Questions tagged [cryptography]
Cryptography is the collective term for algorithmic techniques used to secure data from unauthorized entities.
0
votes
0answers
17 views
OTA updates with embedded linux and TPM [closed]
I am quite new to cryptography and security related stuff. We are working on a new project with Embedded Linux on the BeagleBone Black. We wish to implement a full root of trust during boot up using ...
-2
votes
0answers
45 views
Certificate expired on Windows XP
I am having some problems running or installing software that is supposed to work on Windows XP because some certificate that the operating system uses has expired. My questions:
(1) What exactly is ...
1
vote
0answers
26 views
What is the “TLS_GREASE_BA” cypher in TLS?
I've just ran a client test on SSL Labs Client Tester and my client reports as the favourite cipher suite a cypher named TLS_GREASE_BA with a null key length.
What is this cipher suite supposed to do?...
-1
votes
2answers
189 views
How to use MPIR with Visual Studio?
I am an academic and I need to develop some numerical algorithms which require functions from a package called MPIR http://mpir.org/downloads.html. I downloaded the 3.0.0 version and I am trying to ...
0
votes
1answer
40 views
HTTPS communication without requesting certificate
Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
0
votes
1answer
133 views
CertUtil | How CertUtil -verifykeys works internally?
I have a CA certificate in Local Machine Certificate Store.
When I run this command - enter code here
certutil -verifyKeys gives Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" ...
0
votes
0answers
23 views
GpgRuntimeError: [Errno 0] cannot select uid for signing: [GNUPG:] > ALREADY_SIGNED XXXX
Why does gpg throw this error? This occurs while signing a key. XXXX is the fingerprint
3
votes
1answer
184 views
GPG/SSH: Making a key a subkey after the fact
I'm still new to GPG, SSH, and whatnot, and I'm not sure what best practice is.
I have a USB device capable of generating and holding GPG||SSH keys without them leaving the device. It also permits ...
-4
votes
1answer
70 views
Can I use currency.js for commercial purposes? [closed]
I working on a cryptocurrency price tracker. I make use of the currency.js library. Can I use currency.js for commercial purposes?
-1
votes
1answer
485 views
create private key from ECDSA public key
Public ECDSA Key Hex :
04d6597d465408e6e11264c116dd98b539740e802dc756d7eb88741696e20dfe7d3588695d2e7ad23cbf0aa056d42afada63036d66a1d9b97070dd6bc0c87ceb0d
Public Address:
...
-1
votes
1answer
443 views
Sapphire Nitro+ RX580 8GB Hynix Low hashrate?
I've got Sapphire Nitro+ RX580 8GB [Hynix memory] and it hashes on 21.9 mh/s out of the box without any overclocking or bios modding, as far as I know it should be higher around 24 mh/s, any ideas why?...
1
vote
0answers
178 views
gpg2 --edit-key addphoto / keytocard without password prompt
I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
1
vote
1answer
321 views
gpg2 --quick-addkey without password prompt
I am trying generate in bash sub keys for a keyring without any keyboard interaction.
I have tried several approach around what is mentioned here
https://unix.stackexchange.com/questions/60213/gpg-...
3
votes
1answer
182 views
Windows 7 EFS, where are the FEK stored?
I feel confuse, I read from many technical doc from Microsoft and wiki. The FEK is generated for each file, and store in the file headers.
But refer to this blog windows-7-how-to-use-cipher-exe-a-...
0
votes
0answers
2k views
How to get RSA Public Key and Private Key and get the modulus and exponent in plain text?
A requirement needs me to
"Create or retrieve user’s RSA-OAEP key. There should be one
public/private key pair for each user for a device"
and send it to the server in this form:
{"modulus":"...
-2
votes
1answer
43 views
Are forms of device encryption still bulletproof enough for the average user? [closed]
Even after drive and BIOS encryption, can the data on a device (i.e. a laptop) still be accessed by the thief? (if he/she doesn't have access to the token or password or linked key generator).
...
-1
votes
1answer
1k views
Can You Copy the RAM contents as-is to File-System on Windows [duplicate]
My question: Is it possible to copy the contents of RAM to the file-system? (Windows)
Additionally, is it possible to copy the RAM contents for a specific process?
Reason:
This largely revolves ...
0
votes
1answer
102 views
How to Optimize a Dictionary / Word List?
I have a copy of a 4.09 GB wordlist / dictionary crackstation.txt. Just now the words and numbers are arranged in the usual order:
0123456789aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStT uUvVwWxXyYzZ
...
3
votes
1answer
260 views
Security: Is the Raspberry Pi really stateless?
The Raspberry Pi has become very popular. Because it is rather cheap and simple it could be an attractive device for people living in so called developing countries.
However in many of these states ...
3
votes
1answer
38 views
Can an application that writes any data in a file be suspicious to an antivirus?
I am developing an application that, in order to work, needs to download data from the internet and store it in a .dat file.
The problem is that some of that data is generated by other users. If a ...
3
votes
1answer
10k views
How to install openssl cryptographic library on Lubuntu
I'm trying to build cryptsetup 1.6.8 (or 1.7.0) from source using the openssl libraries instead of libgcrypt.
./configure --with-crypto_backend=openssl
I did install libssl-dev but it still gives me ...
0
votes
1answer
95 views
Microsoft Certificate Store
I know that Microsoft Certificate store contains certificates with their corresponding private key. Now when using Microsoft certificate store, do we have to create it ? If yes then how ? or we get it ...
0
votes
1answer
224 views
How am I to install the 32-bit version of Google's NaCl SDK?
I'm looking at playing with Google's Native Client SDK, so I've downloaded the tool to install it, installed pepper_46, and attempted to build the "getting started" project, and I was given the ...
1
vote
0answers
430 views
How to transcode AES encrypted files with AWS Elastic Transcoder
I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
-1
votes
1answer
776 views
Corruption of a TrueCrypt file
Dear superuser people,
this is my first question on the site so if I'm doing something wrong I apologize in advance :-)
I've been using TrueCrypt for a few years now, not knowing they stopped ...
0
votes
0answers
1k views
AES encryption with plain text key using bash openssl
I am trying to encrypt a string using AES CBC. The output of the online tool (http://aes.online-domain-tools.com/) and the bash openssl command do not match. Can anyone help me with what I am doing ...
2
votes
1answer
2k views
Enable SCHANNEL Protocols in Windows Registry (Win7 & 2012R2) DisabledByDefault or Enabled?
I have enabled TLS 1.0/1.1/1.2 protocols on my local Win7 machine and 2012R2 server as well as disabled SSL 2.0/3.0 using the registry DWord value DisabledByDefault = 0 based on the following ...
0
votes
1answer
74 views
Encrypting multiple drives on a multi-boot system
So I am building a new system and I want to fully encrypt it, problem is I am not really sure how since I never encrypted anything bigger than a folder or zip. The build includes a Samsung 850 EVO-...
1
vote
1answer
677 views
What's the difference between certificate and credentials?
What's the difference between digital certificate (e.g. .pem or .der files) and credentials (e.g. .pfx files)?
1
vote
3answers
64 views
How can I cryptographically verify that someone owns the website they claim to?
More specifically, can I get them to sign a string of text with their x509 private certificate and then I can verify it using the public cert used by the website in question? Perhaps I could supply ...
8
votes
0answers
2k views
get x and y components of ec public key using openssl
I am generating a KeyPair for ECC from curve 'secp128r1' using openssl
Steps I followed :
first I generated a private key using the command
openssl ecparam -genkey -name secp128r1 -noout -out ...
2
votes
0answers
72 views
3DES_CMAC encryption using online tools or OpenSSL
I have a smart card that claims that its mutual authentication is based on 3DES_CMAC algorithm.
In the first step, the user sends a random number to the card and the card calculate the encrypted ...
5
votes
2answers
3k views
Beaglebone Black OpenSSl crypto acceleration
I'm running Debian Wheezy at my Beaglebone Black. Is OpenSSL using the hardware crypto accelerator by default? If no, how can I enable it?
-2
votes
1answer
62 views
Cipher challenge [closed]
So I was recently challenged by someone to solve this cipher. I am not entirely sure which section of the stack exchange this belongs but I think that this is ok for superuser.
Below is the cipher (...
0
votes
1answer
41 views
Looking for new way to create password [closed]
I tend to use same 2-3 passwords for all sites and want to change that but want to make sure I standardize my new approach as well.
Looking at password hashing and I know very little other than what ...
11
votes
2answers
5k views
GnuPG / OpenGPG: Recovering public key from private key
I know that the public SSH key can be recovered from the private using ssh-keygen -y.
How can a (deleted) public key be recovered from the private key in GPG (preferably in a way that is OpenGPG ...
1
vote
1answer
692 views
Can I use a “Microsoft Office” Digital ID / certificate to sign PDFs in Adobe Acrobat?
I've been needing to sign PDFs lately - fortunately everyone's been fine with me using a self-signed certificate, however I feel it's unprofessional. I'm looking for a personal certificate I can use ...
3
votes
2answers
1k views
gpg2 - no option to select aes block cipher and outdated use agent?
With OpenSSL, I can select a what type of block cipher to use for encrypting a file.
For example, if I want to encrypt a file with AES256 CBC block cipher mode:
openssl aes-256-cbc -a -salt -pass ...
2
votes
0answers
169 views
Viewing and listing keys in MSCAPI CSP containers
I have a MSCAPI container created and hosted within a Windows Server 2003 environment. How do I use the command line to list keys and their details within the container onto the command line ?
0
votes
1answer
405 views
gpg keyserver duplicates signatures on my key
I created a new GPG key (rsa + rsa subkey), let's call it key1, and uploaded it to the keyserver. It has two uids.
Later I signed this new key with another key (let's call it key2), and uploaded the ...
0
votes
1answer
1k views
Is it possible to stream live audio/video safe from duplication/copying?
What I'd like to do is play an audio file exactly once and then it should not be possible to play it again. Is there such a file format or function? The scenarios I had was 1) Some famous music group ...
1
vote
2answers
744 views
Generate a public key certificate signed by CA with OpenSSL
I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
1answer
2k views
How to get system-wide use of Intel's AES-NI acceleration with OpenSSL 0.9.8?
I found the following instructions to get Intel's contrib OpenSSL 0.9.8 engine code on some Westmere-based systems that we have:
$ wget https://www.openssl.org/contrib/intel-accel-1.5.tar.gz
$ tar -...
1
vote
0answers
64 views
CryptoLocker Ransomware. Can you recover files? [duplicate]
Today one of our PCs got infected with nasty CryptoLocker trojan crap.
The PC was a Windows XP machine with up-to-date NOD32 a/v. As you probably know the virus encrypts your file with an 2048 bit ...
0
votes
1answer
2k views
Enable GPU for cryptocurrency mining while running monitor off IGP?
Users in the cryptocurrency community usually solve this by either:
-Using DVI-A or such to vga adaptor and make a dummy plug with resistors. However, all my hardware run with DVI-D. Vga adaptors don'...
5
votes
3answers
17k views
OpenSSL ECDSA sign and verify file
I would like to sign and verify a pdf with elliptic curve. I got some code but it dosen't work.
Create private key:
openssl ecparam -genkey -name secp384r1 -noout -out private.pem
Create public key:...
-2
votes
2answers
102 views
Is it possible to generate a file from a md5sum (or sha1 or such)?
Is it possible to recreate a file if you have the files md5sum? Or is it only possible through brute-force?
Is it any differences between the different algorithms?
0
votes
1answer
56 views
Why would one want to tag the computer where a key pair was made in a public key?
While trying to give an host a bit more of security, i decided to switch to SSH key's authentication. To do so i followed this guide, but something makes no sense in my mind.
While the host is the ...
19
votes
3answers
7k views
Human-readable dump of gpg public key
Is there some tool to write out the actual content of a GnuPG public key in a way a human can unserstand? I mean not only ascii-armor which a human can read and type, but something which really breaks ...
0
votes
2answers
102 views
Hand creating a password using website name as salt [closed]
A while ago I read a blog on a method of creating passwords.
It was something along the lines of:
1) create a template password, with usual mix of chars, cases, etc.
2) use the website name the ...
