The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

learn more… | top users | synonyms

0
votes
1answer
29 views

CryptWall virus attack

Is there something new about any solution to decrypt all my files that are infected with the CryptWall virus? All my files have extension *.abc.
2
votes
0answers
97 views

Secure backup encryption with OpenSSL

I know, the general advice is "keep your hands off crypto stuff". And the standard way to encrypt backup data securely would be using GnuPG. However, for a rather academic exercise, I would like to ...
8
votes
5answers
5k views

How secure are the password files used by Password Safe and Password Gorilla?

Password Safe and Password Gorilla are both programs to manage passwords. Both store a list of user passwords in a file, which is encrypted using a master password. They use the same file format, so ...
42
votes
3answers
5k views

What security scheme is used by PDF password encryption, and why is it so weak?

Many PDFs are distributed as encrypted PDFs to lock out some of their functionality (eg printing, writing, copying). However, PDF cracking software is available online, which usually cracks the PDF ...
4
votes
3answers
2k views

Whats the point in having software's like Veracrypt, which end of the day needs password to decrypt?

There are encryption softwares like Veracrypt which encrypt data and the only way to open encrypted file is via password, but a simple compressing softwares like RAR also provide password protection. ...
6
votes
2answers
139 views

Decrypting arbitrary offset of encrypted file

I want to store encrypted files on some storage backend that allows me to fetch bytes X through Y of the encrypted file. I can obviously decrypt the entire file locally and send it back to the client. ...
-1
votes
1answer
65 views

File encryption that supports random read access? [duplicate]

I'm looking for a file encryption algorithm (or library) that supports efficient random access to the cleartext. That is, given an encrypted file, I need to be able to repeatedly read arbitrary ...
1
vote
2answers
81 views

Is Cryptree suitable for cloud storage?

I'm evaluating a cloud storage product. The marketing literature states it uses Cryptree. I pulled the paper and performed a quick read, but I don't see where Cryptree lends itself to confidentiality ...
7
votes
1answer
253 views

Linux Plausibly Deniable File System

Is there any way to encrypt a linux filesystem in such a way to maintain plausible deniability? E.g. "Hidden OS support," the way Truecrypt and Veracrypt work, they only support Windows OS due to low ...
5
votes
2answers
277 views

Files encryption for flash drive privacy/security

Looking to encrypt files on flash drive (for backup) just in case it gets stolen or lost. Don't want to install any extra software like TrueCrypt but instead just use what's already on most computers. ...
1
vote
0answers
65 views

A Solution for Block/File Encryption that is Corruption Resilient? [closed]

Question: What encryption features/(configuration options) are implemented that mitigate issues with device/block corruption? For example, if the external hard-drive gets dropped, the damaged ...
2
votes
2answers
30 views

Standard (or solution) for securing files in a point-to-point integration

I'm looking for a relatively light weight way to secure both integrity and confidentiality for files being uploaded in a point-to-point integration. The use case is uploading batch files for ...
4
votes
2answers
606 views

Is ENCFS secure for encrypting Dropbox?

I've encrypted my dropbox-folder with encfs according to a few tutorials I found on the web, advocating this approach. But I've found the following critical statement concerning encfs'security in ...
1
vote
3answers
90 views

Protecting Uploaded Confidential Files [closed]

We have a web application in Linux (App A) using PHP and Zend and another in Windows using Asp.net C# (App B). They both access the same database. App B is for internal use only while App A can be ...
1
vote
1answer
66 views

Does a solution exist for transferring large files across a network that is faster, yet just as secure as scp? [closed]

I'm posting this here rather than unix/linux, because the primary deal breaker here would be a deteriorated security layer. I'm wondering if there are (noticeably) faster solutions available for ...
5
votes
2answers
186 views

How to securely store application data on mobile device

How can security be enhanced to the maximum in a messaging app storing messaging history on the device (like whatsapp)? I am specifically referring to methods to minimize the risk of the data being ...
12
votes
1answer
19k views

Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge

A while back, I encrypted a few files with Truecrypt, and stored the password in my head. Now I need to access it again, the password isn't working. I'm sure most of it is right, but I'm off by one or ...
1
vote
2answers
46 views

What is the best solution to encrypt pagefile?

I want to encrypt my pagefile.sys. I do not need to access information from it, so I don't need the encryption key after restart. I have these four alternatives: AES-256 key in Cipher Block ...
3
votes
2answers
106 views

JKS - Keystore protection and configuration file

It appears that Java Keystore is often used by web server using a configuration file, with the password opening the JKS written in it and also the password protecting the specific entry. How could ...
13
votes
8answers
17k views

Does password protecting an archived file actually encrypt it?

For example if I use WinRAR to encrypt a file and put a password on the archive how secure is it? I keep a personal journal and am thinking of doing this, or is there a better way? It's just one huge ...
0
votes
1answer
57 views

How to authenticate users?

I'm in the scenario that I'm planning a detailed description on "how to securely encrypt files" without putting too much in one Q/A. So, in a file-encryption scenario, what are the possible ways to ...
2
votes
2answers
1k views

What does Gazzang zNcrypt actually protect against?

In an effort to increase security of our website, I'm reading up on Gazzang zNcrypt, which claims to protect data in databases from breaches. Technically, it seems to do filesystem encryption. As far ...
11
votes
6answers
409 views

How to protect against adversaries snatching booted laptops to defeat full disk encryption?

I read an article describing how FBI agents snatched Ross Ulbricht's laptop while it was running to defeat full-disk encryption: Two plainclothes FBI agents, one male and one female, walked up ...
3
votes
1answer
2k views

can I trust Boxcryptor closed source software? Encryption of files for cloud hoster

Boxcryptor https://www.boxcryptor.com is not Open Source. Can I trust this? Is it secure? No government backdoor? Because there is no alternative for OS X and iOS.
2
votes
3answers
96 views

Is there a better way to have secure downloads without the requirement of an account?

The Job You have the task of providing large files with sensitive data to people outside your company. Limitations and mandates Recipients of the data must be notified by email The size of the ...
0
votes
2answers
100 views

Would AES encryption of a small number of blocks be less secure than encrypting a large, fixed-size padded buffer?

My application encrypts a file with AES, and the data is read, encrypted and written with a buffer. It's size is defined with a BUF_SIZE value, which is constant. I will try to explain my question ...
2
votes
1answer
417 views

Is building an NFC payment app without a secure element like Apple Pay fundamentally insecure?

Suppose I work for a bank and am asked to write an NFC payment app for the iPhone 6 or Android but not use Apple Pay. To simply send the credit card details to the reader via NFC. Now assume I'm not ...
2
votes
2answers
132 views

Best way to securely store passwords for local use?

I am writing a Java application who needs three username/password pairs. I would like to add a "remember me" feature, implying I would have to store passwords on the user's computer. Knowing this ...
0
votes
1answer
93 views

Risk of temporarily unencrypted data during transmission between systems

I have encountered a situation where sensitive data files are saved unencrypted to server file directories temporarily for 1 to 30 minutes before being sent to a destination application. The data ...
7
votes
10answers
5k views

How can I share files with other individuals using the cloud in a secure way?

I would like to use a dropbox because it is easy and convenient. But I want to encrypt the files with the public key of the intended recipient, so he will be the only one who can access the data in ...
0
votes
1answer
142 views

Does it increase the security if we split data to n pieces and encrypt each one with different key and different algorithm?

For example: a 10 MB file will be sliced to 10 pieces (each 1 MB) and then dispersed between network nodes. Each node will encrypt it with its own key and different algorithm (AES, TwoFish, Blowfish, ...
1
vote
4answers
1k views

RatticDB for passwords is not encrypted. Is this good approach?

I am looking for a password application for storing passwords, and RatticDB have a web interface and SSH access is planned, which are exactly the features I am looking for. However, they write that ...
0
votes
2answers
154 views

Determine Security Of A PDF File [closed]

How do I find the exact encryption on a PDF file? I can't seem to get a direct answer on the net. For example how do I tell if a document is PDF 1.1 - 1.3 (Acrobat 2 - 4), PDF 1.4 - 1.6 (Acrobat 5 - ...
1
vote
0answers
80 views

Hiding symmetric key inside encrypted data

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
3
votes
1answer
160 views

On the fly encryption for unencrypted cloud services?

Today Amazon announced their Cloud Drive with unlimited storage for only 60$/yr. Microsoft did the same with Office 365 a while ago. I don't really want to entrust either service with my dearest ...
23
votes
7answers
41k views

How secure is a Windows password protected zip file?

I need to send some sensitive information to a client. I thought I would email a password protected zip file I created using Windows XP and then call them with the password. Presuming I pick a good ...
1
vote
1answer
84 views

Simple open-source file encryption tool

I want to securely encrypt files, with an open algorithm. So, i've constructed the simple openSSL shell command. How secure is it? function aes-enc() { openssl enc -aes-256-cbc -e -in $1 -out ...
1
vote
1answer
288 views

Brief staging area for unencrypted files

I have an integration workflow where: A server retrieves remote file via an encrypted connection. The file is unencrypted. The server runs linux (Ubuntu 14.04LTS). The file is downloaded to a ...
0
votes
1answer
245 views

Why my files that Encrypted with EFS in Windows 8.1 shown in Linux ubuntu?

i Encrypted my files with EFS in windows 8.1 so i logged in ubuntu and without any warning , its shown my files actually not Exactly the file but shown the path of file and the name and i can ...
1
vote
1answer
43 views

Purpose of Initialization Vector in File Encryption and Authentication (FEA)?

I came across this schematic of FEA implementation using RSA and AES: Suppose that PKB is Bob's public key, PKA is Alice's public key, SKB is Bob's private key, SKA is Alice's private key, Ks is the ...
0
votes
1answer
260 views

rainbow table for AES 256 CBC knowing IV, cipher text and plain text

I'm in a situation where I know that I have to decrypt a file encrypted using AES 256 CBC and I've the following details: I know the first 16 bytes block in plain text I know the IV (static 128 bit ...
90
votes
12answers
12k views

Technology that can survive a “Rubber-Hose attack”

In the documentary film Citizenfour, Edward Snowden says about documents: I'm comfortable in my technical ability to protect [documents]. I mean you could literally shoot me or torture me and ...
1
vote
1answer
103 views

Can zip files be cracked if they were split into parts and only one part was available?

I am talking here about zip files that were compressed using basic protection and those using AES protection. In both cases, if only one of the many parts of the zip were available, will it be able to ...
3
votes
1answer
131 views

Security of hybrid encryption scheme

I want to use a hybrid encryption scheme for file encryption. The scheme must use PKCS#1 v1.5 – which is vulerable to padding oracle attacks – because many smartcards (e.g. the OpenPGP Card) only ...
14
votes
4answers
4k views

VeraCrypt/TruCrypt - I can't understand why you'd want to create a “hidden” volume…?

I can't think of a reason as to why you'd want to create a hidden volume in VeraCrypt. It says because "you may be asked to hand the information," but why would I need to hand it over? Nobody has any ...
3
votes
1answer
37 views

Are there file-encryption tools that only allow access to whitelisted processes?

I am looking into VeraCrypt, a spiritual successor of TrueCrypt. This made a question pop up: As far as I understand, as long as the encrypted volume is mounted, every process can access the data. ...
1
vote
4answers
151 views

Which is more effective and 'secure': Compression+Encryption, or only Encryption?

This came up in an IRC discussion on freenode, and now I"m curious. The idea is that someone wants to determine whether or not encryption alone, or compression+encryption (with gpg/pgp being the ...
2
votes
2answers
230 views

NaCL: Encrypt file to multiple recipients

I am trying to understand the Networking And Cryptography Library (NaCL). Consider i have a file that i want to send to multiple recipients. PGP or S/MIME supports multiple recipients by encrypting ...
2
votes
2answers
105 views

Hashing a password, and summing it with every byte in a file. How secure?

I have a text document with all my usernames and passwords in it sitting on my desktop. I decided to spend a couple hours making that more secure. I wrote a program for the purpose. It takes a ...
4
votes
2answers
629 views

Security review: is this PHP mcrypt wrapper class safe?

Update (6 February 2015): It seems like the class in question has actually updated as a response to the answers here (through an issue, now closed, raised on github). I was looking for ...