Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
30 views

Shor's algorithm and encryption [closed]

Could Shor's algorithm crack an AES-256 bit encrypted text with a 384 bit key with ECC?
1 vote
0 answers
37 views

LUKS: How many iterations are enough?

The luksFormat command accepts iteration time as a parameter, not iterations. That obviously leads to quite different number of iterations depending on the hardware doing the encryption. However if ...
0 votes
0 answers
48 views

Sophos home blocks explorer.exe from encrypting several files (ransomware?)

Here's what happened: I was transferring a quite large number of small files (.CSV, .PNG above all) from an old USB stick that never gave me any problem from one (allegedly safe) laptop (win10, win ...
0 votes
1 answer
34 views

Discovering already encrypted REQUEST key AES128 and sending already encrypted REQUEST with other data

I'm working on a college project to understand how the IOS application sends the password in the REQUEST already encrypted in AES128, what is its key, and send a REQUEST with our string transformed ...
0 votes
1 answer
15 views

How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?

When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
5 votes
2 answers
18k views

How to store banking information,collected on website, securely and implement encryption?

So I have this website in which I will ask users to input the following banking information. Bank account holder name: Bank account number: 9 digit routing number: I need these information from ...
5 votes
2 answers
2k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
-4 votes
0 answers
30 views

Need help to decrypt a text file & want to know the type used to encrypt [closed]

Please help to decrypt the below message: þ =R „ù °@ |£zaBéÒpØP ø+äD˜Å¨ssgSP×”•ÉÚ†¢*ê>k?LŽÁð°§-®æ0øΦ à wîÀ­l±ÀûÒuÔŸFù¨z=<'nA "¤¯–‰xÊÍ 7¾Ñ`r•t¿æH#]ÜGa0+Â%DÏ6©3jí¬W^ñ ö :Ëi?vö²¨‘Ù¸³@...
0 votes
1 answer
54 views

e-signature + digital signature aws md5

I am trying to implement e-signature + digital signature to secure the e-signed document from altered, something like Docusign. I am using AWS s3 to store the documents. My question are: Is MD5 (...
0 votes
0 answers
42 views

Tool to encrypt folder and add password [closed]

Is there any tool for example that can add a password on a folder, and every time the folder is closed, the folder locks again? Is there anything like this like Veracrypt?
2 votes
0 answers
44 views

Is MacOS encryption as secure if FileVault is switched on after installation?

Regarding turning on MacOS' FileVault after it was not turned on for installation, it says here... If FileVault is turned on later — a process that is immediate since the data was already encrypted — ...
36 votes
2 answers
8k views

When could 256 bit encryption be brute forced?

Assuming quantum computing continues to improve and continues to perform like this: ... quantum computer completes 2.5-billion-year task in minutes is it reasonable to expect that 256 bit encryption ...
0 votes
0 answers
46 views

Choosing Encryption Strategies for Secure Long-Term Storage of Sensitive Data

When considering external drives for secure long-term storage of sensitive data, what are the pros and cons of using the same password for encrypting all files versus using random passwords for each ...
0 votes
0 answers
35 views

What are common methods that can be used in ciphertext-only attack? [closed]

I have homework in my Information Security class which is to list some of the methods used in ciphertext-only attacks. I know two of them are: Frequency Analysis Attack on Two-Time Pad But they are ...
40 votes
6 answers
11k views

How secure are my passwords in the hands of Firefox using a Master Password?

I'm relying on Firefox to remember my passwords, using a Master Password of more than 25 characters. How secure is this set-up?
0 votes
1 answer
38 views

Is deploying a web application to a customer's encrypted drive a secure solution against code theft?

I have developed a web service for customer. The web service is written in Python and running in Docker containers. It is managed by docker compose. The customer wants my web service to run on their ...
0 votes
0 answers
20 views

Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?

Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
2 votes
1 answer
1k views

PGP encryption for the server based app

Here is context: I am using PGP to encrypt messages in a chat web app. After going through some articles, I get brief idea how PGP works and here is how I am doing it with openPGPJs : Client(web ...
1 vote
3 answers
2k views

Risks of encryption keys contained in a memory dump after a crash?

Assuming a full disk encrypted system where non-volatile storage is encrypted. While the system is running, in case of a crash and memory dump, e.g. plugging a USB drive causing an ...
0 votes
1 answer
44 views

Using a second device as a decryption source. Like 2FA but not for authentication

I don't have a completely clear idea about this so apologies if the question is a bit unclear. 2 factor authentication is well known. We see it as involving a second device in order to answer a yes/no ...
0 votes
0 answers
23 views

How do I make sure my PC program is receiving socketio events from my phone? [migrated]

I have a C# program, and a flutter application that runs on mobiles. They communicate through a python socketio server. The C# program and flutter app exchange data first by entering a room inside the ...
0 votes
0 answers
4 views

How to encrypt a disk with 2 Windows OSes and 3 partitions with Vera Crypt? [migrated]

I have a disk with an MBR partition scheme and 3 partitions. On the first partition, there's a Windows 7 C: drive which I keep to play some retro games that won't run on newer Windows. The second ...
0 votes
1 answer
52 views

How to avoid performance issues with envelope encryption when using separate DEK's for each piece of data?

Posted this first on stackoverflow but was suggested to repost it here. I am planning on using envelope encryption for data stored in a database in a multi-tenant solution. Envelope encryption suggest ...
0 votes
0 answers
76 views

Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory

Intro Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode! The idea is to use gocryptfs --reverse from any existing (...
0 votes
3 answers
103 views

AES mode for reusing same keyset

I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
16 votes
3 answers
76k views

Veracrypt: Which encryption algorithm + hash algorithm to use?

Which between the two encryption algorithms AES(Twofish(Serpent)) and Serpent(Twofish(AES)) is most secure and which hash algorithm to use between SHA-512, Whirlpool, SHA-256 , and Streebog?
0 votes
1 answer
46 views

Encrypted Note Password Confirmation

I'm creating a pastebin-style application which stores notes and has the following options: Ephemeral, where it is deleted as soon as it is read Encrypted, where the content is encrypted before being ...
3 votes
2 answers
286 views

Encrypted log entries authorization

We have a database table of encrypted log entries, each encrypted entry containing information about the user who created the entry. The entry is encrypted with the encryption key of the particular ...
0 votes
1 answer
61 views

Securely transfer encrypted file and private key from server to phone to offline device

I have a file that is encrypted on the server with a private key. I need to transfer the file through a users phone to a device that does not have an internet connection. In order for the offline ...
0 votes
0 answers
6 views

How exactly Apple Time Machine backups are encrypted? [migrated]

I have a USB SSD that I use for Time Machine backups. I have backup encryption enabled. What keys exactly are used to encrypt the backup? Does Apple have any of those keys? How safe it is to keep this ...
8 votes
1 answer
2k views

Connection between PIN/password and encryption keys in Android

I am trying to piece together some information about the security system in Android. Particularly about how user's password/PIN is connected with encryption keys in file-based encryption mode. I'm ...
0 votes
1 answer
36 views

Is DPAPI usable when only being able to read the file directory?

DPAPI: Windows Data Protection API Say I would be able to read a Windows system file system, including all files. Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
1 vote
2 answers
268 views

Asymmetric Encryption on User Data to Allow Unauthenticated Input

Normally I would want to develop an app that encrypts user's data with symmetric encryption (AES 256) from a password based derived key (PBKDF2). For a new project, I would like the users to be able ...
1 vote
4 answers
221 views

Is there any benefit of encryption if the password is known?

Is there a benefit of encryption of a file (for example with AES-GCM), if the password is included alongside the encrypted data? I know it sounds like a useless question, but I am curious about its ...
79 votes
3 answers
12k views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

For example, say the following are HTTPS URLs to two websites by one IP over 5 mins: "A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2". Would monitoring of packets reveal: nothing, reveal only ...
70 votes
5 answers
205k views

Understanding 2048 bit SSL and 256 bit encryption

On DigiCert's page, they advertise a 2048 bit SSL with a 256 bit encryption: http://www.digicert.com/256-bit-ssl-certificates.htm What exactly is the difference here and why are two encryption bits ...
14 votes
4 answers
18k views

Unlock hard drive vs full-disk encryption

When I turn my notebook on, it asks me for the password to unlock the BIOS and than it asks me for the password to unlock the hard drive. How different is this 'password to unlock the hard drive' ...
1 vote
1 answer
651 views

Postfix + MySQL ENCRYPT() encryption method change

I already have my mail server (postfix, courier, mysql) and roundcube as my webmail client, Encrypt() is the current password encryption function, Is there a way to change the default password ...
17 votes
2 answers
6k views

Is Tor over VPN a security risk?

In his talk about OPSEC, The Grugq stresses that you first have to go through TOR before connecting to a VPN. Otherwise, the VPN would be a direct link from the endpoint to you. He summarizes: TOR ...
262 votes
3 answers
143k views

What are ssh-keygen best practices?

Most users would simply type ssh-keygen and accept what they're given by default. But what are the best practices for generating ssh keys with ssh-keygen? For example: Use -o for the OpenSSH key ...
0 votes
2 answers
61 views

Encryption on IP Tables network Gateway

I have created a network gateway on an Ubuntu server. It has 2 interfaces and forwards the traffic from one interface to another. One of the interfaces is connected with a pfsense firewall that ...
1 vote
3 answers
207 views

Are there ways to detect plain dm-crypt encryption and what are the countermeasures against them?

Encryption with plain dm-crypt is often positioned as encryption that cannot be recognized. But is it really so? Are there ways to prove that the data is encrypted with plain dm-crypt? How to bypass ...
0 votes
1 answer
71 views

Should unique string part of an invite-link be encrypted?

Consider an invite link like this: https://mysite.com/invite-link/{uniquestring} The uniquestring part of the URL is the part with which server-side application can lookup the invitation information ...
2 votes
1 answer
1k views

Best practices for storing many certificates and private keys

I am responsible (among many other things) for managing TLS/SSL certificates for a couple dozen or so websites for a large multinational. Some sites are hosted on Apache, some are on IIS. I use ...
-1 votes
1 answer
192 views

Why are there so many different encryption algorithms?

Taking a quick look at Wikipedia, there happens to be a vast amount of different encryptions/cryptographic algorithms. Yet, many of the listings show that these encryption methods are not in use today ...
0 votes
3 answers
665 views

How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]

Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings? Over the years, I have basically ...
1 vote
1 answer
383 views

Server pagination with key in response to fetch next page

I want to introduce pagination in one of my server endpoints. The endpoint will have an option to include in the parameter the last index of the previous page, and if included, the "page" returned ...
0 votes
2 answers
862 views

Storing sensitive data in Local Storage with encryption?

I have a notes app that's offline-first and syncs with remote database when online. Currently, when a user creates a note, I'm encrypting it with AES. I ask the user to enter their decryption ...
4 votes
1 answer
6k views

How to safely store/process secret key for JWT

After reading this: https://stackoverflow.com/questions/30089604/jwt-whats-a-good-secret-key-and-how-to-store-it-in-an-node-js-express-app, on how to store "secret key" to assign JWT tokens. I had ...
3 votes
1 answer
247 views

Encrypting links between registered users and their sensitive data

I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database. Furthermore, if a user has multiple pieces of sensitive data, ...

1
2 3 4 5
117