Questions tagged [cryptography]
Cryptography is the collective term for algorithmic techniques used to secure data from unauthorized entities.
120
questions
0
votes
1
answer
22
views
Duplicity cron not working
I'm trying to run Duplicity backups via a cron script with --encrypt-key and a GNUPG key ID (from gpg --list-secret-keys).
It's failing with /root/backup.sh: 5: --encrypt-key: not found but if I ...
0
votes
1
answer
37
views
Are RSA and ECC certificates interchangeable?
Can I use a ECC certificate if a service/software (according to documentation) requires an RSA certificate? Does the software need explicit ECC support?
1
vote
1
answer
43
views
How can I use zero-knowledge proof as a user to encrypt a text document?
I have a text document for which I don't want to reveal the whole contents, but I want to release some information about it in advance to claim the originality later. For example, if the text document ...
0
votes
1
answer
80
views
How to convert this file into PNG
I have a file with no extension (as far as I can tell) that consists of special symbols. (File: https://drive.google.com/file/d/1h9MuUDfDtGEneEzZMNKLKWwY7JjZlBTS/view?usp=sharing)
Here're a couple of ...
0
votes
0
answers
62
views
Using Yubi Key to decrypt data on remote server
I'm trying to use a Yubi Key to decrypt data on a remote server that I authenticate to by ssh.
I forwarded the gpg-agent, the gpg-agent.conf is:
enable-ssh-support
default-cache-ttl 60
max-cache-ttl ...
0
votes
1
answer
18
views
UEFI Encrypt disk on boot
I want to make UEFI/UFI encrypt disk with AES on boot, is it possible?
If yes, how can it be done?
0
votes
0
answers
13
views
Freelan VPN Configuration to use with a hardware e-tokens
I am looking for suggestions to store the node specific private key securely for use with freelan VPN.
The Freelan sample configuration expects to find the private key at a file system location.
Is it ...
0
votes
1
answer
652
views
How can I convert my plain text (r,s) signature to a format that openssl can verify?
I have my (r,s) in the following format: ["r","442ca7cb054a9862ed93848cc13e0134968eba79db89e0e6f9ded510149aacd1","s","...
0
votes
1
answer
42
views
How is the certificate encrypted?
I want to get an Apple CA certificate from the link https://setup.icloud.com/setup/qualify/cert?ver=P1.10.1 but I get an unclear file.
How is it encrypted? Or how can you open it? i tried to save it ...
1
vote
1
answer
148
views
How should eMMC RPMB shared keys be stored?
Storing data in the eMMC Replay Protected Memory Block (RPMB) requires use of a shared key. RPMB read/write operations utilize the shared key to generate a Hashed Message Authentication Code (HMAC).
...
-1
votes
1
answer
63
views
Cant we use md5 like hash algorithms to store big data?
i've read a paper about how hash algorithms word in general and i saw one strange thing.
MD5 input length is unlimited and the output length are always the same
so isn't that mean you can turn any ...
0
votes
0
answers
80
views
How to do a clean installation of Windows 10 while keeping BitLocker enabled?
I didn't want to have to disable the bitlocker to format the PC, because that would definitely make it possible to recover data that has not been rewritten, and I value the security and privacy of my ...
2
votes
1
answer
504
views
How to blacklist certain ciphers and key exchange algorithms in ssh and sshd
To get a list of all supported algorithms, I can run ssh -Q kex, which on my machine outputs
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-...
1
vote
0
answers
22
views
How can one disable supported crypto groups in Firefox's TLS support
I know how to enable/disable a particular cryptosuite in Firefox, with the settings like security.ssl3.rsa_des_ede3_sha in about:config. But I can't find how to do that with supported field groups, ...
1
vote
1
answer
47
views
How to use b2sum in keyed mode?
Considering using Blake2 (perhaps b2sum) in conjunction to openssl dgst -sha512 -hmac $key but I don’t see an option to enable keyed mode.
0
votes
0
answers
43
views
How to verify sender email address is really the one displayed?
.Hi experts,
There are ways to fake the sender email address as I have read.
Meaning that if you receive an email, then the"from" email address visible on the frontend in your email client can in ...
1
vote
1
answer
689
views
Generate entropy to create RSA keys
I was wondering on how I could make my server as most secure as possible. I use OpenSSH to connect to it, using RSA keys. However, something bothers me about that method: to generate the RSA keys, I ...
1
vote
1
answer
64
views
Generating (pseudo) random numbers from a log file (eg. /var/log/maillog)
First: I really know that a true random number generator should have real random input, like something that is impossible to predict.
Now, consider this: A busy mail-server can generate tens of ...
1
vote
0
answers
320
views
What is C# RSACryptoServiceProvider doing under the hood when Encrypting using RSA?
When I drill down into the .Net source code I cannot find the code that actually runs when rsa.Encrypt is called, maybe it's running code within a DLL because I cannot find where the method is ...
1
vote
0
answers
44
views
How can I run John Walker's ent program effectively on some data streams?
So the original ent program can be found here. The website doesn't give me a sufficient explanation, so I ask, how can I use this program effectively on Windows?
2
votes
0
answers
324
views
Convert Openssl explicit ECC public key to named curve public key
While generating ECC keys using OpenSSL we can specify whether we want explicit public key info or named curve.
Named Curve: openssl ecparam -name secp256r1 -genkey -noout -out my.key.pem
Explicit ...
0
votes
0
answers
551
views
unknown tag 26 encountered bouncy castle exception
unknown tag 26 encountered
at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
at org.bouncycastle.asn1....
0
votes
0
answers
154
views
How to generate different public keys for each user in a system using openssl in linux?
I want to generate private public key pairs for each user(multiple users) in the system. I have the below code to generate that
RSA *rsa = RSA_new();
BIGNUM *bn = BN_new();
BN_set_word(...
1
vote
1
answer
341
views
Is there a device or executable on Windows that can provide cryptographically secure random bytes via CMD or Powershell?
Essentially, I'm looking for the Windows equivalent of /dev/urandom on Linux.
I know I can use Windows CNG via the C++ APIs, but no idea if there's an available (portable) method to access random ...
2
votes
1
answer
2k
views
Load key “ec256.pem”: invalid format is thrown on trying to generate public key from private key
I am trying to generate public/private key pair using ECDSA curve secp256k1
On generating public key from ec256.pem (private key) the following error is thrown
"Load key "ec256.pem": invalid format"
...
0
votes
0
answers
34
views
Encoding a PDF using matrix multiplication
I need to encode a patent application in a PDF file using matrix multiplication on Mathematica so I can save it on a cloud storage service so my partner can download the encoded file in Asia and ...
0
votes
1
answer
244
views
How can I show installed CSP's on my Linux system without using the cpconfig util?
How can I show a list of installed Crypto Service Providers without using cpconfig or csptest? How can I check if there's a CSP on the current Linux system? The system is not mine and I'm told to ...
2
votes
0
answers
486
views
What is the "TLS_GREASE_BA" cypher in TLS?
I've just ran a client test on SSL Labs Client Tester and my client reports as the favourite cipher suite a cypher named TLS_GREASE_BA with a null key length.
What is this cipher suite supposed to do?...
1
vote
3
answers
3k
views
How to use MPIR with Visual Studio?
I am an academic and I need to develop some numerical algorithms which require functions from a package called MPIR http://mpir.org/downloads.html. I downloaded the 3.0.0 version and I am trying to ...
0
votes
1
answer
54
views
HTTPS communication without requesting certificate
Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
0
votes
1
answer
1k
views
CertUtil | How CertUtil -verifykeys works internally?
I have a CA certificate in Local Machine Certificate Store.
When I run this command - enter code here
certutil -verifyKeys gives Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" ...
3
votes
1
answer
706
views
GPG/SSH: Making a key a subkey after the fact
I'm still new to GPG, SSH, and whatnot, and I'm not sure what best practice is.
I have a USB device capable of generating and holding GPG||SSH keys without them leaving the device. It also permits ...
-4
votes
1
answer
89
views
Can I use currency.js for commercial purposes? [closed]
I working on a cryptocurrency price tracker. I make use of the currency.js library. Can I use currency.js for commercial purposes?
-1
votes
1
answer
1k
views
create private key from ECDSA public key
Public ECDSA Key Hex :
04d6597d465408e6e11264c116dd98b539740e802dc756d7eb88741696e20dfe7d3588695d2e7ad23cbf0aa056d42afada63036d66a1d9b97070dd6bc0c87ceb0d
Public Address:
...
-1
votes
1
answer
572
views
Sapphire Nitro+ RX580 8GB Hynix Low hashrate?
I've got Sapphire Nitro+ RX580 8GB [Hynix memory] and it hashes on 21.9 mh/s out of the box without any overclocking or bios modding, as far as I know it should be higher around 24 mh/s, any ideas why?...
1
vote
1
answer
313
views
gpg2 --edit-key addphoto / keytocard without password prompt
I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
2
votes
1
answer
1k
views
gpg2 --quick-addkey without password prompt
I am trying generate in bash sub keys for a keyring without any keyboard interaction.
I have tried several approach around what is mentioned here
https://unix.stackexchange.com/questions/60213/gpg-...
2
votes
1
answer
485
views
Windows 7 EFS, where are the FEK stored?
I feel confuse, I read from many technical doc from Microsoft and wiki. The FEK is generated for each file, and store in the file headers.
But refer to this blog windows-7-how-to-use-cipher-exe-a-...
1
vote
0
answers
3k
views
How to get RSA Public Key and Private Key and get the modulus and exponent in plain text?
A requirement needs me to
"Create or retrieve user’s RSA-OAEP key. There should be one
public/private key pair for each user for a device"
and send it to the server in this form:
{"modulus":"...
-2
votes
1
answer
54
views
Are forms of device encryption still bulletproof enough for the average user? [closed]
Even after drive and BIOS encryption, can the data on a device (i.e. a laptop) still be accessed by the thief? (if he/she doesn't have access to the token or password or linked key generator).
...
-1
votes
1
answer
3k
views
Can You Copy the RAM contents as-is to File-System on Windows [duplicate]
My question: Is it possible to copy the contents of RAM to the file-system? (Windows)
Additionally, is it possible to copy the RAM contents for a specific process?
Reason:
This largely revolves ...
0
votes
1
answer
194
views
How to Optimize a Dictionary / Word List?
I have a copy of a 4.09 GB wordlist / dictionary crackstation.txt. Just now the words and numbers are arranged in the usual order:
0123456789aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStT uUvVwWxXyYzZ
...
2
votes
1
answer
485
views
Security: Is the Raspberry Pi really stateless?
The Raspberry Pi has become very popular. Because it is rather cheap and simple it could be an attractive device for people living in so called developing countries.
However in many of these states ...
2
votes
1
answer
44
views
Can an application that writes any data in a file be suspicious to an antivirus?
I am developing an application that, in order to work, needs to download data from the internet and store it in a .dat file.
The problem is that some of that data is generated by other users. If a ...
4
votes
1
answer
20k
views
How to install openssl cryptographic library on Lubuntu
I'm trying to build cryptsetup 1.6.8 (or 1.7.0) from source using the openssl libraries instead of libgcrypt.
./configure --with-crypto_backend=openssl
I did install libssl-dev but it still gives me ...
0
votes
1
answer
119
views
Microsoft Certificate Store
I know that Microsoft Certificate store contains certificates with their corresponding private key. Now when using Microsoft certificate store, do we have to create it ? If yes then how ? or we get it ...
0
votes
1
answer
259
views
How am I to install the 32-bit version of Google's NaCl SDK?
I'm looking at playing with Google's Native Client SDK, so I've downloaded the tool to install it, installed pepper_46, and attempted to build the "getting started" project, and I was given the ...
1
vote
0
answers
548
views
How to transcode AES encrypted files with AWS Elastic Transcoder
I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
-1
votes
1
answer
1k
views
Corruption of a TrueCrypt file
Dear superuser people,
this is my first question on the site so if I'm doing something wrong I apologize in advance :-)
I've been using TrueCrypt for a few years now, not knowing they stopped ...
0
votes
0
answers
2k
views
AES encryption with plain text key using bash openssl
I am trying to encrypt a string using AES CBC. The output of the online tool (http://aes.online-domain-tools.com/) and the bash openssl command do not match. Can anyone help me with what I am doing ...