Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

492 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
9 votes
1 answer
1k views

What is the difference between TEE and HSM in Android Pie?

Android has the concept of hardware backed security as TEE and in latest Android i.e., Android Pie devices can have a HSM (Strongbox). What is the actual difference between TEE and HSM? Does ...
SAR's user avatar
  • 199
6 votes
1 answer
579 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
Brian Salehi's user avatar
6 votes
0 answers
507 views

Is there are way to do Per-User Encrypted Samba Storage?

I'd like to address following scenario: Company keeps documents in-house and not in Cloud Documents are stored on Samba Share Sysadmins have access to the storage so they can dump it The point is to ...
Aria's user avatar
  • 2,731
5 votes
0 answers
779 views

What encryption type does Windows Hello use for fingerprint information on Windows 10 latest build?

I've contacted Microsoft support and they said they don't support encryption, which is why I'm posting here. Basically, what I'm wondering is, if a modern laptop has TPM 2.0 enabled and hardware ...
Magnetox's user avatar
5 votes
2 answers
2k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
Teo's user avatar
  • 191
4 votes
0 answers
293 views

Examples of SSH key exchange algorithms requiring encryption-capable host keys

In the SSH spec, Section 7.1, key exchange algorithms are distinguished based on whether they require an "encryption-capable" or a "signature-capable" host key algorithm. If I ...
Fabian Meumertzheim's user avatar
4 votes
0 answers
538 views

AMD SEV equivalent of Intel SGX EGETKEY?

An application running under Intel SGX can invoke EGETKEY to obtain an encryption key from the CPU HW. The same key will be obtained each time the application is run. This allows the application to ...
Stephen Warren's user avatar
4 votes
0 answers
123 views

How can we protect encrypted files and directories from being fingerprinted when stored on online storage services?

Assuming that online storage providers are considered untrusted, if files and directories are encrypted, how can these be protected against fingerprinting? The files are encrypted using rclone's ...
Ryan's user avatar
  • 93
4 votes
0 answers
239 views

What kind of attacks can hardware level memory encryption protect from?

Both AMD and Intel have introduced memory encryption at the hardware level. AMD calls this Secure Memory Encryption (SME), with the Intel version being Total Memory Encryption (TME). What kind of ...
Steve Sether's user avatar
  • 21.6k
4 votes
0 answers
2k views

GPG: how to encrypt using a keyfile? (symmetric)

In Ubuntu this produces a "filename.txt.gpg" file and works: $ gpg --symmetric --passphrase-file keyfile.key filename.txt In debian, I get a popup requesting I enter a password... How do I encrypt ...
user189798's user avatar
4 votes
0 answers
216 views

Encryption data keys in single file at same location

I have an external storage which I am wanting to store encrypted files. Strategy #1: Each file and folder name is AES encrypted with its own data key All data keys are saved into a single datakeys....
James's user avatar
  • 141
4 votes
0 answers
681 views

Android security risk? /cache partition encryption

So I understand Android's Full Disk Encryption only encrypts the /data partition. But if the /cache partition is unencrypted, isn't that a massive security risk? As I understand it, /cache is used for ...
iLovemyiPhone83's user avatar
4 votes
0 answers
2k views

How to differentiate between encrypted and unencrypted Bluetooth traffic while using Wireshark?

I captured Bluetooth traffic between a master vault Bluetooth smart padlock and an iPhone 6s. This was done using a Bluetooth sniffer and the captured traffic was stored to a pcap file. Analysing it ...
Antonio's user avatar
  • 41
4 votes
0 answers
420 views

DPAPI Distributed key manager

I have a number of configuration files and binary data that needs to be stored encrypted on disk. Only the user who encrypted should be able to decrypt the information. So far, I have successfully ...
Tewr's user avatar
  • 91
4 votes
0 answers
907 views

What is the openssl equivalent of using java's KeyPairGenerator?

I have been using java's KeyPairGenerator in order to generate public/private keys within a program so that I can encrypt and decrypt files(also using java encrypt/decrypt methods). I want to be able ...
void.massive's user avatar
4 votes
0 answers
5k views

How to securely store SSN details in a database while maintaining searches?

My question is very similar to this one, but in my situation I do not need to recover the real value. My concern with just hashing the value is that since there's a finite and (relatively) small ...
Lander's user avatar
  • 149
4 votes
0 answers
445 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
user avatar
3 votes
2 answers
386 views

TPM - ECC based encryption / decryption using the public key

Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
TrinityTonic's user avatar
3 votes
0 answers
947 views

Is it possible to encrypt data with a GPG public key that doesn't have the encryption usage flag set?

I have received a public key that does not appear to have the encryption capability enabled: > gpg --list-keys ...
Aaron D's user avatar
  • 200
3 votes
1 answer
250 views

Encrypting links between registered users and their sensitive data

I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database. Furthermore, if a user has multiple pieces of sensitive data, ...
teppo's user avatar
  • 131
3 votes
0 answers
353 views

Best practices for storing long-term access credentials locally in a desktop application?

I'm wondering how applications like Skype and Dropbox store access credentials securely on a user's computer. I imagine the flow for doing this would look something like this: Prompt the user for a ...
Bimba Shrestha's user avatar
3 votes
0 answers
452 views

BitLocker Sleep/Hiberate Settings for DMA protection

The Bitlocker the guidance from Microsoft is to disable sleep states and use hibernate in combination with TPM + PIN for elevated security against cold boot and DMA attacks. Unfortunately this is ...
asdf's user avatar
  • 31
3 votes
0 answers
2k views

How does Veracrypt work?

I’m a layman in security and was trying to understand how hashes and encryption algorithms are used in Veracrypt/Truecrypt. Reading the documentation, this is what I understood (please, feel free to ...
Dux's user avatar
  • 31
3 votes
0 answers
466 views

Cambridge University paper on Android factory reset still up to date?

An answer (Data deleted after encryption - recoverable?) came to conclusions, which triggered some questions for me. Link to the paper: https://www.cl.cam.ac.uk/~rja14/Papers/fr_most15.pdf ...
user205128's user avatar
3 votes
0 answers
437 views

Using asymmetric keys for two factor authentication

Here's what I'm trying to do: Multiple users with different devices will share the same copy of a file which is encrypted on server-side using AES with a randomly generated passphrase, the passphrase ...
Muizz Mahdy's user avatar
3 votes
3 answers
506 views

Encrypt User specific Information without a password

Given scenario: I have an application (NodeJS) running on Heroku, the database is RDS on Amazon and I use Auth0 for authentication. I don't have access to passwords of the users, some users use social ...
Can's user avatar
  • 131
3 votes
0 answers
227 views

macOS Data Protection without FileVault

I'm running macOS 10.14, and have encountered a problem which prevents me from enabling FileVault. As best as I can determine, there are no free and convenient alternatives for full disk encryption, ...
user avatar
3 votes
2 answers
290 views

Encrypted log entries authorization

We have a database table of encrypted log entries, each encrypted entry containing information about the user who created the entry. The entry is encrypted with the encryption key of the particular ...
Tuomas Toivonen's user avatar
3 votes
0 answers
571 views

How does Signal desktop app mitigate QR code login hijacking?

I am trying to implement linking of the desktop app to the mobile counterpart for my project. The assumption is that the mobile app is secure and the desktop app simply needs to link the session to ...
Oleg Dulin's user avatar
3 votes
0 answers
118 views

storing equality and diversity data - is it normally encrypted?

Is it the normative secure practice for databases storing E&D data (ethnicity, for example) on personally identifiable individuals? Assume a system where all other security features are also up ...
David's user avatar
  • 131
3 votes
0 answers
160 views

Is there a secure, anonymous peer to peer matching solution?

I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching. Perhaps to illustrate my question I will use an example. Say I ...
Chukwunonso Arinze's user avatar
3 votes
0 answers
169 views

How can I identify which SCHANNEL events are being generated by a Remote Desktop connection attempt?

I need to check which encryption level is being used for a Windows Remote Desktop session. I found this question, which shows how to enable logging that shows the client handshake and level of ...
Craig Silver's user avatar
3 votes
0 answers
136 views

Prevent developer/owner from seeing user data with insecure API

I am building a chatbot for my university in GroupMe, which very popular there. The bot will, for example, allow users to send messages to their chat groups like /menus (assuming that "/" is the ...
Luke Baumann's user avatar
3 votes
0 answers
141 views

How dangerous is it to transmit the last N bytes of a datagram in plaintext?

I'm developing software for a university satellite project, and am currently working on the communications protocols. Here are the restrictions: Radio packets should be assumed to be no larger than ...
ijustlovemath's user avatar
3 votes
0 answers
3k views

OpenVPN cipher mode of operation: CFB vs CFB1 vs CFB8

I'm trying to understand the possible settings for the cipher in OpenVPN and somehow rank them security wise. Right now I'm stuck at differentiating the modes of operation CFB, CFB1 and CFB8. How do ...
boolean.is.null's user avatar
3 votes
0 answers
172 views

Does hardware encryption fail for jailbroken iOS device?

I know that iOS has a hardware encryption that it encrypts all your data using your passcode when the screen is locked. However, when I jailbreak my iPhone and ssh to the iOS device, I can browse all ...
n3v3rm03's user avatar
  • 143
3 votes
1 answer
655 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
csi's user avatar
  • 153
3 votes
0 answers
384 views

FIPS Compliance with iOS app

Our company is working on getting FIPS validation for the iOS app and is in the initial phase. We have decided to use a private FIPS-certified libraries for using in the crypto modules. I have some ...
Theguy's user avatar
  • 31
3 votes
0 answers
449 views

Older Cell / Smart phones were susceptible to bluesnarfing / bluetooth attacks, Why specifically are smartphones secure from this attack now?

Older cell / smart phones were susceptible to bluesnarfing / Bluetooth attacks, Nokia phones in particular. But now in days, modern smart phone and cell phones that use Bluetooth technology for ...
Keith07304's user avatar
3 votes
1 answer
490 views

Decrypting possibly compromised Veracrypt hard drive

I have a Veracrypt encrypted hard drive, a system drive encryption with the operating system. The laptop is possibly compromised, which is why I can't decrypt it directly on the laptop. I don't know ...
Bob's user avatar
  • 31
3 votes
3 answers
4k views

Securely changing Veracrypt password

How can I change a Veracrypt (master) password efficiently and securely? Based on the answers here, it is not safe to use system --> change password due to various reasons. I cannot simply image ...
jvkbzowtb's user avatar
  • 169
2 votes
1 answer
108 views

What are good data-at-rest encryption strategies for sensitive data?

I need to protect sensitive data by doing data encryption at rest. Context : I have at least the data of 20 app to protect. I want protection from those with legitimate access to the virtual machine ...
loic midy's user avatar
2 votes
0 answers
56 views

Is MacOS encryption as secure if FileVault is switched on after installation?

Regarding turning on MacOS' FileVault after it was not turned on for installation, it says here... If FileVault is turned on later — a process that is immediate since the data was already encrypted — ...
Ian Warburton's user avatar
2 votes
1 answer
229 views

A web browser localy encrypted by default

Some years ago, I've found a web browser which I can't remember the name. It had pretty impressive security standards. For example: Symmetric encryption key (password) is mandatory for saving ...
cryptostudy's user avatar
2 votes
0 answers
98 views

Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?

I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
just_learning's user avatar
2 votes
0 answers
306 views

Cell tower to cell phone encrypted communication

I have done some search here but I can't understand how phones and antennas share the keys used for encryption and decryption. As far as I understand, mobile phones today use LTE i.e 4G (sometimes ...
Mah Neh's user avatar
  • 25
2 votes
0 answers
143 views

How are the values of stored firefox credit cards encrypted? And how does one decrypt those?

While researching about the safety of web browsers I made my own program that can decrypt stored credentials, cookies, and other information of different browsers to see for myself how easy it is. ...
Void's user avatar
  • 21
2 votes
1 answer
1k views

Best practices for storing many certificates and private keys

I am responsible (among many other things) for managing TLS/SSL certificates for a couple dozen or so websites for a large multinational. Some sites are hosted on Apache, some are on IIS. I use ...
Aleks G's user avatar
  • 241
2 votes
1 answer
2k views

Are there any Linux distributions with enabled TPM2 and full disk encryption setups

I have been searching the web to find a Linux distribution, preferrably a rolling release one as I'm otherwise hooked on the concepts in Arch Linux, with automated steps to setup full disk encryption (...
tirithen's user avatar
  • 121
2 votes
0 answers
190 views

Is there any way to de-link a secure messenger (Telegram/Signal/WhatsApp) from phone number?

I understand, that mobile phone verification is probably the most convenient way to validate real users and avoid spam, but those "secure/private" messengers are afterward still bound to ...
T.Todua's user avatar
  • 2,727

1
2 3 4 5
10