Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

The tag has no usage guidance.

0
votes
1answer
45 views

Encrypted ID to 3rd party application

I would like to ask you a questions that arose these days with GDPR new rules. What I have is a payments service which use BrainTree to make the payments. In my side I store some information ...
1
vote
2answers
110 views

securely store credentials for an unsecure API

I'm writing a slack bot that interfaces end users with an API. That API only method of identification is the raw "login:password" encoded to base64 (it doesn't answer back a token) ... Currently in ...
0
votes
2answers
479 views

Open source desktop application and security

I'm currently working on a desktop application in Java (using JavaFX). This application stores some user information, parts of which are sensitive. For example, if the user configures a proxy, it ...
1
vote
2answers
2k views

Keeping sensitive data encrypted in memory

I'm working in a Electronic Funds Transfer (EFT) system and need be very careful with sensitive data like credit card numbers. We need this information do mount the ISO 8583 data before sending to ...
0
votes
1answer
62 views

Thoughts on Data Encryption Strategy for Large Number of Records MongoDB and Azure Key Vault

I have previously implement Client Side Data Encryption using Azure Key Vault using the following approach: Encryption Approach: Every record that needs to be encrypted gets a Content Encryption Key ...
1
vote
1answer
334 views

encrypting a string with public key in client side and decrypt it in backend using private key

I have a client side android app which needs to send an encrypted string to a server implemented in PHP. For this I have chosen an asymmetric algorithm (RSA). Should I: Save a public key in client ...
5
votes
2answers
2k views

Easy Licensing enforcement techniques for C++ Program in Windows

I am developing software in Window 10 and Visual Studio in C++. I would like to restrict the use of the software to a set of computers, by implementing a license control. My thought is to query a ...
1
vote
0answers
47 views

How should I handle private key in decryption worker?

I own the development of a Sidekiq worker that decrypts thousands of gpg encrypted CSVs and loads them into the database. While not necessary, I'm using a gem to interact with the gpg/GnuPG binary. ...
0
votes
1answer
82 views

On an encrypted connection, are packets' destinations visible to a third-party?

Example: I'm in a coffee shop in Maine, using a VPN whose physical location is in Berlin. I know that my packets between Maine and Berlin are encrypted, so someone snooping on that coffee shop's ...
-2
votes
1answer
69 views

How to let users send to a link

I'm building for a client's service that allows developers to build client side forms, similar to formspree.io, etc. Basically, developers can set an action to their HTML forms which send the POST ...
1
vote
1answer
167 views

Should I encrypt my cookies using AES?

I'm going to encrypt the following data (server side): email, IP, username { *IP*: { email: *email at this IP* username: *username of email IP* } *IP2*: { email: ...
1
vote
2answers
960 views

Encrypt data in code or stored procedures?

I'm working on a Web App where the data is quite sensitive and is required to be encrypted before it is stored in the database. Now there are two ways through which I can achieve this: Encrypt data ...
3
votes
5answers
761 views

Should I encrypt mobile number and otp when sending to backend

I have a login page, where user logs in via his mobile number, He gets an OTP send via backend server, once he enters a One-Time Passcode (OTP), we hit an API like this: https://backend.com/api/login?...
-11
votes
1answer
432 views

I want to eliminate this obfuscation [closed]

I just separated the DLL file from the unity APK. The problem is that when I looked at the code using ilspy, the core code was obfuscated. Some obfuscated code content is shown below. private ...
-1
votes
1answer
183 views

Can RSA be used to secure client data before sending to server? [closed]

So one day i was reading about RSA and over there it was written that we can secure the data using the public key. So as an idea can I secure the data on the client itself before sending it to the ...
2
votes
0answers
143 views

RSA Private key renewal - How often?

Let's say I am using a RSA keypair to encrypt and decrypt a large amount of traffic over a public network. Assume all traffic is padded and the key is 2048 bits, how often would you recommend renewing ...
4
votes
3answers
825 views

Saving Passwords for autologin

I know I should encrypt the password whenever I save passwords for security. But I don't know how should I encrypt password that when I save for autologin. If the password was just for checking user,...
4
votes
5answers
519 views

Whats safest way to tell if decryption was successful?

I'm making a C program that uses GTK3 (best documentation ever) and OpenSSL (worst documentation ever) to simply encrypt/decrypt a file using a password. The encryption and decryption functions are ...
1
vote
1answer
2k views

Encrypting my data and keeping it safe in Unity

I have a RPG kit in the Unity Store and I wanted to add some protection for the consumers for when they want to save pretty much any information. From the gear the character is wearing to inventory, ...
0
votes
1answer
44 views

Managing encryption keys in an application with add-on components

I am developing a product that uses custom hardware with accompanying software. It requires additional components which are sold separately to make the overall application work. Using these ...
3
votes
2answers
66 views

Encrypting a folder used for serving images?

I have a Node.js application that reads and writes images from a server. The images are stored in a directory on an Ubuntu operating system. Express static routes serve images from that folder when ...
5
votes
2answers
129 views

Is it possible to validate code execution from a remote server?

I'm looking for a way to achieve some kind of code execution validation, so for example if I have a server and a client, I want the client to execute some code (assembly) and send the server ...
0
votes
2answers
635 views

How to prevent copy of my Java application's local multimedia content?

I have recently started a project where I need to make extensive use of videos and books. And all of them are needed to be stored locally. I want to be able to search all these books and get access ...
0
votes
1answer
332 views

Secure communication between a mobile app and a microcontroller

I have a MCU-based design that essentially controls other hardware and this MCU is controlled through an app. I was hoping someone could help me figure out how to secure this communication between the ...
5
votes
2answers
113 views

How to add users to a mapping table?

In the accepted answer to "Encrypting stored data for multiple unique users to access information", @lserni describes a mapping table for users. But among the operations for the table, they didn't ...
-1
votes
1answer
528 views

ASP.NET - Data Encryption & Decryption framework designs

I have the following app scenario where i would need to implement the cell-level encryption. Database - MS SQL Server Web Technology - ASP.net MVC Existing app scenario:- Currently the web ...
0
votes
2answers
95 views

How can I effectively design password authentication for encryption in my project?

I'm working on a small personal project that involves a user entering a password that would then allow them to view a text file that would otherwise be encrypted. I'm having trouble wrapping my head ...
1
vote
2answers
163 views

Best ways for startups to handle sensitive user information [closed]

Many companies struggle with even basic sensitive information handling. One screaming example I can give is the attack on TalkTalk's servers resulted as 4 millions customer's personal information ...
4
votes
2answers
858 views

Store encrypted data in XML

Context I work in the energy domain with devices that send data in clear text over some medium, that finally ends on a computer. The data is there decoded and stored in XML files. A current XML file ...
2
votes
1answer
109 views

How to encrypt communication without hard coding key in client?

I've found description of vulnerability here. The kankun smart socket device and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. ...
44
votes
13answers
10k views

Encrypted content in games

I have been having this idea of using encryption to prevent users from figuring out content in my program outside of the program itself. Like users may find textures never used in the game meant to be ...
2
votes
0answers
102 views

Windows Phone 8.1 & above - is there some equivalent for Apple's keychain

I want to store store some app specific secret on the phone - this should be available only for the app & no other app. I was looking at DPAPI - however, if the user does not have a logon ...
3
votes
1answer
841 views

Strategy for Public / Private API, Encrypted (or Hashed) Data, and Server Compromise

In this very simplistic but realistic scenario, I have 2 combo web/database servers (A) behind a load balancer and a single IP address. They also permit access only from one IP address -- the client (...
-1
votes
1answer
139 views

MS SQL Server Cell level Encryption options [closed]

Recently, i got the task of doing some research into the data encryption at the cell level. I tried using the Symmetric key (by passphrase) & second option i took is Symmetric key (by Certificate)....
0
votes
0answers
46 views

Client application and secure data exchange without ssl/tls

I have my own home server and port 80/443 is blocked from my ISP provider. I want to create a Qt gui application that saves my data on my server using REST (using port 8080 or something) using nginx/...
0
votes
1answer
93 views

Where should I put my key? [duplicate]

I have a Private Key that is regularly used to decode incoming files during off-business hours as part of an automated process. Currently, it is stored in the application code itself, and only ever ...
2
votes
2answers
2k views

matching usernames with their password

We are working on a simple login/registration form. Our login script checks to see if the username and password exist in the same row of the database. If it does exist, we bring the user to a welcome ...
1
vote
1answer
46 views

How to sign a document in LAMP environment?

I'm working on a LAMP environment (Linux-Apache-MySQL-PHP) and I need to sign documents (PDF, but maybe in a future, I'll use other formats so I'm interested in a general answer). These documents are ...
4
votes
1answer
872 views

Decrypt data on any Windows computer by same user

I have a license system which currently locks licenses to a physical computer using CryptProtectData (with CRYPTPROTECT_LOCAL_MACHINE) and CryptUnprotectData. This is of course not the entire license ...
2
votes
3answers
836 views

Where to store hashes, salts, keys in Desktop Applications

I am trying to figure out where or how i should store application secrets and keys inside a desktop application. For example a facebook app key or dropbox key and secret. So I've read that i should ...
0
votes
1answer
149 views

Is using digital signatures and bytecode machines a viable technique to make reverse engineering hard? [duplicate]

If I have a private key with which I sign byte code, and a public key with which I can decipher the signed code to verify its authenticity, can I protect that byte code from being reverse engineered ...
5
votes
2answers
1k views

Encrypting stored data for multiple unique users to access information

Developing a database for many users, and thousands more "people" in the database, one section requires we encrypt the personal data - Youth's information, medical information, etc. We have users who ...
1
vote
1answer
3k views

How can I encrypt or remove readability of source code before publishing it?

I am working on a collaborative project, for which I have to submit source code, which will be used/embedded in the main repository for re-compilation. Is there any way, I can encrypt the source code ...
29
votes
7answers
4k views

Is there any algorithm pattern to protect any content in the web to ensure I am the first one who created it?

A few years ago there was this hacker (don't remember who he was) that full disclosed a vulnerability in a given system, but to make sure nobody took credit for that, he created some kind of PGP key. ...
1
vote
1answer
349 views

How to protect an AES encryption key in shrinkwrapped software

If I want to do file encryption in a desktop piece of software I'm assuming I'll have to hardcode an encryption key in my compiled code. Is that assumption correct and if so what precautions can I ...
1
vote
2answers
1k views

PHP Source Code Encryption Concept

Scenario: I'm looking to protect my software that is written in PHP. The nature of PHP is that it is delivered as plain text and therefore cannot be protected by itself. I don't want to install libs ...
5
votes
3answers
9k views

How to implement simple secure client side encryption

I know these sorts of questions come up, but I couldn't find a simple answer, most of the answers are "don't do that" For play, I built myself a webapp, it uses sjcl to encrypt and decrypt notes on ...
-1
votes
1answer
117 views

Looking for encryption method [closed]

I have a blackbox system whose code is hidden from the end user. That's the intent anyway, I know some may break into it, but generally it's closed. It's running on PHP, and I need to export a ...
1
vote
1answer
3k views

Polymorphic engines in C and/or C++ [closed]

I stumbled across polymorphic engines and I don't know anything about them. However, I am curious about how they are written. Every example that I've looked up writes them in assembly, my assembly is ...
0
votes
1answer
4k views

VB.NET - Serial Key Generating (Encryption, Hashing, Encoding?) Algorithm

I am trying to create a basic licensing system where I take a unique ID from the client computer, and I get this Hexadecimal string (hyphens removed e.g. "84-18-CE-...."): "...