New answers tagged

3

I don't agree that such information should be secret. Think of Kerckhoffs's principle. Security should be based not on the secrecy of method, but on the secrecy of the key.


3

Any given encryption system should be secure even if everything except the key is public. This is a basic principle of encryption as stated by Kerckhoffs. VeraCrypt for example offers the creation of "hidden volumes" which not only make it not obvious which encryption algorithm is used, but also hide that there actually is anything encrypted. Although ...


2

"Does the placement of the known characters make any difference?" Yes, it does make a difference and a rather significant difference. When it comes to information, the more the attacker knows the faster he can break it, as simple as that. If the attacker knows where a b c goes in your key, then again it is as good as, [][][][][] (5 chars, 0 known) is the ...


2

This sounds to me like a chosen ciphertext attack. The raw AES block cipher itself is secure against it. Any cipher you would see used in a modern setting is secure against it. Some AES implementations you would actually see in the wild are not secure against sidechannel attacks, meaning information about the computation which is not part of the function ...


0

There is at least one mobile password manager application that chooses not to totally trust the server run by the company who made the mobile application. The idea being that only the mobile phones that hold and synchronise the users “secret local database” replicated to each phone can decrypt the content or any messages exchanged via the server. The server ...


0

Your strategy has a few issues. It is a bit confusing, but I'll try to address: Firstly if you use the output of a hashed password as the input to something else, then you'll not be able to change passwords, since after this the output of the hashed password would be different and would therefore end up being a different key. Secondly, the premise that you ...


Top 50 recent answers are included