Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
5,766
questions
0
votes
1
answer
60
views
Password reset encryption mechanism based on username [duplicate]
Short
I known
0x02135 gets encrypted to -> NzY4MzY5
0x02136 gets encrypted to -> NzcxMzc0
...etc
I want to know
0x02137 will get encrypted to -> ??? (in ...
- 3
1
vote
1
answer
65
views
Does Google share it's international database of search queries with LEA agencies for purposes of breaking encryption?
So, suppose a person accidentally typed their complex encryption password into Google search. They weren't logged in to any Google services so the search was anonymous, and they continued to use this ...
- 11
0
votes
1
answer
25
views
When using Bitlocker and I am logged into a PC is the data accessible for outside devices? (mounted)
I am wondering what happens when I log into an encrypted Windows PC - could an attacker steal data from the PC while logged in or is it encrypted and to access the drive he would need the Bitlocker ...
- 31
2
votes
2
answers
229
views
Data and Account security on Android phone in case of it being stolen
How secure are Android smartphones when someone gets physical access to the phone, in other words, someone stealing my phone and how to improve this security?
I'm especially worried about all the ...
- 21
1
vote
0
answers
38
views
Secure way to transfer all of my Dropbox files to my Koofr account
I want to securely Transfer my Dropbox files to Koofr.
What's the best way to do this?
Here some additional information:
My Dropbox file are not encrypted.
Koofr can connect directly to Dropbox.
Do ...
- 11
1
vote
1
answer
112
views
Concatenating timestamp to data before encrypting it - is this a commonly used technique?
I have a web app that communicates with a backend server, and the users of the web app are organisations that each have a single login for the entire organisation. The app is meant to be used for ...
- 223
0
votes
1
answer
84
views
How do you trust two different cloud provider servers?
I've found a question with an answer here on Security StackExchange or on Unix StackExchange, but I can't find it anymore apparently :( If you find this answer already, help would be appreciated, I ...
- 1,542
1
vote
3
answers
206
views
Can Windows invade my privacy by accessing files from my Linux OS?
I have a 500 GB SSD drive with Windows 10 installed, and a 250 GB SSD drive with Ubuntu 22.04 installed. I use the latter mainly to maintain my privacy; Ubuntu is like my personal computer, with ...
0
votes
1
answer
116
views
Is it sufficient to put /var, /tmp/, and /home on their own encrypted partitions?
I want to encrypt my system, but I don't want the hassle of having to put in two passwords on boot; I just want to put in one password on login that would decrypt the other partitions. I have heard ...
- 123
2
votes
1
answer
177
views
Can data be be pulled from the RAM of a locked device?
Say, for example, you have a laptop with encrypted drives so data can't be pulled from those drives if they are physically removed from the device. If you close the lid of the laptop, thus locking it (...
- 123
0
votes
2
answers
140
views
Can a one-time pad prevent a meet-in-the-middle attack?
I am confused regarding this: I am working on a project but I want to use a one-time pad and want to launch a meet-in-the-middle attack on my new scheme for data security. As block ciphers are ...
2
votes
2
answers
212
views
What is the name of the box that hackers connect to a router in order to spy on all your traffic?
I watched a documentary where hackers entered a victim's house by pretending to be from the ISP and then connected a box to a router in order to spy on all of the victim's traffic. Later, the hackers ...
- 23
0
votes
0
answers
224
views
Suspicious SSD corruption exactly at LUKS encryption header
I am helping with an interesting data recovery issue. The laptop was running Debian 11 Linux with LUKS full disk encryption on a Samsung 970 Evo Plus 2TB SSD for quite many months. Suddenly the LUKS ...
0
votes
1
answer
79
views
Does signing make any sense when encrypting with secret key is used?
When I use secret key which only one server know for symmetric encryption done with XChaCha20-Poly1305, is any benefit to use signing aswell? As long as only one server knows the secret, doesn't it ...
- 307
0
votes
2
answers
74
views
How can an attacker cryptolock a database content after having compromised the application server, which protection to setup?
I have an application server accessible from the Web, behind a reverse proxy. Its database is secured on a separate VLAN and the database admin password is strong.
Say the application or the operating ...
- 597
0
votes
0
answers
28
views
Is it possible to hack encrypted external HDD,if you have access to it? [duplicate]
If I lose my external HDD and somebody finds it and tries to hack, will he succeed?Is it possible to get data from encrypted disk by disassembling it and working with platters?
HDD is APFS AES 256 ...
0
votes
1
answer
226
views
Is it safe to store data on APFS 256 AES encrypted external HDD disk?
I'm using a MacBook and want to store confidential data (financial documents, passwords, private photos, etc.) on an external HDD disk.
How safe is setting up APFS AES 256 encryption with disk ...
0
votes
1
answer
120
views
Why is this simple encryption protocol not enough for messaging?
Signal Messenger is basically state of the art chat when it comes to security and privacy: It uses only phone numbers for user identification, doesn't store user chat and the encryption protocol is ...
- 1
1
vote
1
answer
321
views
Is the Web Crypto API secure when the server is trusted?
I've heard a lot of people say that the Web Crypto API is not very safe. For example: https://tonyarcieri.com/whats-wrong-with-webcrypto, Problems with in Browser Crypto. However, I'm looking to use ...
- 63
0
votes
3
answers
226
views
Encryption certs protected from decryption by thumbprint
Is it true that you can only decrypt data that was encrypted by a certificate using the same exact thumbprint? My thought was that you can decrypt the data using an updated version of the same ...
- 1
1
vote
1
answer
665
views
ThinkShield secure wipe - SSD does it forbid data recovering?
I have to give my computer back to my boss.
I want to delete all the data from my SSD. I found "ThinkShield secure wipe" which is implemented in the BIOS apparently.
It gives me two options:
...
- 13
-1
votes
1
answer
62
views
Where could I find a list of keys not to use for DES encrypting
We have a process that encrypts a URL, it uses DES encryption. I suspect someone may have figured out the key and is decrypting it to crawl information. This was set up many years ago, I just want to ...
- 109
0
votes
0
answers
56
views
oauth2 with additional secret
I'm using Spring boot to create an application that stores user secrets in a database (I have to store the secrets); each secret is stored in the database after being encrypted with the user's ...
- 1
0
votes
2
answers
135
views
Encryption method for file that can only be read by program
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
- 103
0
votes
0
answers
61
views
Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?
I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "...
- 1
1
vote
1
answer
110
views
LibreOffice password vs cryptocontainer (LUKS, VeraCrypt etc.)
How much worse is encrypting a LibreOffice document with the built-in mechanism than using a cryptocontainer (LUKS, VeraCrypt, etc.) and storing the document in it?
I am more comfortable using the ...
- 11
0
votes
0
answers
96
views
Android FBE securely wipe all data [closed]
According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage.
Does a factory reset of an FBE phone reset the keys of ...
- 1
0
votes
1
answer
345
views
How to encrypt with a private RSA key in Openssl
The RSA_private_encrypt is deprecated in OpenSSL 3.x. It is not clear how to get the same functionality in 3.x without using the deprecated functions. And, before you ask, IEC_62351-9 Section 9.1.3....
- 1
1
vote
4
answers
254
views
End-to-end encryption with multiple recipients?
As far as I understand, end-to-end encryption is used to encrypt the content on the client (sender), send it to the server and decrypt it on the client (recipient). The clients store their private ...
- 121
0
votes
0
answers
37
views
How to encrypt an e-mail to many recipients in an effective way? [duplicate]
Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it.
What encryption method can I ...
- 101
0
votes
0
answers
51
views
In asymmetric encryption, is there a meaningful difference between the public and the private key? [duplicate]
Is it possible to swap them, so that the public key is kept secret while the private key is public? Or do they actually function differently?
Thinking specifically about DSA though I'm interested if ...
- 1,259
2
votes
1
answer
128
views
How do I ship my SSL keys with my application?
I have an executable, and I have the SSL certificates and keys necessary to establish the secure connection. The application performs self-updating by downloading and replacing itself with an updated ...
- 121
2
votes
0
answers
171
views
Cell tower to cell phone encrypted communication
I have done some search here but I can't understand how phones and antennas share the keys used for encryption and decryption.
As far as I understand, mobile phones today use LTE i.e 4G (sometimes ...
- 25
0
votes
1
answer
72
views
Does filesystem compression aid cryptanalysis?
I use LUKS to encrypt all sensitive data on my computer. If I switch to using a filesystem with on-the-fly data compression such as ZFS, should I use its compression feature together with LUKS? Does ...
- 23
1
vote
2
answers
147
views
Using hash to search encrypted records
If I am using SHA-512 hash values merely as a means to search fields that have been encrypted elsewhere, is it cryptographically secure enough to hash without salt?
For background, I have been given a ...
- 111
14
votes
4
answers
3k
views
How can we determine if there is actual encryption and what type of encryption on messaging apps?
There are many new messaging apps that claim to be the most secure.
How can we be certain if there is actual encryption and what type of encryption?
Molly, signal, WhatsApp, briar, wire, telegram, ...
- 141
0
votes
0
answers
25
views
Securing many infrastructure servers sitting behind a centralised web server
Problem
We have 100+ servers that we are looking to manage through a REST API.
The REST API for each of these servers will only ever be consumed from our Centralised Management Server (CMS). Therefore,...
- 101
0
votes
3
answers
259
views
Can encrypted and deleted files be recovered?
If you’ve watched the news, you know that Secret Service text messages were deleted. Now they’re trying to recover them.
If those text messages were encrypted before deletion, and the key was also ...
0
votes
1
answer
90
views
Decrypting with multiple keys
I have a PHP application which calls third party api with username and password embedded in the XML API call from my side.
I would like to encrypt and store the username and password embedded in the ...
18
votes
4
answers
5k
views
How is TouchID more secure than a simple password?
This likely stems from my complete lack of familiarity with encryption technology and IT security in general, however it isn't clear to me how biometric authentication (such as Apple's TouchID) makes ...
- 291
0
votes
1
answer
31
views
Would Encrypted FEK, IV, actual MIME type and file size metadata stored unencrypted affect the security of encrypted files?
I am thinking of an application for storing/managing files of arbitrary types (e.g. PDF, JPEG, PNG, text).
Files are stored encrypted in the file system. Additional data ("metadata") is ...
- 57
0
votes
1
answer
252
views
Does S/MIME encryption encrypt with each recipient's key?
If I send an email through S/MIME protocol to a group of recipients, does the email client require to encrypt the same email content with each recipient's public key before sending to each recipient? ...
0
votes
0
answers
209
views
Why are environment variables safe after 2022 Heroku breach?
In their communication about the april 2022 breach (summary here), Heroku states that environment variables (other than Review apps and CI variables) were safe because they are encrypted at rest.
We ...
0
votes
0
answers
84
views
PGP public key flagged as malicious to root. Was ran before
Hello I had used this pgp public key on my win10 OS with pgptool to message someone.
Then when i used that same public key in whonix OS console it came back with some type of warning about malicious ...
- 1
0
votes
0
answers
87
views
Encrypted request object in OpenID Connect
When I want to use encrypted request object with OpenID Connect then my OIDC provider must know my client_secret (used in JWT request object encryption). For the server to decrypt this object, that is,...
- 307
0
votes
1
answer
38
views
Encrypting content with assymetric key pairs as a form of signing [closed]
The use-case is as follows:
There is a signer that have a claim or document D who wants any client to be able to verify that D has not been tampered with.
I suppose one way to do this is to use ...
- 103
1
vote
0
answers
25
views
Does the the key used to encrypt in a ransomware attack reside on the target computer for at least some time? [duplicate]
My understanding is that a ransomware uses the target computer's resources to encrypt files. So does that mean that the key used for encryption resides on the target computer for at least some time? I ...
- 11
3
votes
1
answer
280
views
AMD SEV - attack through the hypervisor console
AMD SEV enables creating a trusted encrypted VM where the memory of the whole VM is encrypted using cryptographic keys and features on the CPU and thus not visible to the cloud provider (in theory if ...
- 31
0
votes
0
answers
35
views
How do social media networks handle data?
I got this idea of digital diary app and I’m planning to store the user’s info on the cloud. I’m just curious how do social media keep user data safe from unwanted eyes. I personally find it weird if ...
- 1
1
vote
1
answer
96
views
Is Ansible Vault FIPS 140-2 certified?
What security level of FIPS 140-2 compliance standard would Ansible Vault fall under? Is there a guide or playbook that someone can share? Thank you in advance!
- 27