Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0
votes
0answers
30 views

Secure memory buffer

We are designing a Python application and we need to "load" encryption secret key in "memory" at the application boot. It can be also an admin pin code. Anyway, just some data. Our ...
1
vote
2answers
84 views

Can the user get the private key from the encrypted and the decrypted data?

Can the user get the private key from the encrypted and the plaintext data or does it make it easier for an attacker?
0
votes
1answer
91 views

Calculate AES-GMAC

I have a symmetric key and I have the data that needs to be authenticated. So one of the solution that I have in mind is to use the AES GMAC. I know there are other MAC's such as HMAC or hash ...
1
vote
2answers
61 views

Why our key and our plaintext should have a same size in One Time Pad

I was reading Serious Cryptography book. I am a newbie in cryptography field who try to learn as possible as he can. In this book, there is the following section of phrases: For example, if a ...
0
votes
1answer
78 views

Storing Bob encrypted data, and send them to Alice (who must be able to decrypt the content)

I need to develop a website where a user (Bob) send text, image, or video content to my website. After some time, I need to send this data to another user of his choice (Alice). I want to encrypt user ...
1
vote
1answer
80 views

E2E Encrypting User Data [closed]

I'm building an end-to-end encrypted web-app. I plan to use ECDH + P256 curve for generating private/public keys. The private keys are saved onto the user's computer and the public keys are stored on ...
0
votes
0answers
56 views

What encryption protocol is Kleopatra using to protect the private key?

What encryption protocol is Kleopatra using to protect the private key? I checked PGP RFC document and found out different protocols can be used, it's up to the software developer. Has anyone be able ...
0
votes
1answer
451 views

How to decrypt sensitive information with a token and a password

In a web app, it's common practice to encrypt sensitive information against a user's password. In this scenario, what's how would you access/encrypt/decrypt that information using token based ...
1
vote
1answer
464 views

Postfix + MySQL ENCRYPT() encryption method change

I already have my mail server (postfix, courier, mysql) and roundcube as my webmail client, Encrypt() is the current password encryption function, Is there a way to change the default password ...
7
votes
1answer
409 views

Enterprise message bus encryption

I'm contemplating using Amazon's Simple Queue System as the basis of an enterprise message bus. According to Amazon, the contents are not encrypted, which means the application(s) will have to handle ...
1
vote
1answer
96 views

Is it worth using an http proxy?

Sorry for my lack of terminology in the field, that's something I've little (or none any) practical knowledge about. I've browsed similar questions on the security risks of using (web) proxies, but ...
0
votes
1answer
227 views

Public / Private Key Cryptography for offline systems

Are there any best practices around distributing an encrypted package to multiple end user systems, specially if the end system are offline ones, in context of asymetric cryptography? Is it a must to ...
2
votes
2answers
191 views

Can your internet provider monitor your data (passwords, etc?)

Was typing in my password into an HTTPS website when I started to wonder if my home WiFi (whether a neighbor could have hacked into and monitoring it) is secure. When I type in Username123 Password123 ...
0
votes
1answer
451 views

Encrypt long text with 2048 bits

I'm following advice from here about how to encrypt a long text in Java. As encrypting a long text directly using a 2048 bit key is not possible, the advice is to create a 128 bit key encryption key, ...
11
votes
5answers
8k views

If I send a fax from an unsecure endpoint to a secure endpoint, is the data secure?

I am very technical, but I do not know much about fax. I was told to send a fax to somebody with some very private information, and not to worry because they had a secure fax line. That's all well ...
7
votes
2answers
12k views

Securely generate and store public/private keys on Android

I am making a web application that distributes data encrypted with the public keys of its clients. At this moment this is working for dedicated devices which I distribute myself. Before they are ...
1
vote
1answer
80 views

Signing and encrypting with pairs of keys based on discrete algorithms

In case I've generated pair of keys (public and private) for RSA, I'm able to use it both for signing and encrypting. Is the same statement true also for pairs of keys based on discrete algorithms?
4
votes
1answer
148 views

Attacks on RSA without knowledge of either key

All attacks on RSA seem to require knowledge of at least the ciphertext and the public key. However, has there ever been any evidence of an attack which simply uses a sufficiently large number of ...
11
votes
3answers
4k views

How long should zip encryption password be for it take 10 years to crack?

I am using zip 3.0.0 on macOS High Sierra and Ubuntu. Here is my zip version on macOS: $ zip --version | head Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license. This is ...
2
votes
1answer
78 views

how message authentication code share keys?

How are secret keys shared between receiver and sender, especially when we want to have confidentiality that sender and receiver are using two keys, one for MAC algorithm and one for encryption and ...
9
votes
1answer
2k views

How does full memory encryption in newer processes protect against DMA attacks?

Upcoming Intel CPUs have TME, current AMD processors have SME. These are full-memory encryption techniques to protect against physical attacks such as cold boot attacks. Both support encrypting the ...
1
vote
1answer
128 views

Why does Kaspersky anti-virus not consider this executable as malicious?

I was trying to learn file I/O and related function in C, and thus tried to create a baby-version of a virus. Following is the exact code: #include <stdio.h> #include <stdlib.h> int main(...
6
votes
2answers
9k views

I am always Hibernating my System, is there any risk for my Encrypted drive with BitLocker?

I am Always Hibernating my Laptop, for faster booting, I encrypted sensitive drive by BitLocker, what if my Laptop stolen and attacker knew that it was in hybernate mode, can he decrypt my hard?
0
votes
2answers
86 views

Private key Proof of Ownership [closed]

Given 2 entities, A and B: A has a public key( x ) and a private key( x* ). B has a A's public key hash( let's call it h(x) ). A has to prove ownership of x* to B. How could this be achieved, ...
1
vote
2answers
680 views

Encryption - how to secure files - decrypting exposes them on SSD

Let's say I have an encrypted file. Now I decrypt it but since my computer only has SSD, i decrypt it on the SSD drive. Say, I make changes or I finish using the decrypted file so I encrypt it again. ...
1
vote
1answer
172 views

Why doesn't the PIN become part of the encryption key in bitlocker with TPM?

I have read here that if you choose TPM + PIN protection the PIN does not become part of the key, it is simply used by the TPM as an additional security measure. It doesn't make sense to me, it would ...
8
votes
3answers
1k views

Is There Any Risk When Visiting Websites Without Secure Connections If You Don't Enter Personal Info?

Sometimes when I click on a link to a website, from google search, etc., I get a warning that says "Your connection is not private. Attackers may be trying to steal your personal info", and makes me ...
7
votes
3answers
7k views

File security when encrypting files directly with the openssl command / and what about SHA1 hashing password first?

I've been using this command to encrypt files for a while now: openssl aes-256-cbc -a -salt -in secrets.txt -out secrets.txt.enc Then I type in a password. Can someone tell me, roughly speaking, ...
0
votes
1answer
69 views

SSH in AWS vs SSH on GitHub [closed]

This is not much of a technical but more of a practical question. Both in AWS-EC2 instance and GitHub repos I had to generate a cryptographic key pair to encrypt data sent over SSH tunnel. For AWS the ...
13
votes
6answers
7k views

Truly deniable encryption

What tools can be used to make truly deniable encryption? Suppose, authorities can use any force to make you open your passwords. Truecrypt can have only one hidden container, which means that ...
1
vote
1answer
200 views

Server pagination with key in response to fetch next page

I want to introduce pagination in one of my server endpoints. The endpoint will have an option to include in the parameter the last index of the previous page, and if included, the "page" returned ...
46
votes
5answers
58k views

openssl: recover key and IV by passphrase

A large amount of files were encrypted by openssl enc -aes-256-cbc -pass pass:MYPASSWORD Openssl should derive key+IV from passphrase. I'd like to know key+IV equivalent of that MYPASSWORD. Is ...
21
votes
3answers
4k views

Does knowing the file type of an encrypted file make it easier to decrypt?

If I encrypt, say, a .pdf file then does knowing that it's a .pdf make it easier to decrypt? i.e. could the file's well-known structure act as a predictable part of the encrypted bytes?
3
votes
1answer
1k views

Bitlocker lock drive on standby or switch users

Is it possible to autolock a drive with Bitlocker when the laptop goes on standby or sleep mode? Or when the user is changed? I want the drive to be accessible only by one user.
0
votes
1answer
33 views

What is the NIST/FIPS publication process? How long does it usually take for drafts to become final?

I'm specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I'm curious what the process actually is. Is it all internal ...
1
vote
1answer
778 views

PGP encryption for the server based app

Here is context: I am using PGP to encrypt messages in a chat web app. After going through some articles, I get brief idea how PGP works and here is how I am doing it with openPGPJs : Client(web ...
0
votes
1answer
167 views

pki infrastructure for REST API

My question is based on to secure REST API's. We have to publish a REST API and we want only certain consumers to consume the API. I was thinking of one way is to use asymmetric encryption. The steps ...
0
votes
0answers
26 views

Does this seem like a secure way to transfer wireless data from a keyboard to a host?

I'm making an adapter to convert a wired keyboard I have into a wireless keyboard. I am going to use nRF2401 modules for wireless with some STM32 microcontrollers. I'm trying to come up with a method ...
5
votes
1answer
318 views

GSM - Implementing Cipher Mode Command on YateBTS

I've been studying on Yate & YateBTS source code for a while, and I was wondering why there is no ciphering mode implementation in the source!? I use the combination of BladeRF x40 FPGA and ...
2
votes
1answer
118 views

Encrypting links between registered users and their sensitive data

I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database. Furthermore, if a user has multiple pieces of sensitive data, ...
1
vote
1answer
75 views

Difference between Symmetric and Asymmetric encryption

I was watching this short video and apparently every time users open an HTTPS connection, a handshake between client & server happens. They interchange the public keys, keeping the private keys. ...
0
votes
0answers
47 views

What can my employer see if I’m on my email on my personal phone [duplicate]

Basically I have the outlook app on my phone, if I connect to work WiFi what can they see? For example the emails in my inbox can all of them be read? Or the emails I have sent from let’s say my home ...
0
votes
0answers
50 views

How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)

I have a private file encryption project that I'm working on that currently uses Encrypt-then-MAC. However, I've been looking at age and the article that's referenced in the spec that discusses ...
0
votes
1answer
84 views

RestApi Libsodium SealedBox end-to-end request encryption scheme

I am making an API that uses the following steps for encryption. All of this is implemented using libsodium. First of all the client has to make an initial request to the server for getting his public ...
8
votes
2answers
8k views

Using RSA with 3DES instead of plain 3DES. Does it make sense?

I have a large legacy code. Currently it is using 3DES encryption for a network based application. It encrypts data packets with a main key. This key is used to encrypt and decrypt (symmetrical). And ...
53
votes
4answers
93k views

Why would I ever use AES-256-CBC if AES-256-GCM is more secure?

I guess the gist of my question is: Are there cases in which CBC is better than GCM? The reason I'm asking is that from reading this post by Matthew Green, and this question on cryptography stack ...
2
votes
1answer
95 views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
32
votes
2answers
5k views

When could 256 bit encryption be brute forced?

Assuming quantum computing continues to improve and continues to perform like this: ... quantum computer completes 2.5-billion-year task in minutes is it reasonable to expect that 256 bit encryption ...
0
votes
1answer
71 views

key escrow vs secure storage(software/TPM/HSM)

From the definition of key escrow (a method to store important cryptographic keys providing data-at-rest protection), it sounds very similar to that of secure storage which could be basically software-...
2
votes
1answer
154 views

How can Bitwarden claim it cannot access your passwords if the vault password is the same as the web account password?

Bitwarden claims that it is more secure than traditional cloud password managers (such as Google) as it only stores the encrypted version of the passwords database. But for some reason the password ...

1
3 4
5
6 7
108