Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
1
vote
0answers
74 views

GPG passphrase and secret key export [closed]

Assume that I have a GPG secret key Sk guarded by a passphrase and that I store the key in a safe in case a thief steals my laptop. The safe is itself reliable and secure. Assume also that I am likely ...
0
votes
2answers
45 views

Securely Connect Employee PC to Business Private Network

I've recently become the "tech guy" at a startup, and am tasked with standardizing our hardware infrastructure. Further more, I choose how employees working from home will connect to ...
32
votes
2answers
5k views

When could 256 bit encryption be brute forced?

Assuming quantum computing continues to improve and continues to perform like this: ... quantum computer completes 2.5-billion-year task in minutes is it reasonable to expect that 256 bit encryption ...
1
vote
1answer
102 views

Why there is a need for a master key?

According to this source about TLS, there are 3 stages (I'm over simplifying): Set up. Server client hello and select TLS version + Cipher Server Sends. The server sends Certificate = Public Key + ...
0
votes
0answers
41 views

Asymmetric Encrypted Container

I'd like to set up a remote backup for my PC. I want to have it run at scheduled times, encrypting the data locally and then transmitting it to the server. I'd like to use something popular and open ...
0
votes
0answers
25 views

Seamless Key Management with Key Management Systems?

I'm keeping it vague on purpose so that it can help other cases as well. Goal The goal is to store information that is encrypted on client side and then delivered to the database. Server should never ...
0
votes
1answer
65 views

Does HTTPS mean that packets can't be read by intermediaries (like listeners at a VPN node, for instance)? [duplicate]

Say I'm using a VPN to talk with a server, and Bob is eavesdropping for packets at the VPN. Basically a special kind of man-in-the-middle attack. If I'm using HTTPS, how clever would Bob have to be to ...
0
votes
1answer
78 views

Storing Bob encrypted data, and send them to Alice (who must be able to decrypt the content)

I need to develop a website where a user (Bob) send text, image, or video content to my website. After some time, I need to send this data to another user of his choice (Alice). I want to encrypt user ...
0
votes
0answers
42 views

Where to start with HIPAA Compliance?

I am trying to build an open-source EHR system with a database to store patients, doctors, and hospitals' information. I can design the database and build the actual system with the basic security in ...
18
votes
4answers
4k views

Microsoft Word to secure stored data

I understand the purpose of Microsoft Word is not to store secret information. However, I would rather spread my secret information between a Password Manager and a Word document, each of which has ...
3
votes
1answer
88 views

Why can SSH negotiatie two different encryption and authentication algorithms?

I recently found out, that according to the RFC, SSH can negotiate two different cipher (and MAC) algorithms for server-to-client-encryption and for client-to-server-encryption (check section 7.1. for ...
1
vote
2answers
87 views

Encrypted data at rest when decrypted

I was reading about encryption and had a question about it in general. If I have a laptop with an encrypted SSD which I decrypt on boot up, it means it is all in plain text/data right? If I do a hard ...
2
votes
1answer
46 views

Tunnel between two applications, one of them is a 3rd party app

I have written an application, that calls a 3rd party application with process.Start(). Inside the Arguments I pass needed credentials. like so: proc.StartInfo.Arguments = $"-c: -h: -x: -m:{...
0
votes
0answers
24 views

TLS with only server certificates [duplicate]

Up until now, I believed that TLS authentication and encryption can only be achieved when both the client and server exchange certificates with each other initially? Now I am seeing an example in ...
98
votes
5answers
48k views

What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?

The expensive one: https://www.dustinhome.se/product/5010873750/ironkey-basic-s1000 The cheap one: https://www.dustinhome.se/product/5010887912/datatraveler-100-g3 Over 14,000 SEK difference in price. ...
0
votes
0answers
47 views

How to deal with new clients in a hybrid encrypted database?

I'm working on a private project and I'm not really sure about hybrid encryption. I am not a security expert but just a student. Background: I'm working on a project that uses couchDB as a database in ...
2
votes
1answer
117 views

Encrypting links between registered users and their sensitive data

I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database. Furthermore, if a user has multiple pieces of sensitive data, ...
0
votes
0answers
214 views

How secure is LUKS encryption?

I have encrypted a hardsik with a 12 charachter random alphanumeric passwrod using LUKS encryption on Ubuntu 18.04 on a 2.5" SATA disk partitioned with ext4. I'm wondering how secure is such ...
1
vote
1answer
75 views

Question regarding data encryption/decryption and sharing said keys with third party's

At work we have a pretty complex problem(for me at least) and I have no idea what a fitting solution would be. To give a bit of context, the company I work for is a data processor/provider for big ...
1
vote
0answers
38 views

How secure is email now? [duplicate]

When I did my degree ~20 years ago, the contents of an email were described as being "as secure as a postcard". Since then, HTTPs has become standard for web browsing and the absence of ...
1
vote
2answers
343 views

is this a good practice for storing private keys?

I'm working on a centralized exchange for cryptocurrencies. the approach that I'm taking for some reasons is to create an account(private key) per user inside platform. so these accounts should be ...
0
votes
1answer
59 views

Backup on a distant dedicated server, such that even if someone gets root / hacks my distant server, they cannot read the data

Let's say we have: a local computer (Windows or Linux) a distant dedicated server with 2TB storage, running Linux I'd like to do a backup my local computer's data folder (1 TB) to the distant server ...
0
votes
0answers
32 views

Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?

Assume we use AES256 to encrypt the same payload 100 times, each with a different key. An attacker gains access to the 100 encrypted payloads, and nothing else. Is there some way the attacker can gain ...
0
votes
1answer
44 views

Difference between access control systems that can/can't be compromised without valid credentials?

Take the following examples: When I run sshd, it can in theory grant access to anything that the process itself has access to, regardless of provided credentials. For example, I could in theory ...
0
votes
1answer
60 views

Securely erase firmware secret key

I have an SSD with the option (with ATA-commands) to erase the firmware for security reasons. In the firmware flash cells, the secret key is stored for encrypting the data on the fly. When I ask the ...
1
vote
1answer
98 views

Model for multi-tenant data encryption where the application owners or cloud providers cannot see decrypted data

Consider an application in which users will install on-premise agents which communicate with a cloud hosted service (aws in this case). The users can interact with the cloud service to configure and ...
0
votes
0answers
22 views

Odd, worrying alert. What if I use same AppleID with different MacOS logins? Safe (in terms of security and data corruption) to do?

Odd, worrying alert: So I have an install of Catalina that isn't my main installation, and doesn't have a copy of my main login on it, hence I'm logged in using another admin-level account (shown) ...
0
votes
2answers
100 views

SMTP security regarding sending username and password

Recently I've been studying SMTP and I've wrote a program that uses socket programming to send emails via extended SMTP (RFC2554). As I understand, in this protocol one sends base64 encoded strings of ...
1
vote
0answers
99 views

Is there a way to create a fake password on Linux that would trigger a specific action?

Think of the worst possibility: Someone has your laptop and you are being coerced into giving them your password. Can my Linux (I'm thinking of Arch) system be configured in a way that when a specific ...
0
votes
1answer
107 views

Security implications of a fixed vs relative pathname

What would be some security implications of a fixed pathname (although probably in a system directory when it would be deployed as a system service) rather than a relative (out of current directory)? ...
0
votes
2answers
100 views

How can I encrypt my phone and computer [closed]

How do I make sure everything of mine is keep private? Everything from what I search to passwords to Facebook to banking? I'm pretty sure I've been hacked in the past considering I can no longer get ...
-2
votes
1answer
132 views

Can someone tell me whats the encryption in this? [closed]

khgpd://zpn.xddspbx.nrf/j/9djwth14tmct9tf/uzdwvrrnonv.tue?gz=0 This is an encrypted text and is most prob a url....pls decode it or tell me which cipher is it, this is not for any security breaches ...
0
votes
0answers
96 views

How to best store the password for Keepass for a python bot that runs in Windows?

I have a python bot that runs in Windows 10 and accesses Keepass with a password. I'm wondering what would be the correct way to store and access this Keepass password. Currently, the Keepass password ...
0
votes
0answers
37 views

Payload Security for Single Page app to back end REST Services

We have an application with HTML5, CSS3, Angular, single page or progressive, which depends stateless on the backend for APIs. If the payload has private PII Data, the recommendation is to encrypt the ...
0
votes
0answers
43 views

Deciding the kind of key required for implementation of monitoring software

Different companies seek permission to start and run, from our organization. I am approval or permission-giving authority. I am having an inspector who goes to different places and visits companies ...
0
votes
1answer
75 views

Most secure way to store a cryptographic key for encrypting/decrypting stored application data

I would like to encrypt some of my application data stored on a MySQL DB using AES-128. I wonder thus what is the best way to store my key on the webserver. Should I encrypt the key itself or store it ...
0
votes
1answer
121 views

Can I consider files compressed with password safe at all?

A follow up to my 7,5 years old question. Back 10-15 years ago, when I wanted to send an executable file over Gmail from my PC, all I had to do was to change file's extension to some meaningless one ...
0
votes
1answer
55 views

Purpose of two-way encryption of JWE

If we look at encryption format and standards of JWE following RFC-7516, we can see that it uses a 2 way encryption method. So what are the benefits of this compared to just using RSA? Are computation ...
1
vote
2answers
71 views

Terminology question - authentication through encryption

I came across a number of somewhat similar solutions, which are based on the knowledge factor related to a symmetric key in particular: If a party was able to generate correct message authentication ...
29
votes
3answers
9k views

Can I use WhatsApp to securely send public key, symmetric key and private key?

I am asking this because WhatsApp says it is end-to-end encrypted. Are there any problems with sending a public key through WhatsApp? There might be some objections to sending symmetric and private ...
0
votes
1answer
66 views

Is automatic E2E encryption possible for chat apps with a backend DB?

This question refers to automatic E2E encryption (i.e., the app creates and shares encryption keys, never the user). Apps such as Discord and Hangouts store messages in a server-side DB thereby ...
4
votes
1answer
144 views

INTEL-SA-00086 extracting the secret key used to encrypt Intel CPU code: is the digital signature bypassed?

In a recent attack to INTEL-SA-00086, the researchers are able to extract the secret key that encrypts updates to various Intel CPUs. In the arstechnica blog it is mentioned as The key may also allow ...
0
votes
2answers
50 views

Changing private key in asymmetric encryption and recovering data

Let's say I want to make an encrypted message app (just an example). So, I will need a user1 with a password1, private key1 (that will be encrypted with the password1), public key1 (that will depend ...
1
vote
0answers
90 views

Wrapped Key Encryption - Hide AES secret key in Javascript & Java

I need to encrypt some sensitive fields back and forth in browser and server, same goes for decryption, for this I am planning to implement AES algorithm, but the problem here is with secret key which ...
0
votes
2answers
306 views

How Whatsapp shows link previews despite E2E encryption?

Someone sends me a link. Whatsapp shows its preview. How can they do that despite being E2E encrypted?
3
votes
4answers
818 views

Are files encrypted with 7ZIP vulnerable to password crackers?

A client says they can't accept password-protected PDFs to put in their payroll system, so I have to send them without security. I don't want to send unsecured PDFs via e-mail because e-mail is ...
0
votes
0answers
59 views

Saving secrets (API-keys for external application) per user in database (PKI?)

I'm developing a web-app which communicates with an external email message application through its HTTP API. My web-app consists of a JS (Svelte) front-end and a Node.js back-end. Each user on my app ...
11
votes
1answer
5k views

Why is it possible to bypass Android full disk encryption?

If you look up how to bypass the Android lock screen, there seems to be endless examples. plug the phone into your PC, use ADB (Android debugging tools), disable the lock screen forgot password ...
1
vote
1answer
77 views

Public key encryption with modified private key requried

I want the encryptor to be able to choose a key X and using it and the public key, he will be able to encrypt a message m. Then I get the key X and using the matching private key I'm able to generate ...
0
votes
0answers
51 views

Reading public key from SIM card

Is it possible to get public key from SIM card with only TelephonyManager API. I know SIM card have CPU, RAM, ROM, EEPROM, Crypto-processor, etc... Inside ROM part here is Ciphers, public and secret ...