The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
4answers
801 views

Should I perform encryption in the front end or within the database?

I want to store an encrypted string (specifically, email addresses) in a database. I'm currently using Python and MySQL. I was initially going to use MySQL's AES_ENCRYPT/DECRYPT to handle it, but then ...
2
votes
1answer
324 views

Books or guides regarding secure key storage and database encryption [closed]

I have an idea for a SaaS product I want to create, however, this product will store extremely sensitive data that needs to be encrypted at rest. The trouble is not so much the encryption, but the ...
4
votes
3answers
2k views

URL Encryption vs. Encoding

At the moment non/semi sensitive information is sent from one page to another via GET on our web application. Such as user ID or page number requested etc. Sometimes slightly more sensitive ...
5
votes
3answers
4k views

How does a web browser save passwords?

How do current web browsers (or mobile mail clients and any software in general) save user passwords? All answers about storing passwords say we should store only hashes, not the password themselves. ...
0
votes
1answer
310 views

Best Practices To Build a Product Registration System?

What are some practices I should use in a product registration system I'm building? I likely can't stop all malicious hacking, but I'd like to slow them down a great deal. (Note, I know only PHP.) I'm ...
4
votes
3answers
399 views

Login into application at startup

Short version: I want "Login on program startup" checkbox like in Skype, for example, but don't know how to protect saved credentials securely. I'm writing client application which, before doing ...
2
votes
2answers
562 views

How to handle encryption key conflicts when synchronizing data?

Assume that there is data that gets synchronized between several devices. The data is protected with a symmetric encryption algorithm and a key. The key is stored on each device and encrypted with a ...
5
votes
3answers
6k views

How do I encrypt the source code on the webserver?

I have a web application developed using Python, HTML, CSS & JavaScript. The customer installs it in any of their own Machine and uses it through their LAN. In short the customer sets up the ...
21
votes
4answers
3k views

Programmers' concerns about export restrictions from the United States

Which aspects do I need to consider when designing and publishing software that must meet the US export restrictions for cryptographic software? Wikipedia says that there are various categories which ...
5
votes
4answers
424 views

Multiuser System With Encrypted Database

I am currently developing a hosted solution in ASP.NET using MVC3 and Entity Framework. This product will then be made available to a number of clients as a hosted solution. As the data stored by ...
4
votes
5answers
944 views

Paranoid Encryption

Call me paranoid, but I really like to keep my stuff secret, but readily available on the cloud. So, asking this question. How safe and reliable is encryption software (e.g., truecrypt)? The reason ...
2
votes
3answers
527 views

Do you know of any encryption techniques used to validate url redirection

I'm adding a click-tracking feature on my website to track click-thrus for my advertisers. So, on my site, instead of having a direct link, I link to my re-direct page passing the destination url as ...
1
vote
1answer
90 views

Random number for HTTPS MAC

Recently I found that Netscape used quite simple algorithm to generate random number for Message Authentication Code to establish an HTTPS connection (Nestscpe used time, process identification ...
11
votes
3answers
967 views

Where do you use ROT13?

I was reading through the docs for vim, and noticed there's a shortcut, for example g?w would transform the next word using ROT13. I also know that you can change the encoding of a Python file to ...
3
votes
3answers
352 views

How would I go about changing encryption methods on existing passwords?

If I have an application that is using a less secure method for storing passwords, such as SHA-1, how would I go about converting to SHA-256 or SHA-512?
5
votes
2answers
3k views

do I need French export compliance approval to submit an iOS app that uses encryption? [closed]

My company just (5th July 2011) received the following email from Apple: Starting in the first week of July, apps that meet the following criteria are required to comply with French ...
5
votes
2answers
600 views

Licensing issue for RSA and Rijndael algorithms

I'm using .Net to build a commercial application, i.e. a secure chat application. This application is using RSA and Rijndael algorithms. Do we need licenses for using RSA and Rijndael algorithms for ...
0
votes
5answers
249 views

How to handle the problem of modified encrypted files [closed]

I have a simple encryption/decryption application that I am testing to learn more about security. I found out that if the user modifies the encrypted file, then decryption fails because the hashing ...
0
votes
1answer
301 views

Legal Requirements for Software Makers

Since the Legal site of Stack Exchange isn't ready quite yet, I figured this would be the best place to ask this question. What are, if any, the legal requirements (or online resources for finding ...
0
votes
1answer
208 views

Is having decrypted compressed files in iPhone is a problem on submission?

I am about to submit an iPhone application. I do download Encrypted Zip files from a remote server and of course I do decrypt the files to view them to the user. Does that mean I need to answer YES ...
3
votes
2answers
388 views

What encryption method should I use?

I am looking for some information on encryption. Here's what I'm trying to do: Get unique information from our customer (an ID or something) Generate and encrypt some data on our side (using the ...
7
votes
2answers
277 views

Data encryption/protection - where to find info about high-level best practices [closed]

I feel that no one in the group I work in, myself included, really groks encryption and security, or the reasons behind making certain decisions. For example, we recently had a conversation regarding ...
10
votes
2answers
172 views

Saving critical data in (third party) databases

How do you save important(privacy-wise) user data like SSN, Credit Card Numbers and Addresses in databases? Scenario: Only data which needs to be available is saved. For eg, SSN is saved because the ...
5
votes
4answers
289 views

Copyright issues with encryption algorythms

I'm developing an application for Android/Java. This application is a kind of password manager, so I'm storing encrypted passwords under the hood of a master password. There are a number of encryption ...
3
votes
1answer
812 views

Are PGP keys as good for certificates as X.509 keys?

I'm working on a decentralized transaction processing system that needs both authentication and general encryption, and I have a design decision to make: should I use PGP or X.509 certificates? While ...
6
votes
3answers
581 views

Cross border data obfuscation and how to deal with it?

I am currently facing a situation where I will need to obfuscate data for legal reasons (these are countrywide rules and not specific to me) I will still need to work with teams outside this area who ...
2
votes
4answers
113 views

How to restrict viral file sharing

So I have a website I would like to make that would essentially be selling files. For the sake of discussion let's say that these files are like the raw text of a book. If somebody buys a file from my ...