Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
1answer
25 views

How to send a fixed size encrypted message to be broadcast to multiple (known) recipients without letting the broadcaster decrypt the message

I am creating a network with three layers. A sender layer, A gateway layer, and a Receiver layer; each having different platforms. See diagram below All platforms have published their public keys on ...
0
votes
1answer
36 views

How is this Identity aware encryption description different from simple authorized access?

I was reading this article by Credit Karma (An American fintech). They mention that this system of "identity-aware encryption" helps them better protect the data of their users and to keep ...
0
votes
0answers
37 views

Multi-party computation: how to avoid a single point of weakness?

I'm trying to understand how to eliminate a single point of weakness given the problems MPC claims to solve. Take a simple example where some secret is split between servers B and C. If either B or C ...
-4
votes
0answers
63 views

Encrypted communication system without CPU backdoor that is able to resist quantum computers [closed]

This is a process I invented for secure communications to be resistant against CPU backdoors and quantum computers: Personal public keys are transferred in person to each person's offline device. ...
0
votes
0answers
31 views

Open source alterntives to gallery vault [closed]

Are there any open-source alternatives to gallery vault? Please suggest references.
0
votes
1answer
45 views

Is rsyncd secure? (except for the lack of transport encryption)

I have been using an rsyncd server for backups for what feels like a decade. I saw that rsyncd has no transport encryption (not even for username and password). I wonder what other security issues ...
0
votes
0answers
29 views

JS client side encryption & Oauth [migrated]

We are building a open source SaaS app and there is some information that the server doesn't need to know, and that the user would prefer to keep private. This is not super confidential/life ...
0
votes
0answers
14 views

How to determine what type of encoding/encryption has been used in this file? [duplicate]

I take this file from resource of game and I Want to know how to decrypt this , this is small line from the code : §ö ¨ö È)4Ì~u”]Èr L;Ùúe£¼’Q7ŠzY½¹Í„¶Qö¨¤s„³JØW rest of the file here : The Code
3
votes
1answer
49 views

GoCryptfs on cloud

I read the audit docs on GoCryptFS website (https://nuetzlich.net/gocryptfs/threat_model/). There dragon has full information about the read write done in the gcfs partition, what does this mean and ...
1
vote
1answer
69 views

Use the public key of a certificate as the key for HMAC SHA

Consider the following scenario. A company has several computers for each users on the same domain. They purchase an RSA certificate from a recognized authority which will be deployed with private / ...
0
votes
1answer
43 views

Is IPsec VPN still necessary when already using HTTPS protocol? [duplicate]

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
1
vote
1answer
42 views

Hybrid Encryption: What is the format for storing the encrypted key and the cipher text together?

In the scenario of a hybrid encryption for which I use RSA (asymmetric) to encrypt the encryption key used with AES (symmetric) to encrypt my message, I need to store the encrypted key with (together) ...
1
vote
0answers
31 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
1
vote
2answers
86 views

How are passwords stored in the database of a decentralized peer to peer system?

I want to use username and password instead of public key cryptography for a decentralized peer-to-peer application, but since the passwords are stored on users' computers, there is a possibility of ...
2
votes
0answers
34 views

Is the RSA Private Key non-exportable option protected from key extraction?

I would like to know if the non-exportable private key option, virtualized based security, selected when importing an RSA certificate guaranteed although the user will never be able to see the RSA ...
2
votes
0answers
97 views

Long-term symmetric key storage

I have some sensitive data that I need to encrypt and retain long-term (i.e., 5+ years at least). I'd ideally like to secure it using multiple hardware devices via a Shamir share. Something like: ...
0
votes
0answers
21 views

Public key RSA vs SHA [duplicate]

If a person had four choices : store unencrypted passwords . Use SHA-1 on the password and store . Use SHA and salt then store that . Use public key encryption and throw away private key . Which is ...
1
vote
0answers
52 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
12
votes
4answers
7k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...
1
vote
1answer
53 views

Does knowing part of a passphrase for sure really mean that you can “disregard” that entire part when trying to crack it?

Alice bought 1 Bitcoin and encrypted her wallet.dat in Bitcoin Core. Samantha, Alice's friend, notices the Bitcoin price skyrocketing and, while Alice is in the bathroom, steals Alice's wallet.dat as ...
10
votes
1answer
1k views

Permanently delete a record

Say there is a SQL database that stores certain records in encrypted. A person wants deletion of a record in a way that even hard drive recovery services cannot recover it without breaking the hard ...
0
votes
1answer
87 views

The risk of RSA encryption. Would individually encrypted characters be risky?

Is it possible to decrypt a RSA message if the characters of the message are individually encrypted? The info you have is the message, the public key and the n which is too big to be factorizable.
1
vote
0answers
47 views

Temporary storage of sensitive information in Javascript

I am working at a university where we are creating a Website that allows students to apply for scholarships. Rather than print the application form, sign it then scan it then return it back, the ...
1
vote
0answers
52 views

E2E media data encryption methods [closed]

To me, security is most important topic for messaging or video conference applications. I am searching if end to end encryption is possible for group chat or group video conference. There so some ...
0
votes
0answers
39 views

Would confidential computing/hardware-based TEE be the missing security jigsaw puzzle to counter data exfiltration?

Is confidential computing/hardware-based trusted execution environment (TEE) the missing security jigsaw puzzle to counter data exfiltration? Today, we already have data encrypted at rest and data ...
0
votes
2answers
54 views

Key derived from source files; deduplicated file storage

I'm wondering if the following system would be a secure way to store frequently duplicated files. Hash the source file, deterministically derive a key from it. The source file(s) are likely to be ...
0
votes
0answers
30 views

How does collecting mouse movements increase cryptographic strength? [duplicate]

Excuse me if this is obvious, but while encrypting one of my disks, I got bored and read the text on the window. And the question came to me, how the heck can I move a mouse in a way that a computer ...
0
votes
1answer
146 views

Encryption/decryption at client or server side with hybrid cryptosystem?

I've read a lot of documentations about encryption in the last weeks and I think I now have a good idea of what system I will use for my project (standard hybrid cryptosystem using RSA/AES). However, ...
8
votes
1answer
2k views

How does Google save our passwords on their server?

My friend recently told me that: Google doesn't have our passwords saved on their database. Instead they put our password when typed on browser, through an algorithm and it'll produce a unique ...
0
votes
0answers
18 views

End-2-end encryption with WhatsApp [duplicate]

I have had recently gone through the horror of transferring WhatsApp conversations when changing phones (android for iPhone). Actually, the thing that it is close to impossible for everyday folk is a ...
0
votes
1answer
89 views

Can you Encrypt your HOST Machine, while Inside an emulated Virtual Machine?

Such as when you are completely Inside the VM, can you have your Host machine in which the VM resides be completely Encrypted while running the VM? say for example: UBUNTU(host machine):->run VM(...
4
votes
1answer
633 views

Does “emergency mode” help protect iOS devices in AFU mode?

In recent iOS devices you can temporarily disable unlocking via biometrics by holding the power button and either volume button for a couple seconds. I’m trying to find out if this does anything to ...
2
votes
3answers
71 views

Is the data of an encrypted Android device more vulnerable if it's running a custom ROM?

Is an Android device that is rooted has the bootloader unlocked is running some mainstream custom ROM has encryption enabled, with a strong password more vulnerable (As in easier to break into, to ...
1
vote
0answers
30 views

How to decrypt .ZC1PR and .XXFD formats after Ransomeware attack? [duplicate]

My company NAS has been attacked by Ransomeware and all the files are now encrypted to above file formats. Does anyone know any method of decrypting at least some files? I can find some decryption ...
1
vote
0answers
19 views

Create safe authentication in Angular app with NodeJS API [closed]

I develop an Angular app with a NodeJS API. I am trying to add security to my application and so I need to create a safe authentication. To do it I have found some courses to add JWT to requests and ...
3
votes
2answers
86 views

Encryption as bijective data masking function

Context I'm building data lake from scratch within a small team (3-6 data engineers). I want to mask PII data when copying data from prod to dev/test environments. I'm particularly interested in the ...
1
vote
0answers
60 views

Possibility of EMVCO 3DS Authentication Decoding [closed]

I bumped across a request via Traffic analysis through Burp Suite Proxy & it looked like a 3DS Authentication. Sample below: My question was if this authentication could be intercepted, decoded ...
0
votes
1answer
80 views

Should encryption key be stored remotely?

Consider the following scenarios of storing sensitive data locally on a network connected always-on device: without any data encryption whatsoever with encryption, the key stored locally in the ...
2
votes
1answer
51 views

Using encryption key as input keying material

Libsodium supports Blake2 for key derivation. It seems like you shouldn't truncate the output to get two keys (eg one encryption/one mac) as the recommended way is to use a counter as the salt for ...
0
votes
0answers
7 views

Hill Cipher: Determining the number of bad keys [migrated]

Find the number of matrices whose determinant is a multiple of 13 where the first column is not a multiple of 13 but the second column is a multiple of the first modulo 13 But here's what I did: The ...
0
votes
0answers
24 views

How does the computer calculate or store diffie hellman values? [migrated]

So usually the diffie helmann key is 2048 bits as i understand but my computer can barely calculate a 10 digit number. What are some common numbers in diffie hellmann? Here is my code that's suuuper ...
-1
votes
2answers
100 views

Is HTTPS over LAN effective?

From my understanding, while HTTPS does not stop a mitm, it makes it so the mitm cannot read the plaintext requests. But, the mitm could still tamper with the public/private keys anyways, so in came ...
1
vote
0answers
61 views

What could be the threats faced by decentralized payment platform and users as server

Platform Description: I was planning to build a prepaid based global wire transfer platform that focuses on user privacy and security by using Payment API like Rapyd with using endpoint encryption, ...
0
votes
0answers
26 views

How does the Client Random and Server Random work when they are public? [duplicate]

I have read this section and I am still a little confused, as well as read a few of the posts here: https://www.acunetix.com/blog/articles/establishing-tls-ssl-connection-part-5/ So, the client sends ...
0
votes
0answers
29 views

How safe is using iMessage in China WITHOUT iCloud?

I know that Apple has moved to local iCloud hosting in China as of 2018 but what is the implication to using iMessage without an iCloud account setup? Not sure if I'm reading it correctly but this ...
3
votes
1answer
65 views

Verify that data submitted by user was produced by my app

I'm designing an app (for PC), that is intended to run on users' machines and generate a file with some data. The user will then upload the file to the server, and I want to verify that this file has ...
1
vote
0answers
132 views

Digital Signature uses private key for encryption, and public key for decryption? [duplicate]

Public key is for encryption, and private key is for decryption in PKIs. And digital signature employs the PKIs. How to use a private key for encryption, and using public key for decryption which ...
0
votes
1answer
52 views

How to distribute bash scripts to multiple IOT devices securely

Here is the dilemma we're having: we developed proprietary bash scripts that do something, which is meant to be secure and closed source. Our customers however will have to buy separate IOT devices ...
0
votes
0answers
8 views

AES GCM SIV implementation [migrated]

I have a library which implements AES GCM algorithm. However, as you know even a single nonce reuse can have catastrophic results. As we can't guarantee a unique IV every time, I would like to run the ...
1
vote
1answer
72 views

How to prevent mobile data from being viewed when leaving VPN server?

Please correct me if i'm wrong. As far as i know, when we use vpn service, our datas are only encrypted from us to vpn server. After leaving the server to intended recipient, our data is decrypted and ...

1
2 3 4 5
108