Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1
vote
2answers
64 views

Check signature of an HTTPS response

So I want to do the following Check the RSA public key of a https server Make a GET request to that server Get a response+signature from the server I should be able to check if ANY reponse+signature ...
0
votes
0answers
36 views

questions about private keys [duplicate]

Say your server has a certificate signed by your root CA (no intermediates for simplicity). Does this mean the private key of the root certificate is used to encrypt the hash of the server ...
1
vote
1answer
124 views

What is the correct way to create a backup copy of a PGP key pair?

I am using GnuPG 2.2.20 to create my key pair. I have successfully created a key pair, now I want to create a backup copy in case of HDD failure. Following the instruction here, I have tried gpg --...
0
votes
2answers
188 views

Staying anonymous vs a Five Eyes adversary?

If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it? The person ...
0
votes
1answer
37 views

IPC Security on Server [duplicate]

An application is running in a customer's environment on a single server and consists of a collection of Windows Services that communicate with each other using (unencrypted) TCP messages. Although ...
1
vote
0answers
160 views

Decrypt AES 128 encrypted file with a key file

I have a file which is encrypted using AES 128 and I have a key file whose size is 48 bytes. How can I decrypt the file using the key file? The key file has no extension, I opened it in notepad and it ...
0
votes
0answers
35 views

Advise a data encryption scheme/model

I have wondered around and am unable to come out with a proper solution for the below requirements, would seek your kind advice. It is similar to Which strategy to encrypt data accessed by multiple ...
0
votes
1answer
42 views

How can I execute a base64 encoded exe stored as a variable, inside a powershell script without writing any files?

Basically if I have exe1 encoded with base64 and I copy that encoded source into a powershell script as a variable. I want to be able to decode it and execute the source exe without writing the exe to ...
0
votes
0answers
44 views

What are the benefits of using Azure RMS with DKE instead of BYOK/HYOK?

I'm trying to understand the Azure RMS solution. From my understanding, files are encrypted with a symmetric key, and that symmetric key + access policies are encrypted using the company key. The ...
1
vote
0answers
118 views

Are Brave Browsers Sync encryption parameters secure enough?

I am considering switching over to Brave and maybe also use it's sync feature for settings, and maybe even passwords if it's good enough. I do use a password generator but out of laziness I happen to ...
0
votes
1answer
64 views

How to encrypt data so only clients can read, but not the server

I am building a system where the clients should be able to communicate with each other. However I want all the data to be hidden from the server where the information is stored in a database. How can ...
1
vote
1answer
133 views

Is it possible to crack a laptop's encrypted hard disk?

In a talk about a lost or stolen laptop, it is said that: even with hard drive encryption, eventually they can crack these secrets But strong encryption is practically impossible to break. For ...
-2
votes
2answers
65 views

Encryption layers

I'm curious, as a green programmer, if one used layers of encryption methods, would this be more difficult to crack or impossible? Example: Layer 1- encryption method 1 "Encrypt this string" ...
0
votes
0answers
29 views

How easy to crack simple, custom algorithm? [duplicate]

Out of curiosity. I am a green as grass programmer coming from other career disciplines and am learning multiple languages right now so play nice and keep it simple please. Interested in simple ...
2
votes
1answer
74 views

Is there some way to verify that what I think I encrypted is actually what was encrypted when I don't have the private key? (PGP) [duplicate]

Let's say that Joe gives his PGP public key to Sue so that Sue can send Joe a secret message. Sue opens her PGP/GPG program, types I'm in love with Joe! and encrypts the message with Joe's public key. ...
1
vote
2answers
69 views

Do I transmit a plaintext password to my PostgreSQL server?

PostgreSQL supports multiple authentication methods, and I think it supports SSL and plaintext connections. How do I find out which authentication method a server uses? I do not have access to the ...
2
votes
1answer
85 views

I am unable to use an RSA key generated with the -aes-256-gcm option in openssl, help

When I run: openssl genrsa -aes-256-gcm -out rootca.key 4096 Then I get the following output: $ openssl genrsa -aes-256-gcm -out rootca.key 4096 Generating RSA private key, 8192 bit long modulus (2 ...
1
vote
0answers
111 views

Why is end-to-end encryption not used in regular web browsing? [closed]

Normal web browsing has slowly been shifting towards HTTPS from HTTP, but this still allows the ISP to view one's traffic. What the downside to using e2e encryption for regular web browsing? Why are ...
0
votes
1answer
70 views

What's the best encryption strategy to go with when everybody needs to be able to write data but only a select people can view it?

I really just need an encrypted support ticket system essentially. The user who writes the ticket doesn't need to be able to view it afterward but a handful of staff need to be able to decrypt the ...
1
vote
1answer
91 views

When is a private and public key given to a user, and why can the private key not get hacked?

Trying to understand assymetric encryption. To my knowledge, it deals with the key management problem by having each user have their own private key and public key. But when is this private and public ...
2
votes
2answers
183 views

If Whatsapp media messages are e2e encrypted, what is the point of storing popular messages on the server?

There is something I don't understand about whatsapp's privacy policy. Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (...
0
votes
1answer
111 views

Did The Wire invent the “Jump 5” cipher?

N.B. Asking this here instead of Movies.SE because I'm wanting to know about the cipher itself and any history, which this site is more suitable for. In S01E05 of The Wire, at around 45:00, it's ...
2
votes
1answer
97 views

Can a SIM card lock be circumvented?

If so, how would one go about that, and realistically, how long would it take? Is there something we can do proactively to make this more difficult? This seems more relevant than ever since we would ...
0
votes
1answer
45 views

Whether TLS session resumption reuse the symmetric keys?

I am learning TLS Session Resumption. What I got is session resumption can reduce 1 RTT for TLS 1.2 by reusing MasterSecret. Both the client and server needn't to run key exchange algorithm. My ...
0
votes
1answer
42 views

How to identify this hashed text and if it encrypted using a key? [duplicate]

I have 2 hashes which I don't remember which type of encryption I used or if i used a secret key. can you help me identify these I will just give all details but not paste the whole hash here. hash1 ...
0
votes
1answer
67 views

Is there use for Windows built-in file/folder encryption if the PC has only one user?

From what I gathered, Windows 10 built-in encryption decrypts file/folder when a specific user logs into Windows. In a PC that only has one user, I want to keep the files encrypted until the user is ...
0
votes
0answers
30 views

Secure memory buffer

We are designing a Python application and we need to "load" encryption secret key in "memory" at the application boot. It can be also an admin pin code. Anyway, just some data. Our ...
1
vote
2answers
83 views

Can the user get the private key from the encrypted and the decrypted data?

Can the user get the private key from the encrypted and the plaintext data or does it make it easier for an attacker?
1
vote
2answers
58 views

Why our key and our plaintext should have a same size in One Time Pad

I was reading Serious Cryptography book. I am a newbie in cryptography field who try to learn as possible as he can. In this book, there is the following section of phrases: For example, if a ...
0
votes
1answer
74 views

Calculate AES-GMAC

I have a symmetric key and I have the data that needs to be authenticated. So one of the solution that I have in mind is to use the AES GMAC. I know there are other MAC's such as HMAC or hash ...
0
votes
0answers
53 views

What encryption protocol is Kleopatra using to protect the private key?

What encryption protocol is Kleopatra using to protect the private key? I checked PGP RFC document and found out different protocols can be used, it's up to the software developer. Has anyone be able ...
1
vote
1answer
88 views

Is it worth using an http proxy?

Sorry for my lack of terminology in the field, that's something I've little (or none any) practical knowledge about. I've browsed similar questions on the security risks of using (web) proxies, but ...
1
vote
0answers
58 views

How do you rate proposed LoRa joining scheme, pairing based encryption. Modified version of OTAA

I'm developing a protocol for private LoRa (Any RF by abstract) product, It consists of a gateway and a sensor node. I don't use LoRaWAN. I want the user to dynamically 'pair/link' one to multiple ...
2
votes
2answers
184 views

Can your internet provider monitor your data (passwords, etc?)

Was typing in my password into an HTTPS website when I started to wonder if my home WiFi (whether a neighbor could have hacked into and monitoring it) is secure. When I type in Username123 Password123 ...
2
votes
1answer
71 views

how message authentication code share keys?

How are secret keys shared between receiver and sender, especially when we want to have confidentiality that sender and receiver are using two keys, one for MAC algorithm and one for encryption and ...
1
vote
1answer
111 views

Why does Kaspersky anti-virus not consider this executable as malicious?

I was trying to learn file I/O and related function in C, and thus tried to create a baby-version of a virus. Following is the exact code: #include <stdio.h> #include <stdlib.h> int main(...
0
votes
2answers
81 views

Private key Proof of Ownership [closed]

Given 2 entities, A and B: A has a public key( x ) and a private key( x* ). B has a A's public key hash( let's call it h(x) ). A has to prove ownership of x* to B. How could this be achieved, ...
0
votes
1answer
62 views

SSH in AWS vs SSH on GitHub [closed]

This is not much of a technical but more of a practical question. Both in AWS-EC2 instance and GitHub repos I had to generate a cryptographic key pair to encrypt data sent over SSH tunnel. For AWS the ...
0
votes
1answer
65 views

Is Array.Clear() in C# suitable for zeroing sensitive byte arrays?

Is it worth calling Array.Clear() to clear sensitive byte arrays such as those containing encryption keys? It's not clear whether this is worth doing since the language has a garbage collector.
1
vote
1answer
79 views

E2E Encrypting User Data [closed]

I'm building an end-to-end encrypted web-app. I plan to use ECDH + P256 curve for generating private/public keys. The private keys are saved onto the user's computer and the public keys are stored on ...
0
votes
0answers
26 views

Does this seem like a secure way to transfer wireless data from a keyboard to a host?

I'm making an adapter to convert a wired keyboard I have into a wireless keyboard. I am going to use nRF2401 modules for wireless with some STM32 microcontrollers. I'm trying to come up with a method ...
1
vote
1answer
73 views

Difference between Symmetric and Asymmetric encryption

I was watching this short video and apparently every time users open an HTTPS connection, a handshake between client & server happens. They interchange the public keys, keeping the private keys. ...
0
votes
0answers
47 views

What can my employer see if I’m on my email on my personal phone [duplicate]

Basically I have the outlook app on my phone, if I connect to work WiFi what can they see? For example the emails in my inbox can all of them be read? Or the emails I have sent from let’s say my home ...
0
votes
0answers
49 views

How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)

I have a private file encryption project that I'm working on that currently uses Encrypt-then-MAC. However, I've been looking at age and the article that's referenced in the spec that discusses ...
0
votes
1answer
78 views

RestApi Libsodium SealedBox end-to-end request encryption scheme

I am making an API that uses the following steps for encryption. All of this is implemented using libsodium. First of all the client has to make an initial request to the server for getting his public ...
2
votes
1answer
69 views

Is native OpenZFS (on FreeBSD) block-level encryption secure?

I am considering using OpenZFS on FreeBSD. I am not quite sure how secure native OpenZFS encryption is? If somebody steals my server and the disks, is he able to decrypt the files? In a Discord room I ...
1
vote
2answers
142 views

Is the following a secure method for file encryption?

So the goal is to use AES-CBC-256 to encrypt the data in a file. To derive the AES key and IV pbkdf2 will be used to generate a 384 bit output using a given password and salt, where the first 256 bits ...
2
votes
1answer
118 views

How can Bitwarden claim it cannot access your passwords if the vault password is the same as the web account password?

Bitwarden claims that it is more secure than traditional cloud password managers (such as Google) as it only stores the encrypted version of the passwords database. But for some reason the password ...
0
votes
1answer
49 views

key escrow vs secure storage(software/TPM/HSM)

From the definition of key escrow (a method to store important cryptographic keys providing data-at-rest protection), it sounds very similar to that of secure storage which could be basically software-...
1
vote
1answer
40 views

How am I supposed to use a revocation certificate, and can there be multiple revocation certificates for the same private key?

I just generated a revocation certificate for my key. Unfortunately I don't fully understand the concept. Here are my questions: How exactly am I supposed to use it? Suppose for example that my ...