Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1 vote
1 answer
464 views

How to get Future Keys (Session Key) from IPEK for decryption data?

I'm new to DUKPT, so I'm not entirely clear about DUKPT and HSM. Right now, I'm trying to decrypt data (PAN number) from terminal. So far, when I receive KSN and encrypted data, I understand that I ...
1 vote
1 answer
73 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
223 votes
3 answers
106k views

What are ssh-keygen best practices?

Most users would simply type ssh-keygen and accept what they're given by default. But what are the best practices for generating ssh keys with ssh-keygen? For example: Use -o for the OpenSSH key ...
0 votes
2 answers
44 views

How does bitlocker work when unlocking a removable drive on another PC using a password?

Here's the scenario: I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC. Surprisingly, when I do this, all ...
-1 votes
1 answer
44 views

What are symmetric and asymmetric encryption and what would be a good example from daily life? [duplicate]

I understand that to "encrypt" something means to "code" it, to make it understandable for two parties, giver and receiver and generally only for them, but I don't know what it ...
0 votes
0 answers
15 views

Question about video downloader websites and encrypted response [closed]

I am interested in to find out how download video from different social networks websites work. As I understand, we sending post request with video url, after that, on the backend we somehow get this ...
0 votes
2 answers
62 views

Does my receiver have a public key for email encryption?

I'm using an email service with encryption option and I need to send an encrypted email. So if I need my letter to be sent encrypted, I need to take my receiver's public encryption key and apply it to ...
1 vote
1 answer
115 views

What are the roles of the "PACKAGER" in a digital rights management system?

I am studying about the basics of DRM systems. I recently discovered that the term packager is the application that encrypts the original content from the creator. Is there any other work this ...
0 votes
1 answer
57 views

P-384 vs. SHA384

Forgive my inexperience with encryption, I've been researching this for the better part of the morning and still cannot find a smoking gun answer. A vendor is requesting that we verify a website we ...
2 votes
1 answer
261 views

Security of re-encryption with a list of pre-computed password based keys

I have a problem where an encrypted file stored on a server needs to be decrypted through a precomputed list of passwords that are used one time only - OTP applied to encryption basically. The file is ...
16 votes
5 answers
4k views

How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?

Jumping on the NSA/Prism questions bandwagon - There's been a lot more attention drawn to facilities such as Room 641A which indicate that the NSA has been, amongst other things, applying mass ...
0 votes
0 answers
33 views

What is symmetric or asymmetric in public and private keys? [closed]

only lock == public key only open == private key both open and lock == regular key What here is symmetric, or asymmetric here, if at all?
-3 votes
0 answers
29 views

Can anyone decipher this I am not that good at deciphering and need some help [closed]

PCtvaGM3cUhSTEVhYGMsO2U5SFpBVFZAJEdwJSQ7K0VWOi4rQEJnVkRJbW0jK0BDJ2FEMDlgMUYqJk8kQDwtSTgrREdtPkRmcChDRioyR0JBU2whJEVjbDIwRVplZS5BMD8pLStFcU85Q2BtZUBAPGl1LURmVEU0QVRBbzBEZz5jLSs+...
2 votes
3 answers
426 views

In RSA, can any of the two keys be used for both encryption and decryption? [duplicate]

I know RSA has the concept of "public" and "private" key and one key is used for "encryption" and another for "decryption", but I am confused if both keys can ...
-1 votes
0 answers
18 views

I am looking for how you can Identify what type of cipher this encoded message is in? [duplicate]

PCtvaGM3cUhSTEVhYGMsO2U5SFpBVFZAJEdwJSQ7K0VWOi4rQEJnVkRJbW0jK0BDJ2FEMDlgMUYqJk8kQDwtSTgrREdtPkRmcChDRioyR0JBU2whJEVjbDIwRVplZS5BMD8pLStFcU85Q2BtZUBAPGl1LURmVEU0QVRBbzBEZz5jLSs+...
96 votes
10 answers
32k views

If a provider sees the last 4 characters of my password, can they see it in full?

I have some domains/websites as well as emails with Bluehost. Every time I need support, they need the last 4 characters of my main password for the account. They cannot tell me how they store the ...
2 votes
4 answers
366 views

How could online encryption ever work? [duplicate]

I have recently read about the german enigma machine in WW2, It worked in a way that every day the machine configuration was sent per mail to the different operators. (I couldn't find official sources ...
8 votes
2 answers
8k views

Are Telegram secret chats secure assuming MTProto isn't?

For those who don't know: Telegram is a partially open source Whatsapp alternative (Server is closed source) which offers secret chats and normal chats. Secret chats are encrypted with Diffie-Hellman ...
13 votes
6 answers
5k views

Is (safe) encryption over compromised line impossible?

I realize something like this would be the holy grail of communications security and have never heard anything to suggest it has been done. Am just wondering. A lot of mathematicians and computer ...
12 votes
2 answers
2k views

Cannot understand supposed ProtonMail vulnerability from wired.com article

Currently I'm reading an article about ProtonMail here and I don't understand it. Now let’s address ProtonMail’s weaknesses. One of the big issues is that it isn’t easy to know whether a message ...
4 votes
2 answers
2k views

How Does Telegram's Identity Verification Work?

Note: please refrain from commenting on Telegram's design of OTHER parts, as it will distract from the stem of the question. Background: Signal (Previously, "TextSecure" app) uses specific "Your ...
2 votes
2 answers
243 views

Encrypted log entries authorization

We have a database table of encrypted log entries, each encrypted entry containing information about the user who created the entry. The entry is encrypted with the encryption key of the particular ...
30 votes
3 answers
5k views

Why is one-time pad informationally secure?

I am reading "Serious cryptography" and he wrote the following: Informational security is based not on how hard it is to break a cipher, but whether it’s conceivable to break it at all. A ...
0 votes
1 answer
73 views

TPM use without secure boot

I've been asked to improve the security of my company's iot device, and encrypt a storage partition. It's a general purpose arm based device, and currently can boot from a variety of sources (USB, ...
0 votes
1 answer
56 views

OS on external drive -- is it safe?

So I'm installing macOS to my external hard drive partition, so I can have a 100% clean environment where I can engage with cryptocurrencies. (Exchanges, stable coins, protocols, putting actual money ...
1 vote
1 answer
329 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
1 vote
2 answers
216 views

Asymmetric Encryption on User Data to Allow Unauthenticated Input

Normally I would want to develop an app that encrypts user's data with symmetric encryption (AES 256) from a password based derived key (PBKDF2). For a new project, I would like the users to be able ...
1 vote
1 answer
61 views

How is the stream cipher key shared on GSM?

I read that phones encrypt communication (GSM as implemented in 2G,3G..) - particularly voice as SMS are unencrypted - using a stream cipher. Symmetric Stream ciphers use the flip-flop machinery to ...
0 votes
1 answer
155 views

Storing Bob encrypted data, and send them to Alice (who must be able to decrypt the content)

I need to develop a website where a user (Bob) send text, image, or video content to my website. After some time, I need to send this data to another user of his choice (Alice). I want to encrypt user ...
0 votes
1 answer
667 views

How to decrypt sensitive information with a token and a password

In a web app, it's common practice to encrypt sensitive information against a user's password. In this scenario, what's how would you access/encrypt/decrypt that information using token based ...
1 vote
1 answer
558 views

Postfix + MySQL ENCRYPT() encryption method change

I already have my mail server (postfix, courier, mysql) and roundcube as my webmail client, Encrypt() is the current password encryption function, Is there a way to change the default password ...
62 votes
7 answers
10k views

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

Suppose I have some confidential information that is encrypted and I'm forced/compelled to disclose that password. My goal is to make that decrypted payload seem meaningful / and the password valid. ...
92 votes
9 answers
19k views

Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?

I don't have any experience or scientific knowledge in security, I just wanted to ask if this is possible because I am interested in it. What if I encrypt data and every password decrypts it, but ...
0 votes
1 answer
370 views

Public / Private Key Cryptography for offline systems

Are there any best practices around distributing an encrypted package to multiple end user systems, specially if the end system are offline ones, in context of asymetric cryptography? Is it a must to ...
3 votes
2 answers
100 views

Does any real world protocol makes use of the associated data in AEAD?

I'm trying to find evidence of use of the associated data (authenticated cleartext associated with the encrypted and authenticated data) feature offered by AEAD (Authenticated Encryption with ...
1 vote
0 answers
29 views

multi-user deterministic symmetric encryption [migrated]

I was wondering whether there exists a symmetric encryption scheme such that there is 1 sender and n receivers. Each receiver has 1 random and independent symmetric key. The sender knows the ...
5 votes
1 answer
911 views

Connection between PIN/password and encryption keys in Android

I am trying to piece together some information about the security system in Android. Particularly about how user's password/PIN is connected with encryption keys in file-based encryption mode. I'm ...
0 votes
0 answers
66 views

Encrypt SVN for passwords

Could anyone give me advice on the best way to encrypt the SVN version control system on a Amazon Linux 2 instance? I am planning to encrypt or disable the SVN from asking if unencrypted passwords ...
6 votes
1 answer
992 views

Online Diffie-Hellman Tool

I stumbled upon this website which provides a service to generate Diffie-Hellman parameters online for free to the public. Surely using a website like this would be a bad idea to use in a production ...
3 votes
1 answer
273 views

Always leaking ext4 superblock

An encrypted ext4 container will always leak the superblock information. So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks? Shouldn't it then ...
0 votes
0 answers
16 views

why is gpg subkey getting a warning

I just begain studying how GPG works on Linux(Ubuntu20.04) and can't get my head around as why my subkey keeps getting a warning when encypting a file using the GPG command. I have also tried signing ...
1 vote
0 answers
19 views

Would adding encryption to an MPLS provide additional protection for application access which is over TLS?

I have users at a remote site who access business application via an MPLS. The applications use HTTPS (TLS). The MPLS connection that we have is non-encrypted. The data is sensitive. Would adding ...
6 votes
4 answers
6k views

Is using Tor and VPN combination more secure?

I have been reading more about Tor and its risks to personal data leakage to the exit nodes in the chain. This last node can snatch encryption keys or log in information of websites I may have ...
13 votes
2 answers
22k views

Is using VPN, Tor and ProxyChains together more secure?

Similar question (Tor and VPN only). All these three technologies seem to share the same goal, i.e. making internet traffic anonymous. Does it make any sense to try to use them together to increase ...
0 votes
1 answer
65 views

Are self-signed certificates better for local usage?

When generating a certificate what would more secure - generating a self-signed certificate using PGP or using a public CA like Let's Encrypt? We are using it for signing and encrypting. What are the ...
7 votes
3 answers
2k views

Is the connection to Tor hidden services encrypted?

It's possible for Tor exit nodes to sniff traffic on normal websites, unless you connect via SSL/HTTPS. But what about hidden services, they don't seem to support the HTTPS protocol. Can the exit ...
2 votes
1 answer
1k views

Is SSL/TLS sufficient for safe transit of binary data via API traffic?

We are using object storage from the vendor of our cloud server to store image templates (vhd) of our cloud server in the event that we need to re-provision our server install quickly. We would like ...
0 votes
1 answer
44 views

Secure data (+ private key) storage in an insecure public cloud environment

We are trying to encrypt files in a manner that they can be completely secure in an insecure environment (like a public cloud). We're talking about military grade secure. The data should be so secure ...
24 votes
6 answers
4k views

What are the good use cases for disk encryption?

I've been researching disk/file system encryption, and on the surface it seems like a good idea for a lot of things. But as I dig further, the security it offers seems more mirage like than real. ...
20 votes
9 answers
7k views

Need to leave computer in repair shop. How can I secure solid state drive contents?

I need to take my desktop into a PC repair shop and leave it for a few days. It would be easy for them to copy the drives without me knowing. I am running Windows 10 with a password but this doesn't ...

1
2 3 4 5
113