37,179 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
-4
votes
0
answers
39
views
libsodium crypto_secretstream_xchacha20poly1305_init_pull throws fails to initlailize state despite correct key and header [closed]
I'm implementing end-to-end encryption for large files using libsodium.js with crypto_secretstream_xchacha20poly1305. The encryption works fine, but decryption fails with "State konnte nicht ...
-3
votes
0
answers
106
views
How does TLS 1.3 derive a shared secret? [closed]
I am writing a bare minimum HTTPS/TLS 1.3 server in C. Currently I want it to work an just the bare minimum spec:
X22519 key establishment
AES 128 GCM encryption
Self signed certificate
I find ...
Advice
0
votes
0
replies
69
views
How should I encrypt my email service so only the allowed clients are able to call it
I have an email microservice that I created.
I have a platform deployed for multiple tenants. Example; clienta.platform.com, clientb.platform.com etc etc.
Now I want to secure the email micro-service ...
0
votes
0
answers
99
views
Is key recovery possible for this 4-round 64-bit SPN cipher given 65k known plaintext-ciphertext pairs? [closed]
Given this specific cipher design and known-plaintext corpus, is there a cryptanalytic or structural weakness that enables key recovery or decryption faster than brute force?
The setup is:
There’s a ...
1
vote
0
answers
125
views
InvalidAlgorithmParameterException: Unsupported IV length: 16 bytes. Only 12 bytes long IV supported
I'm trying to implement data encryption and decryption using Cipher. This is my code:
class CryptographyManagerImpl : CryptographyManager {
private val KEY_SIZE_BITS: Int = 256
private val ...
0
votes
2
answers
130
views
Encrypt data on client side using cryptoJs and decrypt on server side SFCC (Java) Cipher
My project requires several storefront network requests to be encrypted and sent over, so thats its not interpreted by any outsider and pose a threat to the system or user. Typically sensitive or ...
-4
votes
1
answer
78
views
What is the difference between a key managed by SQS vs a KMS key managed by SQS?
I'm looking into encrypting an SQS Queue that I've got using the CDK, and as options, there are
Encryption type
Description
UNENCRYPTED
Messages in the queue are not encrypted.
KMS_MANAGED
Server-side ...
0
votes
0
answers
85
views
Playing Apple Fairplay encrypted content on iOS 26
For iOS17 we've had no problem playing Apple Fairplay encrypted content with keys delivered from our key server running on FairPlay Streaming Server SDK 5.1 and subsequently FairPlay Streaming Server ...
-1
votes
1
answer
120
views
Change Minimum Inbound TLS Cipher Suite for Azure App Service [closed]
For my Azure App Service I have Minimum Inbound TLS Cipher Suite set to TLS_RSA_WITH_AES_128_CBC_SHA.
For my App Service it is:
I know that I can change it manually via App service -> ...
Advice
0
votes
0
replies
88
views
Design review: ntfy-based remote unlock for Vaultwarden without exposing .env passphrase on a compromised host?
(If you want to skip to the part I ask the question, scroll down to the last section with the heading "Concrete question".)
I’m working on a home lab / learning project and would appreciate ...
0
votes
0
answers
73
views
React Native (Expo SDK 54): How to encrypt request body when sending FormData (file upload)?
I’m using React Native with Expo SDK 54, and I have an API client built with Axios.
All my normal JSON requests are encrypted before being sent to a .NET 6 backend. When I send a normal JSON body, my ...
Advice
0
votes
1
replies
109
views
What are other alternatives for python keyring?
I'm trying to find a secure way to store token for my cli application. In the app I take the token from ms entra id and I want to store this token in user computer so that user can use it again until ...
0
votes
1
answer
178
views
Why do I need an IvParameter and how do I implement it?
I'm trying to write a java program that encrypts and decrypts a byte array of text based on a password, but when decrypting, it returns an error
Error message:
Exception in thread "main" ...
Advice
0
votes
1
replies
121
views
Is it possible to use random IV for each ts segment when ffmpeg do hls encrypt?
I want to encrypt the hls like this: each segment with different IV (random string)
#EXTM3U
#EXT-X-VERSION:3
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-ALLOW-CACHE:YES
#EXT-X-TARGETDURATION:11
#EXT-X-KEY:METHOD=...
0
votes
0
answers
112
views
How to implement non-plain-text password transmission in Spring Authorization Server 1.4.3 (password grant extension)
I’m using Spring Authorization Server 1.4.3 to build an authentication center.
I’ve extended the authorization server to support the password grant type, so clients can obtain access tokens via the /...