Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1 vote
1 answer
59 views

MITM in Tor: Authentication when an Entry node is sending data back to the Client

Diagram: Server -> Exit Node -> Middle Node -> Entry Node -> Client In Entry Node -> Client, how does the entry node authenticate that the receiver is a real client but not a MITM?
user avatar
0 votes
0 answers
29 views

Certificate encryption and hash algorithm [duplicate]

I was creating self-signed certificate with OpenSSL and had to choose encryption and hash algorithm. Are those algorithms used for encryption between client and a server? If not, then what are these ...
user avatar
  • 1
0 votes
1 answer
62 views

VOIP call encryption

Regarding voice over IP, I'm trying to understand how vulnerable it is to someone intercepting one or both sides of the audio. Logically, it seems like there are 3 "legs" to each ...
user avatar
0 votes
1 answer
58 views

PGP "real" encryption with private key

When explaining the concept of signing a message, often it is presented as "encrypting with your private key", so that somebody who has the public key can "decrypt" the signature ...
user avatar
  • 131
0 votes
0 answers
36 views

Best way to encrypt client side data for SaaS inside the web

I am planning a SaaS-solution, where my clients store and save sensitive data on my servers. Security is a big point as it makes a product more trustworthy, so my thought was that the data which I ...
user avatar
1 vote
2 answers
86 views

Which type of Diffie-Hellman does Tor use?

Does Tor use Ephemeral DH, Static DH or Anonymous DH? I have heard that the latter two are not secure so I am worried if Tor uses them.
user avatar
11 votes
3 answers
4k views

Isn't "BIOS reset password" a security flaw?

According to this article Dell Support can help a user to gain access to data after forgetting the HDD password: Once Dell Support has provided the reset password, you enter this when prompted and ...
user avatar
  • 225
2 votes
3 answers
145 views

Why is it important to rotate symmetric keys?

I've read and heard from multiple sources over the years that rotating symmetric keys used to encrypt and decrypt large amounts of data over time (for example all of the network traffic from some ...
user avatar
  • 123
0 votes
1 answer
43 views

Soundex and encryption : good friend?

We are considering using the Soundex algorithm to improve our search capabilities in our app. Our app data are encrypted in the DB. (EAS256) The Soundex result will be stored in clear next to our ...
user avatar
0 votes
1 answer
297 views

TLS ClientHello leaks http Host header

As already discussed on this Platform, TLS Client Hello messages are not encrypted, since they contain "no sensitive data". When sniffing HTTPS requests with wireshark, I can see the Domain ...
user avatar
1 vote
2 answers
88 views

How Google protects and syncs the passwords?

I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
user avatar
  • 21
0 votes
0 answers
48 views

Are hashed passwords transferred to a server for user authentication? [duplicate]

A question I came up with while reading in my information security class. Let's say website ABC which uses username and password combinations to authenticate users and has a user John. When John goes ...
user avatar
  • 1
0 votes
1 answer
75 views

Verify password before decrypting data

I need to verify a password before decrypting the data. My encrypted data is too big and waiting to see if the authentication tag is correct is out of the question. I’m using Argon2id as my KDF. My ...
user avatar
0 votes
0 answers
60 views

Storing encrypted data inside a JSON array in MySQL?

I have the following the situation: I have some data structures which look like this: { id: int name: BLOB password: VARCHAR(80) ... } There it is easy to store the encrypted fields ...
user avatar
2 votes
1 answer
115 views

Static RAM: Detecting presence and wiping?

As I understand from reading another question here, SRAM may be more dangerous than traditional volatile RAM in terms of storing passwords and other sensitive information. I know that when a computer ...
user avatar
  • 39
1 vote
0 answers
129 views

How does Android 12 / Pixel 6 allow data access before encryption key entry?

Following on from Why do mobile devices force user to type password after reboot?, I've noticed that my Pixel 6 Pro can access data after a restart. e.g. WhatsApp messages come through and ...
user avatar
23 votes
7 answers
3k views

Is encryption in transit distinct from end-to-end encryption?

I asked a question about HTTPS encryption as it relates to developing a web app here. On the face of it that question has now been closed twice for not being focused enough, but if the meta discussion ...
user avatar
0 votes
1 answer
41 views

How to properly secure a tcp server/client application

I have developed a multithreaded server/client python application, my next goal is to encrypt the traffic between both parties but I can't tell where should I invest all my research energy in Using ...
user avatar
0 votes
1 answer
205 views

VeraCrypt New Processor TPM Message Issue

I upgraded my processor and now I get this message when starting my computer: We detected a new processor which will change the data/structure of the storage space for firmware TPM. If you did not ...
user avatar
0 votes
1 answer
80 views

Can my ISP or government listen to my Skype calls?

Is the call encrypted with something like HTTPS to prevent a corrupt government (or ISP) from messing with the DNS routing, sniffing, snooping etc? Can my ISP or government listen to my Skype calls? I'...
user avatar
0 votes
1 answer
44 views

How do different secret-key algorithms generate the same data?

How do different secret-key algorithms generate the same data? In the snippet below, I use PBEWithMD5AndDES to produce one key, and PBEWithHmacSHA256AndAES_256 to produce another key, but with the ...
user avatar
  • 3
1 vote
1 answer
84 views

Is it safe to call banks from Skype?

Say, you call Wells Fargo's or Fidelity's customer support number, from Skype. Example number: 1-800-869-3557 You use Skype because you're overseas and because Skype lets you call US numbers for free. ...
user avatar
1 vote
1 answer
135 views

Why should encryption key be rotated after it has been used to encrypt a specific amount of data?

I'm going through OWASP Cryptographic Storage Cheat Sheet and it says: Encryption keys should be changed (or rotated) based on a number of different criteria: (...) After the key has been used to ...
user avatar
  • 155
0 votes
1 answer
44 views

Which is the preferred way of encrypting Personal Identifiable Information?

What is the preferred way to implement personal information encryption / decryption? After some reading, the main options appear to be: Encrypt/Decrypt it at the database level Encrypt/Decrypt it at ...
user avatar
0 votes
0 answers
68 views

Should you use encrypted DNS before connecting to a VPN?

The ISP would still see the IP address of the VPN you're connecting to, but it would not be in plaintext compared to normal DNS from what I understand. Should one even bother or just let it be as it ...
user avatar
0 votes
0 answers
63 views

When the phone breaks and I regret encryption

I believe most new Android phones have full encryption enabled by default, so even if I just download some PDF weather report from the internet, it will sit encrypted on my phone's SSD. Now, suppose ...
user avatar
  • 230
1 vote
0 answers
42 views

Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow

I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs. Decrypting is performed with gocryptfs as follows: PC boots as usual and starts the sddm service I enter my login ...
user avatar
1 vote
1 answer
80 views

Is this encryption method symmetric or asymmetric? When to use symmetric encryption over asymmetric encryption?

I'm new to the whole cryptography thing and I want to implement it in my app to store non-personal user data. I've been trying to get my head around the whole thing by reading articles and questions ...
user avatar
0 votes
2 answers
99 views

How do I delete files securely? [duplicate]

I'm trying to make an app that can encrypt files and decrypt them on demand(for educational purposes) I need a way to: delete the file from where it was before delete the file each time the app ...
user avatar
0 votes
1 answer
42 views

Is there a way for a file/binary/exexutable to verify it's own integrity?

So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my ...
user avatar
1 vote
1 answer
42 views

Asymmetric encryption between a monitoring unit and a tablet device

My task is to find asymmetric cryptography that a private key will be associated with a monitoring unit. The monitoring unit will connect to a tablet device which will show a live feed from the ...
user avatar
  • 13
1 vote
2 answers
64 views

Securely storing password and encryption key on AWS

I have an EC2 Webserver on AWS which has a MYSQL database. The login data is stored on AWS using the Secret Manager. I have added an IAM role for the Server to get access to the password and an ...
user avatar
0 votes
0 answers
67 views

Good practice for generating opaque access-token

Restrictions: Access token will be short lived (2 minutes) Access token will be one-time use only. Given a strong random algorithm, would it be considered good practice to generate an opaque access-...
user avatar
0 votes
1 answer
86 views

Encrypting/Decrypting User Secrets with Password

I am designing an account system that will use salting/hashing to securely store and compare passwords. For now, I'm looking at using bcrypt for password hashing. Somewhere along the way I'll need a ...
user avatar
0 votes
1 answer
187 views

GPG4WIN Kleopatra does not require RSA secret key components to decrypt

I was thinking of using gpg4win to encrypt files I'll upload to cloud storage services. I already use 7-zip so if I just wanted to password protect my files I could have easily done it, but I wanted ...
user avatar
1 vote
0 answers
68 views

Keycloak authentication for application combined with KEK and DEK?

I’m currently in need of the following: I want to use Keycloak for user authentication I want to use the user’s password to derive an encryption key, preferably using PBKDF2. This key will be used to ...
user avatar
  • 129
0 votes
2 answers
91 views

How different ldap implementations are generating random salt?

I am currently generating a salted SHA 256 passwords in the below format $hash = "{SHA256}".base64_encode(hash('sha256', $password . $salt) . $salt) . Using the below libraries of Java ...
user avatar
1 vote
0 answers
45 views

Cold boot attack on NAS

I'm familiar with the concept of cold boot attacks on laptop and desktop computers, where the goal is to find hidden encryption keys in the memory. I also think it's done on certain mobile phones. I ...
user avatar
0 votes
2 answers
66 views

connecting to Windows Admin Center using port 443

I want to use Windows Admin Center, but I don't want to install a SSL certificate. If I were to forward packets from 80 to 443 using firewall rules would they automatically be encrypted?
user avatar
  • 1
0 votes
0 answers
32 views

decryption of message using private key [duplicate]

I don't why we can decrypt the message using our private key if it's encrypted using our public key. If a message is encrypted using my public key, then how can I decrypt it using my private key? It ...
user avatar
  • 1
2 votes
1 answer
133 views

Is this TCP socket encryption and password storage implementations secure enough?

I'd like to know if this communication technique is secure enough against attacks, both on the connection itself and the password-storing procedures. Both the client and the server have access to 2 ...
user avatar
  • 23
0 votes
1 answer
79 views

Preventing Windows from seeing/tampering with linux drive

Is there a way to prevent a Windows 10/11 system to access/modify/delete data from a secondary linux drive? I understand I can encrypt the linux drive, but wouldn't the windows system be still able to ...
user avatar
  • 1
0 votes
1 answer
52 views

Why do we need to connect to a network to be able to read all packets while packet sniffing?

I can't understand much about packet sniffing operation when it's in a network. Well, packets are encrypted with PTK to prevent sniffing from monitor mode but when we are in client mode and we ...
user avatar
1 vote
1 answer
101 views

What are the advantages of using SiriKali vs something like Veracrypt?

So what are the advantages of using SiriKali vs. something like Veracrypt. They both essentially do the same thing correct. I assume Veracrypt would be more secure. What are the differences between ...
user avatar
-1 votes
1 answer
87 views

Encrypting card data at application layer over TLS (MasterCard)

I found an article from MasterCard's blog stating: The transport between client applications and Mastercard is secured using TLS/SSL, which means data are encrypted by default when transmitted across ...
user avatar
27 votes
8 answers
4k views

Is at-rest encryption worth it if the key has to be kept accessible for decryption?

From the way I understand it, at-rest encryption is used to protect data when it's being stored at a datacenter so that if someone manages to get data they shouldn't have, they don't have anything ...
user avatar
1 vote
0 answers
28 views

Why is it not a good idea to simply encrypt the plaintext with the receiver’s public key? [duplicate]

What are some of the risks when encrypting "plaintext" with a receiver's public key? I have been Googling for hours, and been reading in the Computer Security Principles and Practice 3rd ...
user avatar
0 votes
0 answers
168 views

TPM vs TCM - InTune and BitLcoker compliance in China

It appears that TPM is banned in China, therefore, Dell laptops shipped to China are equipped with TCM chips instead of TPM. How secure is TCM? gov backdoors? Wondering how does if devices with TCM ...
user avatar
3 votes
1 answer
128 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
user avatar
  • 33
1 vote
0 answers
69 views

Your opinion on my encryption security concept for my mobile app using Firebase and an external backend server? [closed]

I'm brainstorming a good architecture that allows me to store user generated data from my mobile app securely on my backend server, without forcing the user to remember an encryption password. The ...
user avatar