Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
5,786
questions
6
votes
1
answer
65
views
Anonymity in initial Key exchange in onion routing
Maybe I will be wrong, please correct me and at the same time answer my question. I know the keys are exchanged between client and Tor relays through circuit extension requests (other than first relay)...
- 61
1
vote
1
answer
52
views
Will it ever be possible to functionally get the encrypted data off of an iphone in recovery mode?
Apparently the data encrypts until the passcode is entered, but my phone (close to 3,500 recordings of my original music) won't boot up. I dropped it and it went into a boot loop then went into ...
0
votes
0
answers
7
views
Protecting office/excel files from theft; changing MS office excel's auto recovery path is not working [closed]
I'm changing Excel 19's autorecover file location on Windows 10 on Excel > options > save to a folder on a bitlocker encrypted partition.
When editing the file without saving, it creates a file ...
- 11
0
votes
2
answers
78
views
openssl aes-128-cbc can be decrypted using different IV from encryption
openssl AES-128-CBC can be decrypted with a new IV different than the IV from encryption.
It seems that IV does not change the cipher too much as long as they share the same key.
I have an example ...
- 9
0
votes
0
answers
26
views
Apply TLS Encryption to PCAP File Retroactively [closed]
I'm writing a thesis about IEC 104 (TCP/IP) communication which is safeguarded by IEC 62351-3 (TLS).
However, most publicly available datasets only use "plain" IEC-104 without TLS.
Would it ...
- 101
0
votes
0
answers
21
views
Can you unzip multiple password protected compressed files at once? [migrated]
Is that possible in winrar or other application? If not, is there a way to bulk unzip all the files at once without having to input password? Thanks.
- 1
0
votes
0
answers
52
views
Adivce on encryption setup
I've been trying to get a reliable, and decently secure setup on a device for a little while now, and I feel like I may be overthinking some things but I am unsure.
Just to clear things up, this is ...
- 133
0
votes
1
answer
74
views
Feedback wanted regarding how secure this encryption/decryption is
I am creating a Password Manager and I wanted to create a JavaScript function to encrypt/decrypt data in the client-side, then I will be saving the only the encrypted data in MySQL Server. To encrypt/...
- 9
1
vote
1
answer
54
views
What root directories should be encrypted on a Linux system?
It is said that one cannot simply encrypt their home directory/partition because the system will often store sensitive data elsewhere in the system which would not be encrypted. This makes me wonder ...
- 133
2
votes
1
answer
66
views
PGP key pair - How to set up for multiple users to decrypt messages with Kleopatra
This is my first project of this nature, and I am hoping this is a basic use case for PGP encryption. Please forgive my ignorance!
There is a server being configured by a service provider (SP). The SP ...
- 123
2
votes
4
answers
71
views
Using FIX over TLS, is there a need to sign FIX mesages?
We have 2 servers communicating, server A (a server that I own), and server B (server on the internet that I trust). I get some info from server B, which are FIX messages (https://en.wikipedia.org/...
1
vote
1
answer
71
views
What is the effect of salt and no. of rounds in mkpasswd encryption?
I'm currently trying to understand how salting and no. of rounds work using mkpasswd. These are the commands that I have been experimenting around.
cp@cp-vm:~/Asg2_Task1b$ time mkpasswd -m sha-512 ...
- 11
0
votes
2
answers
81
views
Does it make any sense to encrypt data to be uploaded to an already encrypted cloud such as NordLocker?
Let's suppose one wants so store valuable data (e.g. a Bitcoin seed) in an encrypted cloud such as NordLocker. Would it make any sense that such person encrypts this data (offline) first with his/her ...
- 123
4
votes
4
answers
641
views
Using hashed trigrams to search over encrypted data
For practice, I write let's call it a notebook app that stores users' notes in AES-encrypted form. For encryption, I use a password-based intermediate key technique as described here. Actually, the ...
- 63
1
vote
0
answers
77
views
Banking site POST data obfuscated. Why?
I am logged in to my banking site and I see this kind of form POST data in the Developer tools of Chrome:
accountNo: removed for security reason
branchCode: removed for security reason
fromDate: ...
- 11
0
votes
1
answer
71
views
Which kind of data breaches or risk can happen if there is no virtual/physical disk encryption
There is an Azure-based internal database server and is not public-facing. There is another front-end application. A specific user group can connect with a VPN. There is no encryption applied at the ...
0
votes
0
answers
67
views
Is it possible to get krbtgt hash from TGT ticket?
As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
3
votes
2
answers
116
views
TPM - ECC based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 261
1
vote
3
answers
227
views
Password managing apps seem to have access to my passwords
Keeper used to be free so I had stored most of passwords on that app a few years ago from a past device. When I tried to access the passwords after five years, the app had turned into a subscription ...
- 11
0
votes
0
answers
17
views
Can an attacker sniff the encryption details when connecting to a VPN? [duplicate]
I thought I would be protected from sniffing if I use a VPN, even in a setting where my traffic is going through a «man-in-the-middle» either by ARP poisoning or an evil twin attack.
Now I was told, ...
- 101
0
votes
0
answers
20
views
Which is preferable compress and encrypt or just encrypt and no compression in purely security perspective and not in resources or efficiency? [duplicate]
I want to know what attack am I exposed to if I implement one of the two method. I'm pretty sure both of them are not 100% fool-proof and both of them are expose to traffic-analysis attack if I do ...
- 1
0
votes
0
answers
58
views
Are Android Bluetooth file transfers encrypted?
Suppose I pair two Android phones together using Bluetooth and transfer a file from the first phone to the second by sharing the file using Bluetooth. Does Android encrypt the file transfer so that no ...
- 753
0
votes
2
answers
65
views
What is a proper way to prevent parameter tampering and to make parameter secure
I'm developing a HTTP web server. I've used HTTPS as the protocol between client and server but I know that HTTPS can't prevent parameter tampering.
As we know, we can set parameters in URL, in HTTP ...
- 331
0
votes
1
answer
46
views
are files sent in a TLS channel signed? [duplicate]
I have 2 endpoints that are exchanging data (FIX messages), and the originating endpoint is genrating the fix files are sending them on an ecrypted channel (TLS or Stunnel). In a security audit, it ...
-1
votes
1
answer
104
views
Are the video calls made in a 3G/4G network encrypted end-to-end?
When I make a video call through a cellular GSM/4G network, is there any end-to-end encryption? If yes, what kind of algorithms and CPUs are used?
- 255
0
votes
1
answer
80
views
Security of using Yubikey to derive Diceware password?
I bought a new Yubikey, and am currently setting it up to use on my desktop PC. Previously the PC was secured with password only, and I'd like to use the Yubikey as an alternative: instead of using ...
- 153
1
vote
0
answers
32
views
How should an argon2 hash be stored? [duplicate]
Given the following argon2 hash
$argon2id$v=19$m=65536,t=32,p=8$mJmKA5qamzXOPJZYw4wCEUKY$COkMH0RckaZ/3bhYCdCQjLuzoLKxcAmk4TzmHRRgTQ8
How should the hash be stored in a database? From the answers of ...
- 11
0
votes
0
answers
38
views
Why does Firefox use unsecured port 80 to download certs? [duplicate]
When firefox (v111 2023) is opened for the first time it connects to ocsp.digicert.com on port 80 in cleartext. Isn't this a terrible security vulnerability. Can someone help me understand why this ...
- 1,515
0
votes
1
answer
115
views
Size overhead of encryption approximation
Is there some rough analysis or estimation of how much overhead in bytes an encryption using a public key could add to the final object?
- 173
0
votes
1
answer
271
views
How does Google's "on-device encryption" work?
I use Google to store some of my passwords and I noticed a "On-Device encryption" option in Google Chrome settings, that I had disabled. From what I understood, by allowing this, the ...
- 105
0
votes
0
answers
31
views
How to tell if a command is using a secure connection?
To make SQL server calls from my VM I use the command line tool sqlcmd however its doc https://learn.microsoft.com/en-us/sql/tools/sqlcmd/sqlcmd-utility?view=sql-server-ver16 fails to detail whether ...
- 241
1
vote
1
answer
120
views
How to protect files in use on a system powered on from physical theft or tampering?
I'm in the process of figuring out an encryption strategy for a personal Linux system.
My laptop is almost always on, or in sleep mode, except for longer travels.
My main threats are theft of my ...
- 11
1
vote
1
answer
57
views
AEAD: Authenticating a digest of my data instead the data itself
Relevant question for Python:
Stack Exchange: https://stackoverflow.com/questions/75739308/aead-authentication-with-huge-input-that-doesnt-fit-into-ram
Top Answers: https://topanswers.xyz/python?q=...
- 121
1
vote
0
answers
35
views
Decrypting a Base64 ciphertext [duplicate]
I am working on a challenge that includes decrypting a piece of ciphertext. The sample decryption provided is as follows:
...
0
votes
0
answers
49
views
Android FBE without screen lock
Is there any difference in the security of a factory reset with FBE (File-Based Encryption) on Android 10+ when not using a screen lock vs. using a screen lock before the factory reset is performed?
12
votes
5
answers
5k
views
Can the secret be derived from the checksum? Should the checksum be encrypted?
Assuming I have secret data that is encrypted (using sops for example) and a checksum of the secret data for change detection: Is it possible to derive secret information from the checksum or should ...
- 223
0
votes
1
answer
35
views
Is public key-transport key required for encryption key distribution over HTTPS?
According to NIST Key Management recommendation "8.1.5.2.2.2 Automated Key Distribution/Key Transport/Key Wrapping", it is required to use a key wrapping key or a public key-transport key to ...
0
votes
0
answers
33
views
store strings in db with asymmetric encryption for a python app keeping the data secure
I'm designing an app that receives sensitive data input from a user and that data needs to be saved securely in a database.
As far as I understand it needs asymmetric encryption but since this app has ...
- 1
0
votes
0
answers
39
views
Data Encryption Key protection during transmission in Envelope-Based Encryption
When using cloud HSM (eg: AWS CloudHSM, Google Cloud HSM etc) for client-side encryption, they always refer to Envelope encryption. In this encryption approach, the data encryption key (DEK) is ...
0
votes
1
answer
62
views
How do password protected files differ from keygen protected software?
From some posts I read here:
Regarding keygen protected software:
As long as the user has full control of the hardware where the software is running on (i.e. typical PC) it is impossible to fully ...
- 3
6
votes
2
answers
308
views
what is the safest way to open/decrypt an encrypted gpg/pgp file in memory | gnu/linux debian?
I would like to open/decrypt an encrypted gpg/pgp file in the main memory without leaving any footprints on the file system including swap,etc.
what is the safest option on a gnu/linux debian from ...
2
votes
1
answer
59
views
Could a "writeblocker" device be circumvented by it's own restrictions?
Speaking hypothetically, if a person wished to secure their data drives and a "writeblocker" device was of concern, could a piece of encryption software be crafted to write to the drive in ...
- 21
1
vote
0
answers
174
views
File encrypted with OpenSSL cannot be decrypted with LibreSSL
First off, please don't turn this question into a LibreSSL vs OpenSSL holy war! I'm just trying to understand the functional differences between them, nothing more.
I originally asked this question on ...
- 111
2
votes
1
answer
126
views
RAR archive password recovery
Hello guys is there some tool or methodic to get into let's say 12 years old RAR file.
I tried Kraken CMD tool and dictionary attack but it will take ages goes through all passwords.
Unfortunately for ...
0
votes
1
answer
106
views
Need help about how to generate the Key and Passphrase to encrypt/decrypt data (JavaScript)
I am developing a public website (with https) where each user is going to register and save confidential data, this data needs to be encrypted/decrypted only by the user. I need help to know how to ...
- 9
0
votes
1
answer
174
views
Feedback wanted regarding my functions to Encrypt/Decrypt data using PHP (Openssl) [closed]
I am creating a web app (HTML, CSS, JavaScript, PHP & MySQL) where the users register, and only logged users can create and save personal Notes (encrypted) in a MySQL Server database I have for ...
- 9
3
votes
1
answer
50
views
Storage options would give the organization the best chance of recovering data
I am studying information security, I have a question that I need help with.
Which of the following storage options would give the organization the
best chance of recovering data?
A. Encrypted ...
- 33
0
votes
0
answers
87
views
Can you require both a password and a smart card to unlock a bitlocker drive?
I seen you can associate a smart card when you encrypt the drive with bitlocker, but I am not sure if ...
You can unlock with a smart card as an alternative to your password that you set (not the ...
- 140
-3
votes
3
answers
152
views
If all encryption schemes are eventually broken, shouldn't we avoid sending encrypted archives to a remote server?
I need to protect a few gigabytes of private information. I had the idea of encrypting them and placing them in a 7z archive, which I would then upload hourly to a cloud storage provider.
Then I ...
- 75
0
votes
0
answers
47
views
disk or file encryption using the TPM2_EncryptDecrypt2 command of the TPM
Are there any disk/file encryption methods that utilize the TPM2_EncryptDecrypt2 command? All TPM disk encryption tutorials I can find use the TPM to secure the disk encryption key, and not use the ...
- 133