Questions tagged [encryption]

Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.

428 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
221 views

Passing Encryption Key Across Session for Symmetrically-Encrypted DB

I'm building a database that symmetrically encrypts user data. Nothing super sensitive, I'd use a third-party if it was. The data is encrypted with a surrogate key; the user must enter a password to ...
1
vote
0answers
863 views

Storing private messages in a database

I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
1
vote
0answers
253 views

P2P sharing of uniquely encrypted files

I need a way to share large, uniquely encrypted files (AES256) that are actually the same file when decrypted, through P2P, to optimize download speeds. For instance, a centralized server would ...
1
vote
0answers
68 views

Is it possible to produce incorrect Metadata?

There is an app on xposed installer called XPrivacy for android that let's you decide what information you want your device to give a specific app and for information you don't want to give it ...
1
vote
0answers
370 views

Designing a security and encryption strategy for MongoHQ

I'm trying to design the best strategy to achieve the following goals: Securing data-on-the-wire between my server and MongoHQ. Encrypting all data-at-rest with MongoHQ (possibly key values as well). ...
1
vote
0answers
306 views

Is my approach to anonymous certificate based HTTP(s) authentication and secure private messaging sound?

I'm trying to work out a somewhat anonymous secure messaging system, and was hoping someone could validate my overall approach. Keep in mind, this all takes place over HTTPS. Authentication While ...
1
vote
0answers
273 views

Putty Event Log

Can anyone explain me the Step by step process of Key Exchange that takes place while accessing Linux machine using Putty ? I found the Event Log of Putty but the Various Key Exchange didn't make very ...
1
vote
0answers
180 views

How do time-limited keys work for e.g. DCP files?

According to http://en.wikipedia.org/wiki/Digital_cinema under How Digital Cinema Works it states that the decryption keys are time-limited and expire after the end of the booked time. From a high ...
1
vote
0answers
181 views

Is this good management of the Encryption Key

The site is to be hosted on a shared internet server, to store non-commercial data and it will be clearly labelled as not for sensitive information. I wish to offer a credible solution to the risks ...
1
vote
0answers
126 views

Techniques for web-user communication across an untrusted server

I'm designing a web-based notification framework (i.e. a user can subscribe to updates from a service or another user) where communication between users is encrypted. User-to-user communication on ...
1
vote
0answers
2k views

Decrypt “key” that is encrypted with LMK or TMK

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I ...
1
vote
1answer
116 views

Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?

Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" - nothing is perfectly secure; rather I am looking for possible ...
1
vote
1answer
297 views

What specific assurances exist about StartPage privacy?

What specific, technical and verifiable information exists to support StartPage’s claims about privacy? For example, they claim in the “Privacy” section of their iPhone app: StartPage does not ...
1
vote
1answer
143 views

How is the username and password captured on this mobile device?

I have a Motorola phone, and I am concerned about my privacy after reading this article : http://www.beneaththewaves.net/Projects/Motorola_Is_Listening.html The poster says: For both of these ...
1
vote
1answer
361 views

Need help designing an encryption workflow

Background: I'm building a .NET application, a very small part of this application allows for users to communicate with a third party application. I am designing this aspect. The third party simply ...
1
vote
1answer
74 views

L2TP/IPSec implementation

Recently, I've been given the task of thinking of a way to secure communications (financial transactions), but on lower layers than the network one. The solution would have a server responsible for ...
1
vote
1answer
1k views

WhatsApp: Someone makes screenshots of a friends chat. Can I help them?

A group of friends is being stalked by an unknown person (or bot?). Everything started with person A. A was sent authentic screenshots of several of his WhatsApp chats. Screenshots were sometimes ...
0
votes
0answers
32 views

What could be the potential vulnerabilities and threats in endpoint encrypted file storage system?

Consider the following scenario: Client installs a web API based endpoint encryption software. They upload the endpoint encrypted files to the server with the following format by using poly1305 and ...
0
votes
0answers
44 views

How to get Future Keys (Session Key) from IPEK for decryption data?

I'm new to DUKPT, so I'm not entirely clear about DUKPT and HSM. Right now, I'm trying to decrypt data (PAN number) from terminal. So far, when I receive KSN and encrypted data, I understand that I ...
0
votes
0answers
32 views

SQL Column encryption can be part of Data at Rest?

I have a SQL database and I have enabled the Always Encrypted feature. Can I claim that Data at Rest is fulfilled? or do I have to secure the backup files using certificates to claim that our database ...
0
votes
1answer
36 views

Does Wire use encryption-at-rest?

Does Wire employ encryption of data at rest? I generally consider Signal and Wire to be the best tools today for sending information privately between two parities. Both meet the marks on crypto, open-...
0
votes
0answers
32 views

FedRamp Moderate question about hashing MD5

If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate? BR
0
votes
0answers
65 views

VeraCrypt analogs that support unsafe shutdown?

I am completely satisfied with Veracrypt except for one thing. If you open a Veracrypt volume, write something there or deleting. And then you use unsafe shutdown (for example, using the RESET button ...
0
votes
1answer
149 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
0
votes
0answers
134 views

Are emails sent from ProtonMail to Tutanota (or vice versa) ever not encrypted?

Both mail accounts, ProtonMail and Tutanota are encrypted, and as the knowledge base from ProtonMail states, ‘emails from ProtonMail users to non-ProtonMail users’ are ‘otherwise encrypted with TLS if ...
0
votes
1answer
61 views

Storing a key in a symmetric encryption for password manager using cryptography module

I am making a password generator and manager, I make a the user create login information, I hash their password. I then generate the password and I encrypt the password with a key that is stored ...
0
votes
0answers
36 views

Is state management of deciphered data a security risk?

I'm not sure if I have my terminology right here or that my question is accurate, I will expound here: Homomorphic encryption seems to be impractical but from my limited knowledge looks like the only ...
0
votes
0answers
77 views

Bitlocker TPM + PIN vs pre-boot DMA attack

In this link there are talks about pre-boot DMA attack: https://eclypsium.com/2020/01/30/direct-memory-access-attacks/ If the user would have a Bitlocker TPM + PIN enabled, would an attacker with a ...
0
votes
0answers
52 views

DigitalOcean Spaces for personal backups

Sorry for the naive question. I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups. I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
0
votes
0answers
41 views

How safe is using iMessage in China WITHOUT iCloud?

I know that Apple has moved to local iCloud hosting in China as of 2018 but what is the implication to using iMessage without an iCloud account setup? Not sure if I'm reading it correctly but this ...
0
votes
0answers
37 views

Advise a data encryption scheme/model

I have wondered around and am unable to come out with a proper solution for the below requirements, would seek your kind advice. It is similar to Which strategy to encrypt data accessed by multiple ...
0
votes
0answers
84 views

What are the benefits of using Azure RMS with DKE instead of BYOK/HYOK?

I'm trying to understand the Azure RMS solution. From my understanding, files are encrypted with a symmetric key, and that symmetric key + access policies are encrypted using the company key. The ...
0
votes
1answer
69 views

How to encrypt data so only clients can read, but not the server

I am building a system where the clients should be able to communicate with each other. However I want all the data to be hidden from the server where the information is stored in a database. How can ...
0
votes
0answers
30 views

Secure memory buffer

We are designing a Python application and we need to "load" encryption secret key in "memory" at the application boot. It can be also an admin pin code. Anyway, just some data. Our ...
0
votes
0answers
56 views

What encryption protocol is Kleopatra using to protect the private key?

What encryption protocol is Kleopatra using to protect the private key? I checked PGP RFC document and found out different protocols can be used, it's up to the software developer. Has anyone be able ...
0
votes
1answer
67 views

Is Array.Clear() in C# suitable for zeroing sensitive byte arrays?

Is it worth calling Array.Clear() to clear sensitive byte arrays such as those containing encryption keys? It's not clear whether this is worth doing since the language has a garbage collector.
0
votes
0answers
26 views

Does this seem like a secure way to transfer wireless data from a keyboard to a host?

I'm making an adapter to convert a wired keyboard I have into a wireless keyboard. I am going to use nRF2401 modules for wireless with some STM32 microcontrollers. I'm trying to come up with a method ...
0
votes
0answers
50 views

How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)

I have a private file encryption project that I'm working on that currently uses Encrypt-then-MAC. However, I've been looking at age and the article that's referenced in the spec that discusses ...
0
votes
0answers
43 views

Asymmetric Encrypted Container

I'd like to set up a remote backup for my PC. I want to have it run at scheduled times, encrypting the data locally and then transmitting it to the server. I'd like to use something popular and open ...
0
votes
0answers
27 views

Seamless Key Management with Key Management Systems?

I'm keeping it vague on purpose so that it can help other cases as well. Goal The goal is to store information that is encrypted on client side and then delivered to the database. Server should never ...
0
votes
1answer
84 views

Storing Bob encrypted data, and send them to Alice (who must be able to decrypt the content)

I need to develop a website where a user (Bob) send text, image, or video content to my website. After some time, I need to send this data to another user of his choice (Alice). I want to encrypt user ...
0
votes
0answers
42 views

Where to start with HIPAA Compliance?

I am trying to build an open-source EHR system with a database to store patients, doctors, and hospitals' information. I can design the database and build the actual system with the basic security in ...
0
votes
0answers
49 views

How to deal with new clients in a hybrid encrypted database?

I'm working on a private project and I'm not really sure about hybrid encryption. I am not a security expert but just a student. Background: I'm working on a project that uses couchDB as a database in ...
0
votes
0answers
281 views

How secure is LUKS encryption?

I have encrypted a hardsik with a 12 charachter random alphanumeric passwrod using LUKS encryption on Ubuntu 18.04 on a 2.5" SATA disk partitioned with ext4. I'm wondering how secure is such ...
0
votes
0answers
32 views

Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?

Assume we use AES256 to encrypt the same payload 100 times, each with a different key. An attacker gains access to the 100 encrypted payloads, and nothing else. Is there some way the attacker can gain ...
0
votes
0answers
24 views

Odd, worrying alert. What if I use same AppleID with different MacOS logins? Safe (in terms of security and data corruption) to do?

Odd, worrying alert: So I have an install of Catalina that isn't my main installation, and doesn't have a copy of my main login on it, hence I'm logged in using another admin-level account (shown) ...
0
votes
0answers
140 views

How to best store the password for Keepass for a python bot that runs in Windows?

I have a python bot that runs in Windows 10 and accesses Keepass with a password. I'm wondering what would be the correct way to store and access this Keepass password. Currently, the Keepass password ...
0
votes
0answers
38 views

Payload Security for Single Page app to back end REST Services

We have an application with HTML5, CSS3, Angular, single page or progressive, which depends stateless on the backend for APIs. If the payload has private PII Data, the recommendation is to encrypt the ...
0
votes
0answers
44 views

Deciding the kind of key required for implementation of monitoring software

Different companies seek permission to start and run, from our organization. I am approval or permission-giving authority. I am having an inspector who goes to different places and visits companies ...
0
votes
0answers
78 views

Saving secrets (API-keys for external application) per user in database (PKI?)

I'm developing a web-app which communicates with an external email message application through its HTTP API. My web-app consists of a JS (Svelte) front-end and a Node.js back-end. Each user on my app ...

1
5
6
7 8 9