2022 Developer Survey is open! Take survey.

Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

Filter by
Sorted by
Tagged with
0 votes
3 answers
186 views

Naming encrypted files in the cloud, without leaking info about their content

I'm working on a photo sharing app that stores files in the cloud, encrypted, and lets you share those files with others. To do that, as suggested in answers to this previous question: files are ...
user avatar
0 votes
0 answers
81 views

In what order should you create the partition table and a LUKS container?

My goal is to fully encrypt my USB drive with LUKS. What's the correct order of encryption? Should I create the partition table or the LUKS container first? Motivation behind would be greatly ...
user avatar
  • 1
0 votes
3 answers
115 views

Is the Initial Public Key Transfer Process in Public Key Encryption Vulnerable to MITM on Public Networks?

(shown in step 1): Is the initial process in public key encryption where the public key is transferred across the network done in plaintext? It seems like it must be, which essentially means that no ...
user avatar
  • 101
1 vote
1 answer
118 views

How should I securely rsync to a host with a self-signed certificate on a private network?

I have a backup server that has a self-signed certificate (x509) and another server on the same network. I would like to rsync data to the backup server from the other server. However, I prefer not to ...
user avatar
  • 13
0 votes
1 answer
68 views

Getting Smaller Output From Public Key Cryptography In PHP

I have a website in a shared hosting environment, and I'm also planning to back up in multiple locations. All of that introduces vulnerability where the data could get intercepted, stolen, or misused ...
user avatar
  • 743
0 votes
2 answers
117 views

Can a device that connected to malicious network once be compromised even after disconnection from malicious WiFi?

I need to take my personal laptop to the workplace so I will be using their internet that only employees usually use. However, if the network I connected to was malicious, is my data only compromised ...
user avatar
0 votes
1 answer
198 views

Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys

In cryptography, generally we have two ways of handling sensitive information. We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we ...
user avatar
  • 743
0 votes
1 answer
225 views

What's The Best PHP Encryption For Email Addresses?

I'm storing a list of email addresses and other not personally identifiable information for a mailing list in a database. Since it's for a project related to cryptocurrency, I believe that the ...
user avatar
  • 743
0 votes
0 answers
82 views

Is it safe to use a Digital Signature created with a PKI certificate's private key as a password

I'm trying to create application-layer encryption for user data in my database, using password derivation function. But there is a problem, that there must be an admin user, who can access all user's ...
user avatar
0 votes
1 answer
78 views

Authenticationless end to end encrypted server

I was wondering if a server enforces E2EE, should the users provide any kind of authentication? Indeed, if the data is encrypted, any user could access it but the only person who can actually decrypt ...
user avatar
  • 121
0 votes
2 answers
138 views

Does end to end encryption changes anything on the server code?

while coding a simple to-do list app enhanced with (true) end-to-end encryption as a coding exercise, I was wondering if the server-side API code changes from a plain text storage (excepts passwords) ...
user avatar
  • 121
1 vote
1 answer
94 views

How can I improve the application administrator's encryption keys security inside database

I am interested in the issue of establishing the security of data of users of a web application in the event of a database leak. It was decided to use the following encryption chain: User data is ...
user avatar
0 votes
0 answers
90 views

Dealing with particular clients wrt TLS support in postfix?

External (other) Mail clients have started to deny/de-list anonymous ciphersuites. But the TLS support is often spotty. Worse, some clients (mainly Windows, which does not care one whit about your RFC ...
user avatar
  • 273
4 votes
2 answers
696 views

Web-based secret manager using CryptoJS

I'm building an application, part of which will allow businesses to store secrets. I'm looking at using CryptoJS (https://www.npmjs.com/package/crypto-js). This would encrypt everything on the client ...
user avatar
0 votes
1 answer
101 views

Contact form encryption

Currently we have an email address and in certain cases we receive sensitive data via email. The goal is protecting this sensitive data. We have a website with SSL too so we thought that the website ...
user avatar
  • 487
1 vote
0 answers
64 views

Constraints on the password imposed by m209 on first password management

I was going through the paper Password Security: A Case History By Robert Morris and Ken Thompson on authentication. It has been mentioned in the First Scheme that the first encryption used m209, in ...
user avatar
0 votes
3 answers
241 views

Can a drive in locked state (via BitLocker) be over-encrypted/over-locked by ransomware?

Can a drive (system or external) that is already Bitlocker encrypted and locked, be able to be attacked and encrypted by ransomware? We need prevention from over-encryption, not destruction or ...
user avatar
4 votes
2 answers
1k views

Is it less secure to encrypt an hexadecimal encoded string?

I'm implementing RSA public-private key encryption and decryption and the input of these functions is encoded as hexadecimal. The library I use (react-native-rsa) however only accepts plain strings ...
user avatar
  • 753
0 votes
1 answer
127 views

Taking encrypted devices across borders

I am moving to a country where the government can compel you to reveal passwords for your devices at the border, rendering the full disk encryption on my linux laptop useless. Other than uploading ...
user avatar
1 vote
2 answers
156 views

Irreversible encryption - difference to hash?

I keep reading the term "reversibly encrypted" and that confuses me because I thought that is kind of the point of encryption, that it can be decrypted. I googled it, as a good student, and ...
user avatar
  • 13
2 votes
0 answers
158 views

Is there any way to de-link a secure messenger (Telegram/Signal/WhatsApp) from phone number?

I understand, that mobile phone verification is probably the most convenient way to validate real users and avoid spam, but those "secure/private" messengers are afterward still bound to ...
user avatar
  • 2,667
0 votes
0 answers
22 views

MITM attack on public wi-fi and ISP wired connection [duplicate]

I know how MITM attacks work (theory/videos on the subject etc), but I am a bit confused and not sure what are the worst-case scenarios that can happen. If I'm using a public VPN and someone is indeed ...
user avatar
2 votes
3 answers
198 views

Is using random salt to pbkdf2 for every request to Rest API good/bad?

Here are my conditions: My Rest API must accept username and plain password. But, that's very bad. That's why the client must encrypt the password first and my rest API will decrypt it to get the ...
user avatar
18 votes
1 answer
3k views

CRM with Client Side Encryption

The company I'm working in wants to develop a CRM that is cloud-based and we will need to store the data safely. I've been searching for a way to create a strategy to save and secure data but I don't ...
user avatar
0 votes
1 answer
258 views

Can aes256 be cracked with math.random

I read this https://medium.com/@betable/tifu-by-using-math-random-f1c308c4fd9d and if the key is generated with an old browser using math.random via chrome v8, could the AES encrypted message be ...
user avatar
  • 1
0 votes
1 answer
154 views

Encrypted drives and non-interactive use

I would like to protect the data on my backup system, in case it gets (physically) stolen. I would encrypt the hard drives where the data resides. Since the backup system typically acts non-...
user avatar
0 votes
1 answer
152 views

How to secure data on production environment

Question Suppose you design a data lake with sensitive data. Due to immaturity of tools, dynamic data masking is unavailable. You have MFA, encryption at rest, audit logging, ETL processing data and ...
user avatar
  • 215
0 votes
1 answer
206 views

SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?

Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned? In my case the SSD (part number: ...
user avatar
0 votes
1 answer
109 views

Is there a use for an MDC even when all messages are signed?

I guess I have halfway grasped the concepts of PGP, and I've halfway understood the concept of the Efail attack. However, I still don't understand whether such attacks would be possible (and an MDC ...
user avatar
  • 547
6 votes
1 answer
365 views

How are the PGP keys that Thunderbird 78+ uses encrypted?

With Thunderbird 78, a new PGP subsystem has been introduced which handles PGP keys internally. In previous versions, the add-on Enigmail has handled PGP-related stuff, by letting do GnuPG the work ...
user avatar
  • 547
1 vote
1 answer
431 views

Difference between tor over VPN and VPN over tor

I saw many posts here saying that tor over VPN is different from VPN over tor, and one is better than other, but I was unable to find any explanation over it. There were some speculations that you ...
user avatar
0 votes
0 answers
93 views

How secure is Identity-Based Encryption and certificateless cryptography?

The above two standards encryption schemes are used to encrypt the messages in different applications. In both cases, a trusted third party is used to create a whole encryption environment, which is a ...
user avatar
0 votes
1 answer
138 views

Submitting password over untrusted VPN

Hi,I do not work in IT security and hence am asking some general questions here. I read https://security.stackexchange.com/a/172821/266785 and have questions that would appreciate answers. Is my ...
user avatar
0 votes
1 answer
208 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
user avatar
  • 781
4 votes
4 answers
295 views

Encrypting Drive before Online Proctor Exam

I'm undergoing postgrad studying and will be asked to do an online exam monitored by ProctorU. I didn't worry much about it before signing up but now that I read the detailed instructions about how ...
user avatar
3 votes
2 answers
562 views

How do companies manage & store cryptocurrency private keys?

For an individual, I see a some options for storing private keys, such as printing them on paper in a vault, using a hardware wallet, encrypting and storing on the machine, using AWS Secret Manager, ...
user avatar
  • 31
0 votes
0 answers
13 views

I have input text and 2 output of encryption short and long key. How to find algo being used [duplicate]

I know it's hard to find but I am still trying to find it. I have one input and two outputs as "short" and "long" keys. I want to find which algo or encryption is being used. The ...
user avatar
0 votes
1 answer
259 views

Why are there no modern web browsers that allow extension access to SSL information about the site you are browsing?

In all my Googling, I found one version of FireFox that allowed it temporarily a long time ago, it has been discussed on the Chromium development forums for years, but yet, as of today, there is still ...
user avatar
  • 352
1 vote
0 answers
79 views

Authorise access to hierarchical data

Consider a scenario in which you offer service access based on a hierarchy of authority. i.e., a HEAD can register his subordinates. The authenticated HEAD has the previledge to read and update data ...
user avatar
3 votes
1 answer
180 views

Does Intel's vPro TME make a locked screen more secure?

This post seems on point but I didn't understand the answer enough to answer this question. Intel's vPro offers "Total Memory Encryption" (TME), which encrypts RAM and system bus data while ...
user avatar
  • 31
0 votes
0 answers
120 views

What is more secure: encrypting individual files in archive or encrypting the archive itself?

Let's assume we have symmetric crypto with the same IV for each operation. From my perspective, encrypting the whole archive is better, as similar strings are compacted and the CBC will work for us ...
user avatar
  • 101
1 vote
1 answer
169 views

Use PBKDF2 for both authentication and decryption on NodeJS

I am using PBKDF2 on NodeJS to authenticate a user who submits username & password. To do this, when the user first registers, I generate a salt, I use 200000 iterations, I specify a key length of ...
user avatar
  • 1,010
0 votes
1 answer
90 views

Ways to encrypt data that will be available to specific clients [closed]

I want to store information on the blockchain, but some part of it is private and must be available to selected clients (for example, users who belong to a common company) How can this be done? The ...
user avatar
0 votes
0 answers
129 views

Specification of AES-based PKCS#5 Password-Based Encryption (PBE)

recently I had a look at the capabilities of the Java keytool to create PKCS#12 containers with a protected private key. According to the standard a private key is protected using a PKCS#8 shrouded ...
user avatar
0 votes
0 answers
43 views

How is Firefox Lockwise able to decrypt saved logins without primary password? [duplicate]

I was wondering how Firefox Lockwise is able to securely encrypt and decrypt saved logins across devices without using a primary password? As far as I understand, regardless of whether an encryption ...
user avatar
0 votes
1 answer
108 views

How to encrypt http traffic in an offline enterprise network?

I am building a golang offline application for a company that will operate in their office internal Wireless / Wired Network. There will be one server computer and many client computers communicating ...
user avatar
1 vote
1 answer
129 views

How vulnerable is security if a public key is swapped by active attacker if a key check is done?

Trying to understand this from a high level conceptually. It is obvious from all information on Asymmetric encryption that a public key can be of course, public and there isn't a danger of ...
user avatar
  • 117
0 votes
2 answers
129 views

Can wide IPv6 adoption make technologies like ECH obsolete?

Encrypted Client Hello (ECH) encrypts the whole Client hello and because of that ISPs won't know which website any given user intends to visit unless the website is using a dedicated IP address and ...
user avatar
0 votes
0 answers
128 views

Do I need to encrypt user data in database

I have a user table with 20 columns. I am using argon2id to hash passwords but I was asked by the information security department to encrypt user data before saving it to the database. I have ...
user avatar
5 votes
1 answer
329 views

Impact of having more X509v3 Key Usage fields than required?

I was wondering if having an "oversubscription" of "Key usage fields" inside a X509v3 certificate can negatively impact the performance and/or the security of a server. For example ...
user avatar
  • 65