The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

learn more… | top users | synonyms

0
votes
0answers
37 views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
1
vote
1answer
43 views

Is it possible to use SSH agent for generic data encryption? [on hold]

Is it possible to use running SSH agent to decrypt some data (supplied as a string or read from file)?
-1
votes
0answers
17 views

File Encrypted using Kleopetra, started showing error while decrypting? [migrated]

I encrypted one of my text files with Kleopatra, which I have been using for 4 months. It was working fine, but since two weeks I'm getting an error when decrypting the file: Can not connect to GnuPG ...
2
votes
1answer
25 views

Method/program for editing secure files

I'm not entirely sure if this is on-topic for Security.SE, but it doesn't seem entirely off-topic either, so I'll try. :) I keep a couple of (GPG-)encrypted files with more-or-less sensitive ...
1
vote
1answer
41 views

Cryptographic patterns a security risk?

I am writing an application that serialises objects and then saves the resultant XML in an encrypted file. I am using an Initialisation Vector and a Salt both saved in the file for decryption so two ...
1
vote
2answers
102 views

How could police identify digital contraband and charge someone if it's encrypted with keys?

For example, say I am transferring heavily-encrypted DVD/Blu-ray movies/game copies over the internet. However, I am using double or (+) encryption with keys required to decrypt the file using an ...
0
votes
1answer
23 views

File encryption with external key

I want to encrypt a few files on my computer (not FDE). To do this, I'd like to use something that requires having some external usb thing with the key on it plugged into the computer. Price is not ...
1
vote
1answer
62 views

File encryption for a storage API

I'm implementing a Dropbox-like API, and one of my requirements is to have the files stored encrypted on the server. It is not required that the files are made unreadable by the server, only that they ...
2
votes
1answer
75 views

File Fault 1 password from memory dump

I have a osx 10.9 machine with a File Vault1 encrypted user partition. I would like to remove the encryption, but I don't remember the "master key" which is the only way to remove encryption ...
0
votes
3answers
54 views

Security checks on file transfer [closed]

What are the security checks that I can make on a PDF file being transferred between server and the client?
1
vote
3answers
91 views

How encryption/decryption works when one generate random key?

I am new to this and want to ask a basic question.Suppose I used my password (say "ABC123") to generate a key using PBKDF2 algorithm (or any such algorithm).For encrypting a file I'll input my ...
1
vote
1answer
143 views

Forgot password to 7-Zip archive

I think I already know the answer to this question, but I thought I'd ask the experts anyway. A few months back, I created a password-protected 7-Zip archive which housed the source code of a simple ...
1
vote
1answer
103 views

Retrieve RAR Password through Extracted File

So I was wondering about something, but for the simplicity, consider this example: You have a file with n encrypted files in it, of which one is called 'Note.txt' You also happen to have another ...
1
vote
2answers
374 views

How secure is EncFS compared to TrueCrypt?

If I choose the paranoia option for EncFS and for TrueCrypt I create containers using the encryption algorithm AES-Twofish-Serpent and the Hash Algorithm Whirlpool. Are both methods equally secure, ...
2
votes
2answers
147 views

Appropriate way to encrypt passwords/financial info?

I am in the process of creating a file/files containing all of my logins/password info for various accounts. In the event of my untimely demise this file would be sent to the appropriate party(s). ...
2
votes
3answers
164 views

What does Windows's built-in encryption do, if I can seemingly always read my encrypted files?

I'm playing around with certificates and encryption on a Windows system, but either it isn't working or I don't know how it should works. When I encrypt a file its name changes to green. But then, I ...
0
votes
2answers
52 views

Revoke decryption capability

I'm looking for a way to encrypt some data in such a way that I can later revoke a single person's ability to decrypt it. We have a store of database backups that are currently encrypted using GPG. ...
7
votes
3answers
228 views

How can I allow acces to encrypted data if only 2 out of 3 users provide a secret?

I want to encrypt data, but make sure that no single user can decrypt the data. Further, it is important not to require ALL users to be present to decrypt. This will allow for some flexibility and ...
0
votes
2answers
82 views

RatticDB for passwords is not encrypted. Is this good approach?

I am looking for a password application for storing passwords, and RatticDB have a web interface and SSH access is planned, which are exactly the features I am looking for. However, they write that ...
1
vote
1answer
72 views

How to generate Initalization Vectors correctly

I'm working on a project that splits large files into several encrypted fixed-size blocks (e.g. 4KiB). Those blocks shall be used to be stored persistently on a storage device. Blocks are encrypted ...
1
vote
1answer
190 views

What does Gazzang zNcrypt actually protect against?

In an effort to increase security of our website, I'm reading up on Gazzang zNcrypt, which claims to protect data in databases from breaches. Technically, it seems to do filesystem encryption. As far ...
1
vote
1answer
358 views

Hacked site - encrypted code

Couple days ago I gave noticed that almost all php files on my server are infected with some encrypted code and in almost every file is different. Here is the example from one of the files: ...
3
votes
2answers
177 views

What trust level should I give keys I need for encryption?

As I'm encrypting server backups, I typically install my public GPG key from a keyserver into me server's keyring: gpg --search-keys 6569758F I import the key into my keyring. I then attempt to ...
0
votes
2answers
61 views

Restricting locations for unzipping a zip file

I hope that I have found the correct place to ask my question regarding unzipping files. I would like to see if there is a way to restrict the locations available to the user to unzip a password ...
1
vote
1answer
207 views

What is the best practice to save encryption and decryption method in an application?

Almost all the application regardless of their nature and purpose are using encryption to secure sensitive data to be saved to database, if the user using a method to encrypt a file (for instance an ...
0
votes
1answer
41 views

Securing data on a mobile device (even from the user/owner)?

I am writing an application to generate OTP codes for two factor authentication where I need to securely store data locally. This data must be secure from both the owner/user as well as intruders. I ...
1
vote
3answers
172 views

Protecting personal documents in cloud

I want to keep my personal documents in cloud e.g. Dropbox. But I want some of my documents be encryted and password protected, such that: 1. even if my Dropbox gets hacked, those documents still have ...
1
vote
2answers
404 views

Scan password protected email attachments for malware

We have an email policy that prevents email from going through if it has password protected archive files attached. This is to protect users from viruses and trojans because the contents of the ...
1
vote
1answer
182 views

How is the FileVault master key protected?

FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. Reference: this cnet article. See also the stack exchange question How does FileVault 2 ...
2
votes
2answers
743 views

Explain real world symmetric key encryption

I'm new to cryptography. While reading about symmetric key encryption, it was mentioned that it requires secret key exchange so that 2 parties can decrypt the ciphertext. Now, using some encryption ...
1
vote
1answer
238 views

Questions towards my application that uses bouncy castle crypto

I am implementing an application using bouncy castle crypto API it uses AES-CBC to encrypt files and i have some questions regarding the development of my application. I dont want to use a static ...
5
votes
4answers
234 views

Is Encrpyting Home Sufficient?

I currently have a fully encrypted Windows System, and I'm looking at switching to Ubuntu. Is encrypting my home directory (with ecryptfs) sufficient? On windows this would be problematic due to ...
4
votes
1answer
307 views

What iOS apps use data protection?

The iOS data protection API and its implementation are fairly well documented, but it is only really useful if apps actually use some level other than NSFileProtectionNone for their files. Is there ...
5
votes
2answers
537 views

Designing a cryptographic file-sharing protocol

As a learning project, I am trying to implement a secure way to share files with a friend over dropbox. (I am not looking for existing software, I am doing this in order to learn how to do this ...
2
votes
1answer
133 views

AES + CBC to encrypt individual local files, fixed IV?

I am using AES and CBC to encrypt a local files separately. I don't plan to transmit them over any network. What are the risks of using a fixed IV for my encrypting application? The only problem I ...
1
vote
1answer
67 views

How to protect integrity of resource files in a white-box attack context?

In a white-box attack context (e.g. PC, tablet, smartphone), there is no trusted entity, which can be used to guarantee some reasonable security. TPM is not considered a solution because it is not ...
0
votes
1answer
185 views

Should I run my password through Bcrypt before using it for encrypting a file with AES-256? [duplicate]

I need to encrypt a file with a password that can be memorized. So I was thinking about running the password through some rounds of Bcrypt before using it for AES encryption, so every time I want to ...
-2
votes
1answer
617 views

How long does it take to crack a 100-letter long winrar password? [closed]

i´m interested in how long time it would take for a super computer dedicated to crack to crack a 100-letter long winrar password. The password contains Lowercase, Uppercase, Digits, ...
2
votes
2answers
2k views

Can I properly make password-protected 7z archives secure?

After reading the question and answers of this and this, I left with an overall impression from the last one that zips were considered not safe and insecure way of sharing data. I still think ...
10
votes
2answers
1k views

How to encrypt data on the server?

I have some data on the server (running Linux) which needs to be encrypted (company policy). This data is being served by an application running on this machine. Now I consider a few possibilities: ...
-3
votes
3answers
7k views

How long will it take to crack a 10-15 character winrar password? [closed]

Ok, long story short, I'm currious how long it would take an agency to crack a 10-15 character winrar password. The file names in the archive are also scrambled including a word at the start and ...
2
votes
1answer
315 views

TrueCrypt External Multimedia Hard Drive

I have an external multimedia hard drive (1.36TB). I made 4 partitions of 350GB each. Then I shredded the free disc space of all the partitions. Now I want to put Truecrypt on the disk. I can't ...
5
votes
2answers
954 views

Microsoft Office 2013 File Encryption

To what extent can the native file encryption provided by Microsoft Office 2013 (Word, Powerpoint, Excel, etc.) be relied upon to maintain the confidentiality of documents, especially within the ...
2
votes
2answers
359 views

7zip AES encrypted archive, padding oracle attack

I created an encrypted but forgot the password. When I attempted a pattern based brute force it said it had over a 100 trillion passwords to check. And to my knowledge that could take a few years. ...
1
vote
2answers
1k views

Single File Encryption in a Windows Environment

Would it be correct to assume that encrypting a single file in a Windows environment, for example a simple text file containing login credentials for a variety of accounts, is inherently insecure? It ...
1
vote
2answers
636 views

Password Protected Zip: if attacker had one file, can use it to decrypt all files?

Consider a folder containing the following files: (file1.txt, file2.doc, file3.pdf) all zipped and password protected, if attacker had one of these file, can use it for decrypting all without knowing ...
9
votes
1answer
9k views

Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge

A while back, I encrypted a few files with Truecrypt, and stored the password in my head. Now I need to access it again, the password isn't working. I'm sure most of it is right, but I'm off by one or ...
5
votes
2answers
2k views

After How Much Data Encryption (AES-256) we should change key?

Considering AES-256 encryption, what is the maximum amount of data should be encrypted with one key? Does Block cipher modes/IV/counters also governs the limit? If say the maximum amount is 50GB, ...
2
votes
1answer
608 views

How to make a secure key distribution scheme/protocol?

We are building a data processing platform on Amazon AWS. We are going to store sensitive data in the S3 (encrypted) and then the Amazon EC2 node is going to be utilized to process this data. We are ...
2
votes
2answers
2k views

How get data from password protected rar file?

I want retrieve documents from a password protected rar file? I know brute force and dictionary method. Is there any other method to get data?