Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
5,851
questions
1
vote
2
answers
123
views
Recommended temporary key size for communication
What I'm going to do is use AES-256 encrypted network communication to agree upon a pseudo-random key for further communications between two peers, so that every "session" utilizes a ...
- 209
0
votes
0
answers
12
views
what is the alternative of hardcoded secret [duplicate]
I have a class in the code that does some sort of encryption, and to do so there is a hardcoded key in the code. After reviewing the code by a security expert, he raised this as an issue, highliting ...
0
votes
1
answer
92
views
Connect to corporate wifi with personal phone - decrypt https?
Someone asked regarding wifi yesterday but can't find the post anymore.
When connecting to corporate wifi with my personal iPhone for first time, I am asked to trust a "Root CA". However, I ...
0
votes
1
answer
57
views
Encrypted Note Password Confirmation
I'm creating a pastebin-style application which stores notes and has the following options:
Ephemeral, where it is deleted as soon as it is read
Encrypted, where the content is encrypted before being ...
- 135
0
votes
0
answers
31
views
Make use of encrypted or anonymous data in database [duplicate]
As an answer to the following question, I read the idea of encrypting user data with 2 keys based on random generation and the user password:
Store encrypted user data in database
But could anyone ...
- 1
1
vote
1
answer
71
views
Key Hash With Securely-Optimal Setting : For Encryption vs For Password
Do you have to make a key hash with securely-optimum setting (eg. 100MB memlimit, 3 opslimit) for encryption ?
So I'm making a text encryption function with javascript, using XChaCha20-Poly1305 and ...
1
vote
0
answers
96
views
Encryption Reccomendation for Specific Borg Backup + Rclone Scenario
I currently use Borg backup to make backup repositories of my system data on a local drive. I also use Rclone to transfer the repository to a Backblaze B2 cloud storage bucket.
Borg can create ...
- 11
0
votes
1
answer
75
views
How to provide signature for a thin client app?
If I have a Java thin client app that connects to a server, and I want to protect my client from a malicious use, so I want to implement a sort of signature.
Now the struggle is, if I want to sign the ...
4
votes
3
answers
1k
views
Derive a key (and not store it) from a passphrase, to be used with AES
This is more of a request of auditing my approach, thus asking here might not the best way, and I apologize for that, but I really don't know how to otherwise talk to cryptography experts. I have some ...
- 141
1
vote
0
answers
68
views
Is it bad practice to store passwords in a JWE? If so, why?
First of all, I know that passwords generally do not have to be stored in a JWT or JWS since the token in itself can be used to authenticate. My circumstances are very specific though.
In my program, ...
- 11
0
votes
0
answers
81
views
How is client side JWT signature validation beneficial from a security perspective?
I’ve been reading about how clients can verify JWT signatures using a public key provided by the server. I’m struggling to understand how this solves any issues.
The only attack I’ve seen which this ...
- 11
0
votes
0
answers
243
views
Bitlocker TPM + PIN vs password without TPM [duplicate]
I keep reading how it's best to use Bitlocker's full disk encryption with a TPM + PIN instead of just a passphrase twithout a TPM but I've been wondering why.
Assuming that a very strong password is ...
-4
votes
2
answers
373
views
Method of cryptography that doesn't need encryption key for decryption
Is there a method of cryptography that doesn't need the encryption key for decryption?
I thought public-key cryptography would work, but both the private and public keys are needed for decryption.
...
- 1
0
votes
0
answers
86
views
What is encryption in Mifare Classic?
We are designing a micro-payment application.
For some financial reasons, we can't go with DESFire cards. We are thinking then about using Mifare Plus or Mifare Classic.
Our use case is that a client ...
- 101
1
vote
0
answers
82
views
How can I encrypt files in a file transfer website? [closed]
I am a complete beginner and have almost no knowledge of encryption.
I have a file transfer website that encrypt the files before saving them in the server then it decrypts the files to be ready to ...
1
vote
0
answers
147
views
How can I encrypt files securely in my website?
With Django, I'm doing a file transfer website. One use will upload a file and then the recipient will download the file.
I want to encrypt this file securely so that the encryption key is not stored ...
0
votes
1
answer
46
views
Is create a key to access resources than send it to client instead of login/password system , a good idea?
I would like to make a key/string/token encrypted string to send it to the user via email.
This encrypted KEY would have encrypted data (resource id) and would be stored in the database along with ...
- 1
0
votes
1
answer
53
views
Randomly shuffle a larger key based on the IV to make the private key unique?
Suppose you have a larger secret key than you need, e.g. 512 bits for a 128 bit symmetric encryption algorithm. For something like AES-GCM the IV is random, unique, and public. So both Alice and Bob ...
- 115
0
votes
0
answers
73
views
Can I send confidential information in plain text via an HTTPS POST method?
I have a web app that collects user SSN and driver license number. A POST API via HTTPS send the data to the server. Can I use plain text to transfer the data? Is it safe enough? Is it in accordance ...
0
votes
0
answers
38
views
Are X.509 certificates tied to a particular operation [duplicate]
I am looking to create a X.509 certificate to encrypt a payload (plaintext) (using Hybrid encryption) and send it across to a server. Can I create a SSL/TLS X.509 certificate and use that to do the ...
- 1
0
votes
1
answer
362
views
LUKS brute force risk?
If a person finds an old hard drive that was partially overwritten and let's say 1GB of that wasn't and was formerly used for part of a LUKS encrypted partition, what is the risk that such data, which ...
- 1
0
votes
1
answer
262
views
How to decrypt ECDSA_secp256k1 private key from PEM format generated with OpenSSL
I'm trying to decrypt an encrypted ECDSA_secp256k1 private key generated using the OpenSSL CLI command openssl ecparam -genkey -name secp256k1 | openssl ec -aes-128-cbc -out ecdsa_priv.pem but I want ...
- 3
0
votes
1
answer
220
views
Is a leaked encrypted password more secure than a leaked hash?
Encryption tech is obviously intended to secure things that we want to be private over an insecure medium. When I log into a site for example, my password is transmitted over HTTPS, hashed by the ...
- 371
1
vote
1
answer
101
views
How to recover data that was encrypted with a revoked or expired key? [closed]
Do you know any processes for recovering data which has been encrypted with a revoked or expired encryption key after the encryption key becomes invalid?
- 11
0
votes
0
answers
104
views
Management of CVK key in Key Block format
I use a Thales PayShield 10K with a LMK KeyBlock 3DES. I have to send a CVK Key to a Scheme for the valorization of CVV2 value. Now, in my envorinment i generated a CVK Key with "Key Usage"= ...
- 11
7
votes
1
answer
151
views
Anonymity in initial Key exchange in onion routing
Maybe I will be wrong, please correct me and at the same time answer my question. I know the keys are exchanged between client and Tor relays through circuit extension requests (other than first relay)...
- 71
1
vote
1
answer
179
views
Will it ever be possible to functionally get the encrypted data off of an iphone in recovery mode?
Apparently the data encrypts until the passcode is entered, but my phone (close to 3,500 recordings of my original music) won't boot up. I dropped it and it went into a boot loop then went into ...
0
votes
2
answers
1k
views
openssl aes-128-cbc can be decrypted using different IV from encryption
openssl AES-128-CBC can be decrypted with a new IV different than the IV from encryption.
It seems that IV does not change the cipher too much as long as they share the same key.
I have an example ...
- 9
0
votes
0
answers
118
views
Advice on encryption setup
I've been trying to get a reliable, and decently secure setup on a device for a little while now, and I feel like I may be overthinking some things but I am unsure.
Just to clear things up, this is ...
- 153
0
votes
1
answer
172
views
Feedback wanted regarding how secure this encryption/decryption is
I am creating a Password Manager and I wanted to create a JavaScript function to encrypt/decrypt data in the client-side, then I will be saving the only the encrypted data in MySQL Server. To encrypt/...
- 9
1
vote
1
answer
132
views
What root directories should be encrypted on a Linux system?
It is said that one cannot simply encrypt their home directory/partition because the system will often store sensitive data elsewhere in the system which would not be encrypted. This makes me wonder ...
- 153
2
votes
1
answer
524
views
PGP key pair - How to set up for multiple users to decrypt messages with Kleopatra
This is my first project of this nature, and I am hoping this is a basic use case for PGP encryption. Please forgive my ignorance!
There is a server being configured by a service provider (SP). The SP ...
- 123
2
votes
4
answers
163
views
Using FIX over TLS, is there a need to sign FIX mesages?
We have 2 servers communicating, server A (a server that I own), and server B (server on the internet that I trust). I get some info from server B, which are FIX messages (https://en.wikipedia.org/...
1
vote
1
answer
214
views
What is the effect of salt and no. of rounds in mkpasswd encryption?
I'm currently trying to understand how salting and no. of rounds work using mkpasswd. These are the commands that I have been experimenting around.
cp@cp-vm:~/Asg2_Task1b$ time mkpasswd -m sha-512 ...
- 11
0
votes
2
answers
118
views
Does it make any sense to encrypt data to be uploaded to an already encrypted cloud such as NordLocker?
Let's suppose one wants so store valuable data (e.g. a Bitcoin seed) in an encrypted cloud such as NordLocker. Would it make any sense that such person encrypts this data (offline) first with his/her ...
- 123
4
votes
4
answers
753
views
Using hashed trigrams to search over encrypted data
For practice, I write let's call it a notebook app that stores users' notes in AES-encrypted form. For encryption, I use a password-based intermediate key technique as described here. Actually, the ...
- 63
1
vote
0
answers
104
views
Banking site POST data obfuscated. Why?
I am logged in to my banking site and I see this kind of form POST data in the Developer tools of Chrome:
accountNo: removed for security reason
branchCode: removed for security reason
fromDate: ...
- 11
0
votes
1
answer
112
views
Which kind of data breaches or risk can happen if there is no virtual/physical disk encryption
There is an Azure-based internal database server and is not public-facing. There is another front-end application. A specific user group can connect with a VPN. There is no encryption applied at the ...
0
votes
0
answers
270
views
Is it possible to get krbtgt hash from TGT ticket?
As you know, during a kerberoasting attack, we can intercept the TGS ticket and use brute force tools (john the ripper, hashcat) to find out the password of the service accounts that signed the TGS ...
3
votes
2
answers
391
views
TPM - ECC based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 271
0
votes
3
answers
315
views
Password managing apps seem to have access to my passwords
Keeper used to be free so I had stored most of passwords on that app a few years ago from a past device. When I tried to access the passwords after five years, the app had turned into a subscription ...
0
votes
0
answers
17
views
Can an attacker sniff the encryption details when connecting to a VPN? [duplicate]
I thought I would be protected from sniffing if I use a VPN, even in a setting where my traffic is going through a «man-in-the-middle» either by ARP poisoning or an evil twin attack.
Now I was told, ...
- 101
0
votes
0
answers
34
views
Which is preferable compress and encrypt or just encrypt and no compression in purely security perspective and not in resources or efficiency? [duplicate]
I want to know what attack am I exposed to if I implement one of the two method. I'm pretty sure both of them are not 100% fool-proof and both of them are expose to traffic-analysis attack if I do ...
- 1
1
vote
0
answers
150
views
Are Android Bluetooth file transfers encrypted?
Suppose I pair two Android phones together using Bluetooth and transfer a file from the first phone to the second by sharing the file using Bluetooth. Does Android encrypt the file transfer so that no ...
- 793
0
votes
2
answers
523
views
What is a proper way to prevent parameter tampering and to make parameter secure
I'm developing a HTTP web server. I've used HTTPS as the protocol between client and server but I know that HTTPS can't prevent parameter tampering.
As we know, we can set parameters in URL, in HTTP ...
- 341
0
votes
1
answer
66
views
are files sent in a TLS channel signed? [duplicate]
I have 2 endpoints that are exchanging data (FIX messages), and the originating endpoint is genrating the fix files are sending them on an ecrypted channel (TLS or Stunnel). In a security audit, it ...
-1
votes
1
answer
212
views
Are the video calls made in a 3G/4G network encrypted end-to-end?
When I make a video call through a cellular GSM/4G network, is there any end-to-end encryption? If yes, what kind of algorithms and CPUs are used?
- 256
0
votes
1
answer
107
views
Security of using Yubikey to derive Diceware password?
I bought a new Yubikey, and am currently setting it up to use on my desktop PC. Previously the PC was secured with password only, and I'd like to use the Yubikey as an alternative: instead of using ...
- 163
1
vote
0
answers
34
views
How should an argon2 hash be stored? [duplicate]
Given the following argon2 hash
$argon2id$v=19$m=65536,t=32,p=8$mJmKA5qamzXOPJZYw4wCEUKY$COkMH0RckaZ/3bhYCdCQjLuzoLKxcAmk4TzmHRRgTQ8
How should the hash be stored in a database? From the answers of ...
- 11
0
votes
0
answers
82
views
Why does Firefox use unsecured port 80 to download certs? [duplicate]
When firefox (v111 2023) is opened for the first time it connects to ocsp.digicert.com on port 80 in cleartext. Isn't this a terrible security vulnerability. Can someone help me understand why this ...
- 1,515