password of my PGP key (I use it to sign Git commit) on Computer A, does it affect the same PGP key that I have on the Computer B? Will I still be able to use the PGP key on Computer B ...
30
votes
7answers
20k views

Why encrypt data in memory?

I saw that KeePass not only encrypts its password-database-file, it also can encrypt the passwords it holds in memory. This is just an example. I thinking of a new project dealing with sensitve / ...
135
votes
9answers
88k views

How secure is Chrome storing a password?

Whenever I enter a login into a new site, Chrome asks me if it should store the login details. I used to believe this was fairly secure. If someone found my computer unlocked, they could get past the ...
0
votes
0answers
29 views

What method does Chrome use to encrypt cookies? How can they be decrypted? [closed]

I need to read cookies from Google Chrome in a C++ application that I'm writing, but I've found that Chrome encrypts all of its cookies. I spent some time searching for solutions, but all of the ...
-1
votes
5answers
455 views

Secure way to encrypt (not hash) passwords?

I'm building a system that for reasons I'll outline below, can't used hashed passwords, but I'd still like to encrypt them so that it's as hard as possible to crack them, in the (unlikely) event the ...
12
votes
4answers
2k views

Do honeywords add any real security?

This paper proposes the concept of honeywords for detecting if a password database has been compromised. As far as I understand it works like this: You save n password hashes for each user, one that ...
0
votes
0answers
46 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
0
votes
1answer
55 views

How to securely encrypt shared data for a dynamic amount of users?

Example: Bob uploads a file to my custom file server locked with a password, which then the file server generates a link for him to share Bob wants to be able to share this data to anyone that has ...
4
votes
2answers
1k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
3
votes
2answers
253 views

Does HTTPS leak password length?

On a website with user accounts, all HTTP requests coming from the submission of a login form kind of contain the same info, there are only a few things that are different in the HTTP requests, such ...
1
vote
1answer
99 views

Public Digital Signature Validation with JWE

After reading JSON Web Encryption (JWE) and making a Node JS JWE POC demonstrating key mode using Key Encryption. I'm a bit confused as to how to validate that the sender of the message was in fact, ...
0
votes
0answers
36 views

OpenPGP: What happens if I have two keys on the same email and try to encrypt a message with that recipient? [duplicate]

Let's assume that I saved two OpenPGP keys(key1 and key2) on the email mail@mail.com. What would happen if I try to encrypt a message with the following command: gpg --encrypt --recipient mail@mail....
1
vote
0answers
40 views

Is it possible to encrypt data with a GPG public key that doesn't have the encryption usage flag set?

I have received a public key that does not appear to have the encryption capability enabled: > gpg --list-keys ...
34
votes
2answers
18k views

Which protocols exist for end-to-end encrypted group chat?

I am looking for existing protocols for a group chat with two things: End to end encrypted. Just what you would expect: messages are only decipherable by the chat members and message tampering is ...
0
votes
1answer
91 views

Store provided external user data encrypted in the database

I hope this is the Right Place I have implemented a full user encrypted data storage solution. This works well and I can sleep well in the knowledge that neither I nor anyone else except the user can ...
0
votes
1answer
386 views

Directly signing a file with gpg or instead its checksum file?

It is my understanding that when file is signed with gpg the signature will provide 2 guarantees, a proof of ownership of the signature and the integrity of the signed data. lets say I have a doc.txt ...
0
votes
1answer
51 views

what makes xmpp a trustworthy way to communicate with others?

[An Overview of XMPP][1]: https://xmpp.org/about/technology-overview.html [Luke Smith recommends XMPP][2]: https://www.youtube.com/watch?v=qBTsUVrCDAQ As Luke Smith said in his video, XMPP has been ...
17
votes
3answers
4k views

Is there a cipher suite “translator”

I have a list of cipher suites in this format: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384 Is there a fast, easy way of translating it to more human readable/management readable format? :)
0
votes
1answer
61 views

Does Wire use encryption-at-rest?

Does Wire employ encryption of data at rest? I generally consider Signal and Wire to be the best tools today for sending information privately between two parities. Both meet the marks on crypto, open-...
3
votes
3answers
116 views

Does EFS protect against data theft by ransomware?

Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key ...
0
votes
1answer
94 views

Is it possible to extract encryption keys from software executing on your own system?

I'm a newbie in this field so forgive me in advance if this question is stupid in anyway. Say we have a software that is executing on our system and encrypting files using a secret key that is not ...
0
votes
1answer
80 views

Is Array.Clear() in C# suitable for zeroing sensitive byte arrays?

Is it worth calling Array.Clear() to clear sensitive byte arrays such as those containing encryption keys? It's not clear whether this is worth doing since the language has a garbage collector.
14
votes
7answers
7k views

Truly deniable encryption [closed]

What tools can be used to make truly deniable encryption? Suppose, authorities can use any force to make you open your passwords. Truecrypt can have only one hidden container, which means that ...

1
2 3 4 5
109