Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with encryption
Search options not deleted
user 6939
Encryption is the process of transforming plaintext using a cipher to make it unreadable to anyone except those possessing the key.
1
vote
Can encryption twice with two keys in different sequences lead to the same result?
I'd suggest looking at homomorphic encryption algoritms for more, though I'm not sure they are actually commutative the way you want to (and probably not as strong as the ones that don't have this restriction …
- 2,935
1
vote
Accepted
Are there any serious problems with this method for generating single-use tokens?
I don't know the reasons behind your design, but I'd suggest taking a look at HMAC before implementing a custom solution. Assuming the server and the smart card share a strong key, you can generate a …
- 2,935
2
votes
certificate usage for signing and encryption
Certificates are useful because even if you have a key pair, that doesn't mean you can just send someone your public key and the receiver will know that you control the corresponding private key. Ther …
- 2,935
2
votes
Accepted
How to manage passwords in a multi-tenant surrounding?
Once authenticated, you can limit the data exposed to him, using whatever controls your application supports (e.g. filtering, permissions, encryption). … The article you linked suggests one approach, using encryption as part of its defence-in-depth:
When an end user logs on, the application uses impersonation to access the database using the tenant's …
- 2,935
4
votes
Storing passwords in reversible form - a genuine use-case
Derive a symmetric encryption key and an asymmetric key pair from it.
Keep these keys on RAM only, prevent swapping. …
- 2,935
3
votes
Accepted
PHP web application security
)
[1]: Just to name one, you could derive an encryption key from the user password, store it in a (secure) session cookie, and pass it back-and-forth from server to client. … it's not stored anywhere, an attacker won't gain access to it even if he got hold of the whole server (assuming of course your site properly salts and hashes passwords and the authentication key and encryption …
- 2,935
13
votes
3
answers
936
views
Can I use the same password both for SRP and for client-side encryption?
Suppose a less-than-trusted server is used to store users' confidential data (encrypted at the client side), and both tasks - authentication and encryption/decryption - should be doable with a single password … function and a trivial salt [1], yielding k;
Use k as the SRP "password", authenticating with the server and receiving the ciphertext;
Decrypt the ciphertext to get the actual key(s) to be used for signing, encryption …
- 2,935