New answers tagged

0 votes

why is gpg subkey getting a warning

It seems that you have imported the keys into current gpg instance and haven't updated trust of the key. You can use gpg --edit-key user123@test.com gpg> trust gpg> save to set trust of your ...
user avatar
  • 101
0 votes

How to get Future Keys (Session Key) from IPEK for decryption data?

I don't need to get Future Keys. I already have BDK and KSN, I need to make it to Format20 when calling encrypt/decrypt command. The function will automatically derive the appropriate key from BDK for ...
user avatar
1 vote

Military-grade encryption on Blu-ray discs?

BD-Rs do not natively support strong password-based encryption. They are merely a medium that data can be stored on. DRM in video is the closest you'd get to encryption, and it is designed simply to ...
user avatar
  • 64k
0 votes

How does bitlocker work when unlocking a removable drive on another PC using a password?

I've found the answer here: https://blog.elcomsoft.com/2020/05/unlocking-bitlocker-can-you-break-that-password/ Finally, we are there. BitLocker passwords are used to protect volumes stored on ...
user avatar
  • 113
1 vote

How does bitlocker work when unlocking a removable drive on another PC using a password?

BitLocker defaults to using 128-bit AES for encryption, and can be configured to use 256-bit AES. The data is not directly encrypted with the key stored in the TPM nor with the password, but those are ...
user avatar
  • 15.9k
1 vote
Accepted

Does my receiver have a public key for email encryption?

I figured it out. Even if receiver's service could generate his public key and hand it over to me for encrypting the letter, then this service would also have the private key and thus be able to ...
user avatar
  • 11
0 votes
Accepted

What are symmetric and asymmetric encryption and what would be a good example from daily life?

I have provided examples from daily life since simply the difference between the types is a question that has been thoroughly discussed on the internet and on this site. Symmetric You put the document ...
user avatar
  • 1,128
1 vote

P-384 vs. SHA384

These are two different ciphersuites. With regard to ECDHE_RSA_WITH_AES_256_GCM_SHA384 - the SHA384 component is the hashing algorithm used to ensure data integrity during the TLS handshake With ...
user avatar
  • 19.4k
1 vote

Does my receiver have a public key for email encryption?

So if I have a public key, will my receiver's email service automatically generate a public key for his mailbox so that my letter to him could be encrypted? No, it would be like shipping a letter to ...
user avatar
  • 50.5k
1 vote

Why is one-time pad informationally secure?

Instead of thinking of decrypting a single message, think of that idea of "breaking" the code. Suppose we have an algorithmic cypher, a hundred messages encrypted using it, and a mega-...
user avatar
1 vote

OS on external drive -- is it safe?

The point of encrypting the disk is so that data at rest can't be accessed. In other words, if the disk is physically stolen or tampered with (evil maid attack), or some malware tries to use or ...
user avatar
  • 999
11 votes

Why is one-time pad informationally secure?

MechMK1 answer is a very good explanation and I just want to make some additions: Yes, if the cipher text is 5 Bits your adversary has learned that the message was 5 bits. Especially, he has learned, ...
user avatar
  • 308
2 votes

How is the stream cipher key shared on GSM?

Symmetric Stream ciphers use the flip-flop machinery to start (a true random generator imho) Not sure what you mean by "flip-flop machinery", but a stream cipher is not a true random number ...
user avatar
  • 10.8k
3 votes

Does any real world protocol makes use of the associated data in AEAD?

Yes, absolutely. TLS uses the additional data to authenticate the packet header (RFC 8446 § 5.2). TLS 1.2 included sequence number in the additional data computation because doing so prevents replay ...
user avatar
  • 6,655
1 vote
Accepted

Does any real world protocol makes use of the associated data in AEAD?

I've designed a system or two that used AEAD. I borrowed it as good practice from smarter crypto guys than me. For instance, it's very useful to tie cipher text in a key:value datastore to it's key ...
user avatar
4 votes

Always leaking ext4 superblock

As a practical matter, every encrypted data container is going to have some sort of unencrypted (but possibly authenticated) metadata to help identify it and extract important information, like ...
user avatar
  • 6,655
4 votes
Accepted

Are self-signed certificates better for local usage?

I would advise you a third way: use a private CA. A true public CA is a complex thing because in order to be trusted you must publish your policies and have your root CA accepted by major browsers. ...
user avatar
1 vote

Secure data (+ private key) storage in an insecure public cloud environment

I'm sure there's a few security professionals that can spin stories about "military grade" security. So you want to encrypt data and process it with zero insider threat? What you're looking ...
user avatar
0 votes

Can third-party authentication yield a static user-specific encryption key?

Unfortunately, this can't be done directly, certainly not if you want the server to never see or be able to derive the user's key even using ephemeral data. As you noted, identity provider / OAuth ...
user avatar
  • 38.7k
0 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

I have complete faith in VeraCrypt. On each of my computers, I have created a VeraCrypt folder and copied the User folders (Docs, Pictures, Videos, etc.) into it. From then on, I only use the User's ...
user avatar
3 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

You might be able to set an ATA password for the SSD(s). I believe that most desktop UEFI/BIOS firmware implementations do not have an option to do that (laptops generally do), but you might be able ...
user avatar
  • 131
0 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

If there is one important thing that could be learnt from reading stories written by employees and owners of computer repair shops, it is that such shops cannot and should not be trusted because a ...
user avatar
4 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

One approach is to use a bootable USB drive to erase everything on the SSDs and hard drive. Then erase free space on those devices using something like cipher.exe /w for a HDD or an SSD-specific tool ...
user avatar
1 vote

Need to leave computer in repair shop. How can I secure solid state drive contents?

Take out the SSD hard drive then go get another SSD hard drive that is the same as that one and put that in the spot where your ''sensitive'' SSD is then let them install the power supply when you get ...
user avatar
  • 11
11 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

I work at a computer repair place. It would really help if you told us what kind of work you're having done on it. You mentioned replacing the power supply; is that all that's being done? Because, yes,...
user avatar
15 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

For the most part, you can't. If you want to be able to trust that your computer hasn't been tampered with, it needs to remain in your physical custody. I know someone told you this before and you ...
user avatar
6 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

I have multiple SSDs in the PC. Cool, take a picture and print it. I considered just taking the SSDs out Yes, do this. If you're afraid of breaking something then have the technician remove them ...
user avatar
25 votes

Need to leave computer in repair shop. How can I secure solid state drive contents?

Swapping the SSDs for blank (or at least empty of anything-you-care-about) ones would work, though of course then you'd have to swap them back afterward and that has some potential to mess up the ...
user avatar
  • 38.7k

Top 50 recent answers are included