Questions tagged [encryption]
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
477
questions with no upvoted or accepted answers
1
vote
0
answers
65
views
How large is AppEngine's Private Key?
AppEngine provides methods for signing binary data - e.g. via the Go language's SignBytes[1]
However, it doesn't specify any information about how large the private key is.
Is this published ...
- 521
1
vote
0
answers
70
views
Hadoop Transparent Data Encryption: protection from interference of EDEK, EZK and DEK
I am preparing a response to a security auditor. They have presented a generic question about the protection from substitution of KEK and DEK in a "normal" encryption mechanism.
What protection ...
- 153
1
vote
0
answers
87
views
Is creating a derived password safe?
I need to store really sensitive data in a client-hosted database. Since there's no way I can protect this database (because I don't own it), my idea was to encrypt it by using the user's password, so ...
- 111
1
vote
0
answers
571
views
BadPaddingException when using the textbook cipher
I'm using an implementation as below to do an encryption where the bouncycastle is used as the crypto provider. So the ciphertext for a particular plaintext will not be dynamic as the RSA from ...
- 203
1
vote
0
answers
242
views
Password protected secrets on Vault
We're currently improving our custom secrets management system and I'm looking into different solutions such as Hashicorp Vault or AWS KMS.
So far Vault seems to meet most of our current requirements,...
- 11
1
vote
0
answers
549
views
Decrypt to memory for editing
I am looking for a secure way to edit sensitive text data, using Git and Vim in the process.
An ideal solution would be:
clone the encrypted git repository into memory;
decrypt into memory;
do the ...
- 145
1
vote
1
answer
369
views
Server pagination with key in response to fetch next page
I want to introduce pagination in one of my server endpoints.
The endpoint will have an option to include in the parameter the last index of the previous page, and if included, the "page" returned ...
- 193
1
vote
0
answers
135
views
Encrypting Geographical Data
I have an address table with human-readable columns like street, city, state, zip - and also columns with spatial data (the SQL Server geography type). Technically, this violates 3rd Normal form (i.e. ...
1
vote
0
answers
381
views
Secure local database or service
I’m trying to secure a database of questions and I wonder if it’s actually possible.
There are 2 ways the client (mobile App) can get questions:
Local DB within the app.
Service that returns ...
- 133
1
vote
0
answers
228
views
Best way to store AES keys (web api) while dealing with multi tenants (key per tenant)
I have some data to encrypt on my database and every tenant will have his own database so surely every tenant will have a different key.
I'm searching for the best way to store the key for every ...
- 131
1
vote
0
answers
1k
views
Check the signature algorithm of RDP certificate
I received a Nessus warning of RDP as following,
The following certificates were part of the certificate chain sent by the remote host, but contain hashes that are considered to be weak.
|-Subject ...
- 11
1
vote
0
answers
4k
views
Is Crypto-JS AES library still considered secure?
My company has to send out passwords to employees. We want to do so by using the Crypto-JS AES library to locally create the encrypted message and then send the encrypted message to the employee so ...
- 21
1
vote
0
answers
178
views
What are the security implications of storing user-uploaded files on a third-party server versus your own managed webserver?
I'm working on a web platform which will contain some rather sensitive personal information, and obviously this raises the problem of how secure this data will be. Users can upload some files, and I ...
- 111
1
vote
0
answers
124
views
Security practices to securely poll authenticated 3rd party API on behalf of clients
It turns out there is a need for our application to be able to poll data at a specific schedule from external API on behalf of clients. The API can be any rest API that the client would choose. We ...
- 11
1
vote
0
answers
116
views
How would encrypted search engine work, a search engine where it doesn't know what was searched for
I took course on cryptography on coursera, and the instructor said that it's possible to create search engine as so that even search engine wont know what you searched for but it will be able to find ...
- 725
1
vote
0
answers
302
views
Veracrypt Sufficient Enough for Firefox Profile
I was doing some reading about Firefox and using the password manager with a master password(1,2,3).
Suppose I want to protect my entire Firefox profile, is using Veracrypt to create a container ...
user160711
1
vote
0
answers
296
views
How Secure Would Client Side Sha-512 Be In JavaScript
I've created an Capture The Flag challenge for me and a few of my mates, and for the final challenge, you're goal is to log in as admin to a site. Now the site doesn't use any server side languages (...
1
vote
0
answers
238
views
Is volume level encryption enough to satisfy compliance requirements?
We are implement a cloud application and using nosql technology. We know there are quite a few compliance requirements out there require doing data encryption at rest. However, we would like to know ...
- 41
1
vote
0
answers
338
views
Using TLS Certificates in IoT Devices
I am not sure whether this is the exact forum to ask this question. If not please transfer it to another.
Domain
As we know the IoT is growing rapidly and millions of devices are invading our ...
- 1,287
1
vote
0
answers
513
views
How secure is my MLab Shared Cluster MongoDB database?
I have deployed a Meteor application to Meteor Galaxy. I've also created an Mlab.com Shared Cluster MongoDB. Link to the plan features.
My application has an SSL certificate installed on the domain.
...
- 111
1
vote
0
answers
90
views
What is the current standard for complete encryption of user information?
If one were to design a social media service, but with guaranteed encrypted privacy of all aspects of one's data, what are the proper technologies to employ for all of
1.) On disk storage
2.) ...
- 111
1
vote
0
answers
4k
views
Exception: krb_error 0 Do not have keys of types listed in default_tkt_enctypes
I am looking for your help with one Exception we are getting while setting up our Kerberos SSO. I will briefly give an overview of our setup and things we tried till now and exception we are getting:
...
- 11
1
vote
1
answer
769
views
DUKPT / BDK Generation
I am new to DUKPT. I am in need of generating a BDK for a Project that involves POS transactions. The requirement for BDK is 3DES with 16 bytes key, with Keying Option 1 where all the keys are ...
- 11
1
vote
1
answer
717
views
Are there any DUKPT / AES standards or recommendations?
Are there any standards or industry practices with respect to the implementation of DUKPT with AES (as opposed to DUKPT / TDEA which is covered by ANSI X9.24-1:2009)?
Understanding that DUKPT is a ...
- 11
1
vote
0
answers
1k
views
How is the Apple FairPlay Server Playback Context (SPC) message generated?
I'm researching encryption tools that use OS-verified hardware such as a TPM or Secure Element.
Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction ...
- 50.6k
1
vote
0
answers
588
views
Cancel OpenSSL RSA key generation via command line
I'm running macOS 10.12.1 with OpenSSL 0.9.8zh 14 Jan 2016
When generating an RSA key with the OpenSSL cli you are prompted to enter your passphrase.
With most command-line interfaces pressing C-d ...
- 173
1
vote
0
answers
104
views
Secure upload/download design with malicious storage server
Assume we have a malicious storage server (a user-agnostic key-value store, supporting server.put(key, value) and server.get(key)) that we want to use for per-user based secure file storage. The two ...
- 131
1
vote
0
answers
93
views
Is encryption in-flight synonymous to encryption on/over-the-wire?
I hear both used interchangeably, but I figured over-the-wire implied some physical medium. Clarification would be much appreciated, thank you!
- 111
1
vote
0
answers
540
views
Can RC4 ciphers be disabled in Windows Server 2008?
Having some difficulty with disabling RC4 ciphers in Windows Server 2008 SP2. All the guidance I'm seeing for doing this is specific to Windows Server 2008 R2, including the creation of registry keys ...
- 11
1
vote
0
answers
425
views
Unattended generation of "the perfect keypair"
I'm trying to generate a "perfect keypair" akin to https://linuxich.wordpress.com/short-manual-for-a-perfect-gpg-keypair-using-gpg-v2/ but I want to do it semi-automatized, in gpg2 terms that would be ...
- 111
1
vote
0
answers
154
views
Does KillDisk use existing commands on a server to encrypt the data?
I've been reading up on this KillDisk exploit for Linux.
https://www.bleepingcomputer.com/news/security/killdisk-ransomware-now-targets-linux-prevents-boot-up-has-faulty-encryption/
Does anyone ...
- 2,727
1
vote
0
answers
128
views
Does using Oracle TDE guarantees compliance to HIPAA, for persisting sensitive data?
Persisting sensitive customer pharma data is becoming more challenging with stricter HIPAA compliance guidelines, wondering if TDE solves it entirely or are there any gaps that a developer/dba should ...
- 143
1
vote
0
answers
123
views
For a web application which employs application layer encryption, is there anyway to modify post parameters which is captured encrypted in burp.?
There is client side javascript controls in place which restricts malicious characters.
All form data is transmitted via POST requests. In burp, I can see that all parameters are encrypted into one ...
- 11
1
vote
0
answers
148
views
Implementation of SQL "LIKE" Operator in Database Outsourcing
Recently, I read some papers about DB Outsourcing that implement aggregate functions over encrypted data. What I want to know, is there a method in DB Outsourcing to implement SQL LIKE operator that ...
- 25
1
vote
0
answers
301
views
No authentication, AES encrypted JSON over UDP
I was recently assigned the task of testing a new hardware device which communicates with a JSON API over UDP.
For some reason or another, it was decided that AES-CBC-128 should be used to encrypt ...
- 11
1
vote
0
answers
5k
views
IPSec - Configuration best practices, performance, and realistic tradeoffs for my chosen Ciphers
I understand the term "best" is subjective but I would like to try to keep this discussion as objective as possible and get the opinion of other security professionals for my chosen cipher suite ...
1
vote
0
answers
222
views
how to secure sensitive data from IT administrators?
My team is outsourcing some of its IT management, including the administrative role.
Since our income is based on data we store in the DB, I would like to avoid sharing access to it with the ...
1
vote
0
answers
127
views
Encrypt SQL Server traffic on a LAN
I have a .NET client application that runs on several machines on a local area network. All machines (including the server which is running MSSQL Server 2016) are running either Windows 7, 8 or 10. ...
- 433
1
vote
1
answer
628
views
Postfix + MySQL ENCRYPT() encryption method change
I already have my mail server (postfix, courier, mysql) and roundcube as my webmail client, Encrypt() is the current password encryption function,
Is there a way to change the default password ...
- 113
1
vote
0
answers
112
views
Key derivation usage for deep-level data storage
Let's say I have the following security scheme:
Master entity
|
|
v
Group entity-----> Child entity 1
| |-----> Child entity 2
| \-----> Child entity 3
...
- 123
1
vote
0
answers
121
views
Credential transport for networked game
I'm developing a networked game, and this game will require players to authenticate to the server. The both client and server are written in Java. I'm trying to find an efficient password transmission ...
user64273
1
vote
0
answers
171
views
Long-term cloud backup encryption
I have a few TiB of data on machines that I control. For georedundant backup purposes I want to also have the data in the cloud. Obviously I don't want to give the provider (or any intelligence ...
- 121
1
vote
0
answers
105
views
What information can be seen when I'm using SRTP via XMPP?
Just as the title goes, basically what data/information can be tracked when using SRTP via XMPP?
As client I'm using Jitsi. If things works in some aspects similar to HTTPS, I guess that maybe it ...
- 115
1
vote
0
answers
869
views
How could I encrypt an SD card to store data on it?
I have some data I'd like to carry with me in an encrypted form onto an SD card, so I (and only I) can access it easily from any OS (or at least Windows, OSX and Ubuntu). My idea was like:
Two ...
- 241
1
vote
0
answers
133
views
Substitution Table in TKIP
In TKIP Encapsulation, we divided the per packet key mixing process into two phases.
In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
- 41
1
vote
0
answers
185
views
Decryption with two-way authentication
We have a Customer who wants his sensitive user-data stored with an encryption.
These are the basic requirements:
Sensitive user-data is stored in a database using encryption
A remote-attacker who ...
- 11
1
vote
0
answers
1k
views
Is the QUIC protocol secure?
QUIC is a new protocol for video streaming, that can establish a secure connection in one round. It is used in Google's new Duo app for example. How does it work and is it secure (comparison with TCP ...
- 5,413
1
vote
0
answers
248
views
VPN chain in one machine without VM natively
Is it any way to make VPN chain in one machine (MAC or WIN) without VM natively (L2TP/IPsec)?
I need this for obtain an extra layer of security.
For example - if one VPN turns off I still have ...
- 507
1
vote
0
answers
697
views
SQLCipher and PRAGMA key on iOS
I'm a bit confused as to how SQLCipher handles the PRAGMA key provided for encrypting the SQLite database
For background:
I'm looking at options for encrypting application data at rest. From the ...
- 11
1
vote
0
answers
148
views
Is this cascading encryption, and is my security weakened as a result?
I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
- 11