Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 4557

Encryption is the process of transforming plaintext using a cipher into ciphertext to make it unreadable to anyone except those possessing the key. Decryption is the process of transforming that ciphertext back into plaintext, using the key.

1 vote
Accepted

What is the most paranoid way to exchange messages?

Using SSL is the most reliable way to exchange information securely; it not only takes care of the key-exchange and message encryption, but also message authentication (ie, man-in-the-middle attacks). …
hunter's user avatar
  • 4,007
2 votes

Encoding multiple fields with same AES key and vector?

Speaking in broad strokes, reuse of the key is fine - reuse of the IV: not fine. From wikipedia: "Properties of an IV depend on the cryptographic scheme used. A basic requirement is uniqueness, which …
hunter's user avatar
  • 4,007
2 votes

Use of PBKDF2 when no access to HKDF?

If you are going to generate a MasterKey with a CSPRNG, and securely store/retrieve it when encrypting/decrypting, I see no need for a key derivation function of any kind. I suggest you just use the k …
hunter's user avatar
  • 4,007
1 vote

Total password count, given length and pool size

Possible combinations (permutations) = sequenceOptions to the power of sequenceLength Assuming a pool of 95 sequence options sequenceLength 0 = 0 permutations (950) sequenceLength 1 = 95 permutatio …
hunter's user avatar
  • 4,007
0 votes

Key derivation using the main AES encryption key and some plain text?

It would be better to use your main key to derive two separate keys, one for encryption, and one for HMAC... and using the info parameter to distinguish the two keys. …
hunter's user avatar
  • 4,007
8 votes
Accepted

How can encryption software accept password lengths which are not one of the AES key lengths?

I imagine that Truecrypt uses a KDF, to derive a 128/192/256-bit key from your password. This is standard practice. It's unadvisable to use a password directly, as they're generally low-entropy (pre …
hunter's user avatar
  • 4,007
1 vote

Hybrid encryption for MQTT payload?

I'm not endorsing your encryption scheme (because frankly it sounds dubious), but libsodium's Public-key authenticated encryption sounds like what you're looking for. …
hunter's user avatar
  • 4,007
17 votes

How much security is gained from hiding the nonce?

This advice may not seem intuitive, similar to how one may naively think that double-encryption increases security. …
hunter's user avatar
  • 4,007
12 votes
Accepted

What is the correct way to implement PBKDF2 + AES CBC + HMAC?

If it's available to you, you might want to consider a mode like GCM, which takes care of encryption and authentication for you with a single key. …
hunter's user avatar
  • 4,007
9 votes
Accepted

Secure AES Key Generation via Salsa20?

As stated in the comments, /dev/random already produces cryptographically secure random bytes which are perfectly adequate for use in encryption keys. …
hunter's user avatar
  • 4,007
2 votes

How can mega store my login details and still be secure?

So assume that half of the output becomes the encryption key for your symmetric key, and the other half is stored to identify you when you log-in. …
hunter's user avatar
  • 4,007