Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Encryption is the process of transforming plaintext using a cipher into ciphertext to make it unreadable to anyone except those possessing the key. Decryption is the process of transforming that ciphertext back into plaintext, using the key.
1
vote
Accepted
What is the most paranoid way to exchange messages?
Using SSL is the most reliable way to exchange information securely; it not only takes care of the key-exchange and message encryption, but also message authentication (ie, man-in-the-middle attacks). …
2
votes
Encoding multiple fields with same AES key and vector?
Speaking in broad strokes, reuse of the key is fine - reuse of the IV: not fine. From wikipedia: "Properties of an IV depend on the cryptographic scheme used. A basic requirement is uniqueness, which …
2
votes
Use of PBKDF2 when no access to HKDF?
If you are going to generate a MasterKey with a CSPRNG, and securely store/retrieve it when encrypting/decrypting, I see no need for a key derivation function of any kind. I suggest you just use the k …
1
vote
Total password count, given length and pool size
Possible combinations (permutations) = sequenceOptions to the power of sequenceLength
Assuming a pool of 95 sequence options
sequenceLength 0 = 0 permutations (950)
sequenceLength 1 = 95 permutatio …
0
votes
Key derivation using the main AES encryption key and some plain text?
It would be better to use your main key to derive two separate keys, one for encryption, and one for HMAC... and using the info parameter to distinguish the two keys. …
8
votes
Accepted
How can encryption software accept password lengths which are not one of the AES key lengths?
I imagine that Truecrypt uses a KDF, to derive a 128/192/256-bit key from your password. This is standard practice. It's unadvisable to use a password directly, as they're generally low-entropy (pre …
1
vote
Hybrid encryption for MQTT payload?
I'm not endorsing your encryption scheme (because frankly it sounds dubious), but libsodium's Public-key authenticated encryption sounds like what you're looking for. …
17
votes
How much security is gained from hiding the nonce?
This advice may not seem intuitive, similar to how one may naively think that double-encryption increases security. …
12
votes
Accepted
What is the correct way to implement PBKDF2 + AES CBC + HMAC?
If it's available to you, you might want to consider a mode like GCM, which takes care of encryption and authentication for you with a single key. …
9
votes
Accepted
Secure AES Key Generation via Salsa20?
As stated in the comments, /dev/random already produces cryptographically secure random bytes which are perfectly adequate for use in encryption keys. …
2
votes
How can mega store my login details and still be secure?
So assume that half of the output becomes the encryption key for your symmetric key, and the other half is stored to identify you when you log-in. …