Skip to main content
Share Your Experience: Take the 2024 Developer Survey

New answers tagged

2 votes
Accepted

Why does the Signal Protocol use a symmetric key for encryption- when asymmetric keys are more secure?

You have downsides on both modes. Asymmetric encryption is much, much slower, so you would never encrypt anything larger than a key with it, and it can only encrypt data smaller than the key plus ...
ThoriumBR's user avatar
  • 54.4k
0 votes

Couldn't an HDCP bypass "attack" always be done losslessly, given a known compression algorithm was used?

The intent of HDCP is to prevent this attack. So, Vout will be an encrypted stream that can only be played on the device it was generated for. DRM tools will refuse to encrypt/send to a bypass ...
Brian's user avatar
  • 962
0 votes

Hash as filename to protect data

I don't see the approach much different from using a randomly generated hash for filename. The randomness can also be added with all the points you have mentioned (like user input, timestamp, etc...) ...
NeoAtlantis's user avatar
5 votes

Hash as filename to protect data

I would probably not use a hash to generate the file name, as these are deterministic, and someone might be able to guess the filename if they knew some or all of the data that went into the hash. ...
Roger Hill's user avatar
2 votes

Hash as filename to protect data

There are two and a half questions here (including your comments): Is it reasonable to use a content hash? Is it reasonable to mail the token around in standard (insecure) mails? Is it reasonable to ...
AnoE's user avatar
  • 2,409
1 vote
Accepted

Why is the boot key used to access the encrypted SAM database hashes?

While I haven't verified this, the password hashes (and other secrets) in the SAM (and other system-wide locations) are almost certainly encrypted using DPAPI (or see https://en.wikipedia.org/wiki/...
CBHacking's user avatar
  • 49.1k
18 votes

Hash as filename to protect data

The approach has several major issues. If anybody ever accidentally enables directory listing in the webserver configuration, all sensitive files immediately become public. That alone is sufficient ...
Ja1024's user avatar
  • 7,812
1 vote
Accepted

How does iOS / Android device encryption work?

Your understanding is incorrect. Modern iPhones have a separate hardware security module called the Secure Enclave. The Secure Enclave stores keys -- including the file encryption key -- without ...
Ja1024's user avatar
  • 7,812
19 votes
Accepted

Hash as filename to protect data

I don't really see what problem hashing the filename is trying to solve. If the filename is provided by the user, then it's unlikely to be unique, and the user is unlikely to remember exactly what ...
Gh0stFish's user avatar
  • 12k
5 votes

Is this solution I have programmed 100% hack-proof?

You're fixated on showing that the encrypted data on the server is secure. Sure, that may very well be the case. But the fact that AES has proven itself to be a solid encryption algorithm which will ...
Ja1024's user avatar
  • 7,812
2 votes

Is this solution I have programmed 100% hack-proof?

If I provided you the full admin credentials to the server, would you take on the challenge of trying to hack the data held on it? Or would you consider it a waste of time? Ciphertext only-attacks ...
vidarlo's user avatar
  • 16.5k
2 votes
Accepted

How does TLS-CRYPT-V2 work in OpenVPN?

TLS Crypt v2 doesn't have a key revocation mechanism by default, but you can implement one yourself based on key metadata. When you use TLS Crypt v2, you generate a unique key Kc for each client. ...
Ja1024's user avatar
  • 7,812
1 vote
Accepted

Hide password from server

Obligatory reminder: while it's fun and valuable to experiment with cryptography, don't use any cryptographic tool you haven't had reviewed by an expert (ideally multiple experts) for anything you ...
CBHacking's user avatar
  • 49.1k
1 vote
Accepted

relation passphrase and password-based key derivation

If you use the encoding type pkcs8 as recommended in the node.js documentation, then node.js will use the OpenSSL function PEM_write_bio_PKCS8PrivateKey. This function encrypts the private key with ...
Ja1024's user avatar
  • 7,812
1 vote
Accepted

Does having 2 different cyphertexts for the same plaintext help an attacker

If you're talking about a modern algorithm like AES, then encrypting the same plaintext with different keys does not weaken the encryption scheme or expose any of the keys. You can safely encrypt ...
Ja1024's user avatar
  • 7,812

Top 50 recent answers are included