Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
5,829
questions
-1
votes
0
answers
30
views
Shor's algorithm and encryption [closed]
Could Shor's algorithm crack an AES-256 bit encrypted text with a 384 bit key with ECC?
1
vote
0
answers
37
views
LUKS: How many iterations are enough?
The luksFormat command accepts iteration time as a parameter, not iterations. That obviously leads to quite different number of iterations depending on the hardware doing the encryption. However if ...
0
votes
0
answers
48
views
Sophos home blocks explorer.exe from encrypting several files (ransomware?)
Here's what happened:
I was transferring a quite large number of small files (.CSV, .PNG above all) from an old USB stick that never gave me any problem from one (allegedly safe) laptop (win10, win ...
- 101
0
votes
1
answer
34
views
Discovering already encrypted REQUEST key AES128 and sending already encrypted REQUEST with other data
I'm working on a college project to understand how the IOS application sends the password in the REQUEST already encrypted in AES128, what is its key, and send a REQUEST with our string transformed ...
CommunityBot
- 1
0
votes
1
answer
15
views
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
When a user logs in with their email/password combo and gets authenticated to our website, the backend sends the web browser an encrypted cookie based off of their memberId with us. While this ...
- 45.3k
5
votes
2
answers
18k
views
How to store banking information,collected on website, securely and implement encryption?
So I have this website in which I will ask users to input the following banking information.
Bank account holder name:
Bank account number:
9 digit routing number:
I need these information from ...
5
votes
2
answers
2k
views
How is TSC (TKIP sequence counter) calculated, in WPA?
I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images:
...
CommunityBot
- 1
-4
votes
0
answers
30
views
Need help to decrypt a text file & want to know the type used to encrypt [closed]
Please help to decrypt the below message:
þ =R „ù °@ |£zaBéÒpØP ø+äD˜Å¨ssgSP×”•ÉÚ†¢*ê>k?LŽÁð°§-®æ0øΦ à wîÀl±ÀûÒuÔŸFù¨z=<'nA "¤¯–‰xÊÍ 7¾Ñ`r•t¿æH#]ÜGa0+Â%DÏ6©3jí¬W^ñ ö :Ëi?vö²¨‘Ù¸³@...
- 1
0
votes
1
answer
54
views
e-signature + digital signature aws md5
I am trying to implement e-signature + digital signature to secure the e-signed document from altered, something like Docusign. I am using AWS s3 to store the documents.
My question are:
Is MD5 (...
CommunityBot
- 1
0
votes
0
answers
42
views
Tool to encrypt folder and add password [closed]
Is there any tool for example that can add a password on a folder, and every time the folder is closed, the folder locks again?
Is there anything like this like Veracrypt?
- 127k
2
votes
0
answers
44
views
Is MacOS encryption as secure if FileVault is switched on after installation?
Regarding turning on MacOS' FileVault after it was not turned on for installation, it says here...
If FileVault is turned on later — a process that is immediate since
the data was already encrypted — ...
- 1,187
36
votes
2
answers
8k
views
When could 256 bit encryption be brute forced?
Assuming quantum computing continues to improve and continues to perform like this:
... quantum computer completes 2.5-billion-year task in minutes
is it reasonable to expect that 256 bit encryption ...
- 11.5k
0
votes
0
answers
46
views
Choosing Encryption Strategies for Secure Long-Term Storage of Sensitive Data
When considering external drives for secure long-term storage of sensitive data, what are the pros and cons of using the same password for encrypting all files versus using random passwords for each ...
- 163
0
votes
0
answers
35
views
What are common methods that can be used in ciphertext-only attack? [closed]
I have homework in my Information Security class which is to list some of the methods used in ciphertext-only attacks.
I know two of them are:
Frequency Analysis
Attack on Two-Time Pad
But they are ...
- 127k
40
votes
6
answers
11k
views
How secure are my passwords in the hands of Firefox using a Master Password?
I'm relying on Firefox to remember my passwords, using a Master Password of more than 25 characters. How secure is this set-up?
- 183
0
votes
1
answer
38
views
Is deploying a web application to a customer's encrypted drive a secure solution against code theft?
I have developed a web service for customer. The web service is written in Python and running in Docker containers. It is managed by docker compose.
The customer wants my web service to run on their ...
0
votes
0
answers
20
views
Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?
Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
- 1,039
2
votes
1
answer
1k
views
PGP encryption for the server based app
Here is context:
I am using PGP to encrypt messages in a chat web app. After going through some articles, I get brief idea how PGP works and here is how I am doing it with openPGPJs :
Client(web ...
CommunityBot
- 1
1
vote
3
answers
2k
views
Risks of encryption keys contained in a memory dump after a crash?
Assuming a full disk encrypted system where non-volatile storage is encrypted.
While the system is running, in case of a crash and memory dump, e.g. plugging a USB drive causing an ...
- 49
0
votes
1
answer
44
views
Using a second device as a decryption source. Like 2FA but not for authentication
I don't have a completely clear idea about this so apologies if the question is a bit unclear.
2 factor authentication is well known. We see it as involving a second device in order to answer a yes/no ...
CommunityBot
- 1
0
votes
0
answers
23
views
How do I make sure my PC program is receiving socketio events from my phone? [migrated]
I have a C# program, and a flutter application that runs on mobiles. They communicate through a python socketio server.
The C# program and flutter app exchange data first by entering a room inside the ...
- 401
0
votes
0
answers
4
views
How to encrypt a disk with 2 Windows OSes and 3 partitions with Vera Crypt? [migrated]
I have a disk with an MBR partition scheme and 3 partitions. On the first partition, there's a Windows 7 C: drive which I keep to play some retro games that won't run on newer Windows. The second ...
- 1
0
votes
1
answer
52
views
How to avoid performance issues with envelope encryption when using separate DEK's for each piece of data?
Posted this first on stackoverflow but was suggested to repost it here.
I am planning on using envelope encryption for data stored in a database in a multi-tenant solution. Envelope encryption suggest ...
- 36
0
votes
0
answers
76
views
Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory
Intro
Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode!
The idea is to
use gocryptfs --reverse from any existing (...
0
votes
3
answers
103
views
AES mode for reusing same keyset
I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
- 341
16
votes
3
answers
76k
views
Veracrypt: Which encryption algorithm + hash algorithm to use?
Which between the two encryption algorithms AES(Twofish(Serpent)) and Serpent(Twofish(AES)) is most secure and which hash algorithm to use between SHA-512, Whirlpool, SHA-256 , and Streebog?
- 127k
0
votes
1
answer
46
views
Encrypted Note Password Confirmation
I'm creating a pastebin-style application which stores notes and has the following options:
Ephemeral, where it is deleted as soon as it is read
Encrypted, where the content is encrypted before being ...
CommunityBot
- 1
3
votes
2
answers
286
views
Encrypted log entries authorization
We have a database table of encrypted log entries, each encrypted entry containing information about the user who created the entry. The entry is encrypted with the encryption key of the particular ...
CommunityBot
- 1
0
votes
1
answer
61
views
Securely transfer encrypted file and private key from server to phone to offline device
I have a file that is encrypted on the server with a private key. I need to transfer the file through a users phone to a device that does not have an internet connection. In order for the offline ...
- 3
0
votes
0
answers
6
views
How exactly Apple Time Machine backups are encrypted? [migrated]
I have a USB SSD that I use for Time Machine backups. I have backup encryption enabled.
What keys exactly are used to encrypt the backup? Does Apple have any of those keys? How safe it is to keep this ...
- 1
8
votes
1
answer
2k
views
Connection between PIN/password and encryption keys in Android
I am trying to piece together some information about the security system in Android. Particularly about how user's password/PIN is connected with encryption keys in file-based encryption mode. I'm ...
- 6,706
0
votes
1
answer
36
views
Is DPAPI usable when only being able to read the file directory?
DPAPI: Windows Data Protection API
Say I would be able to read a Windows system file system, including all files.
Say there would be a DPAPI encrypted value somewhere in this system that I want to ...
- 45.3k
1
vote
2
answers
268
views
Asymmetric Encryption on User Data to Allow Unauthenticated Input
Normally I would want to develop an app that encrypts user's data with symmetric encryption (AES 256) from a password based derived key (PBKDF2).
For a new project, I would like the users to be able ...
CommunityBot
- 1
1
vote
4
answers
221
views
Is there any benefit of encryption if the password is known?
Is there a benefit of encryption of a file (for example with AES-GCM), if the password is included alongside the encrypted data?
I know it sounds like a useless question, but I am curious about its ...
- 127k
79
votes
3
answers
12k
views
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
For example, say the following are HTTPS URLs to two websites by one IP over 5 mins:
"A.com/1", "A.com/2", "A.com/3", "B.com/1", "B.com/2".
Would monitoring of packets reveal:
nothing,
reveal only ...
70
votes
5
answers
205k
views
Understanding 2048 bit SSL and 256 bit encryption
On DigiCert's page, they advertise a 2048 bit SSL with a 256 bit encryption: http://www.digicert.com/256-bit-ssl-certificates.htm
What exactly is the difference here and why are two encryption bits ...
- 127k
14
votes
4
answers
18k
views
Unlock hard drive vs full-disk encryption
When I turn my notebook on, it asks me for the password to unlock the BIOS and than it asks me for the password to unlock the hard drive.
How different is this 'password to unlock the hard drive' ...
- 161
1
vote
1
answer
651
views
Postfix + MySQL ENCRYPT() encryption method change
I already have my mail server (postfix, courier, mysql) and roundcube as my webmail client, Encrypt() is the current password encryption function,
Is there a way to change the default password ...
CommunityBot
- 1
17
votes
2
answers
6k
views
Is Tor over VPN a security risk?
In his talk about OPSEC, The Grugq stresses that you first have to go through TOR before connecting to a VPN. Otherwise, the VPN would be a direct link from the endpoint to you. He summarizes:
TOR ...
- 939
262
votes
3
answers
143k
views
What are ssh-keygen best practices?
Most users would simply type ssh-keygen and accept what they're given by default.
But what are the best practices for generating ssh keys with ssh-keygen?
For example:
Use -o for the OpenSSH key ...
- 161
0
votes
2
answers
61
views
Encryption on IP Tables network Gateway
I have created a network gateway on an Ubuntu server. It has 2 interfaces and forwards the traffic from one interface to another. One of the interfaces is connected with a pfsense firewall that ...
CommunityBot
- 1
1
vote
3
answers
207
views
Are there ways to detect plain dm-crypt encryption and what are the countermeasures against them?
Encryption with plain dm-crypt is often positioned as encryption that cannot be recognized. But is it really so? Are there ways to prove that the data is encrypted with plain dm-crypt? How to bypass ...
CommunityBot
- 1
0
votes
1
answer
71
views
Should unique string part of an invite-link be encrypted?
Consider an invite link like this: https://mysite.com/invite-link/{uniquestring}
The uniquestring part of the URL is the part with which server-side application can lookup the invitation information ...
CommunityBot
- 1
2
votes
1
answer
1k
views
Best practices for storing many certificates and private keys
I am responsible (among many other things) for managing TLS/SSL certificates for a couple dozen or so websites for a large multinational. Some sites are hosted on Apache, some are on IIS. I use ...
CommunityBot
- 1
-1
votes
1
answer
192
views
Why are there so many different encryption algorithms?
Taking a quick look at Wikipedia, there happens to be a vast amount of different encryptions/cryptographic algorithms. Yet, many of the listings show that these encryption methods are not in use today ...
0
votes
3
answers
665
views
How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]
Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings?
Over the years, I have basically ...
- 127k
1
vote
1
answer
383
views
Server pagination with key in response to fetch next page
I want to introduce pagination in one of my server endpoints.
The endpoint will have an option to include in the parameter the last index of the previous page, and if included, the "page" returned ...
CommunityBot
- 1
0
votes
2
answers
862
views
Storing sensitive data in Local Storage with encryption?
I have a notes app that's offline-first and syncs with remote database when online.
Currently, when a user creates a note, I'm encrypting it with AES. I ask the user to enter their decryption ...
CommunityBot
- 1
4
votes
1
answer
6k
views
How to safely store/process secret key for JWT
After reading this: https://stackoverflow.com/questions/30089604/jwt-whats-a-good-secret-key-and-how-to-store-it-in-an-node-js-express-app, on how to store "secret key" to assign JWT tokens. I had ...
CommunityBot
- 1
3
votes
1
answer
247
views
Encrypting links between registered users and their sensitive data
I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database.
Furthermore, if a user has multiple pieces of sensitive data, ...
CommunityBot
- 1