Tag Info

New answers tagged

3

Yes, full-disk encryption using AES-256 would be considered HIPAA compliant encryption. It is so because it is a FIPS 140-2 compliant cipher, and data encrypted with FIPS 140-2 cipers is considered "encrypted" under the HIPAA Security Rule. As to whether this qualifies as good enough for "data at rest," that is up to your organization's interpretation of ...


0

If you're asking if UEFI add additional attack vectors against TrueCrypt vs. a non-UEFI BIOS, the answer is probably no. Running TrueCrypt on a UEFI-enabled computer with the UEFI code signing turned off is no less secure that a computer without UEFI.


0

Veracrypt is a good alternative for trueCrypt. i have tried it just yesterday and it is very simple to use and it doesn't show any problem or bug, and it gives us many new features. also the guy behind is a crypto expert. You could watch this interview with him in Floss podcast. https://www.youtube.com/watch?v=rgjsDS4ynq8


2

As far as I understand, bit flipping attack applies if you can see the decrypted output. Thats how you can manage to obtain desired plaintext changes step by step. Look at the Evil Maid attack if you want to see an example of full disk encryption defeat. Causing the DoS is easy as you can alter the key slot (you can know where it's located easily), the ...


0

@Michael. Have a look at CryptonorDB. This is what I could suggest from your question (it is not clear from your question that what you need).


6

Better for what? In general, encryption is used to prevent someone from accessing encrypted data. Database level encryption is more complicated to implement at both administrative and application sides. However it prevents unauthorized staff from accessing the data. Filesystem level encryption leave your database open to any staff member, who has direct ...


1

geek_ji, You don't have many options to solve this really. 1. If you remove offline playback, then you can just use HLS with encryption, with the stream hosted in the server. 2. Allowing offline playback, as you said, will need to somehow encrypt/decrypt the video. You could always leave the public key (encryption key) stored locally for encryption, but ...


0

I have been trying out Veracrypt recently and suffered a range of errors and failures to produce a solid encryption container. I have now uninstalled Veracrypt and I am in no hurry to go back to it. I have used Truecrypt now for several years and have been very happy with it. The only problem I encountered with Truecrypt was if a flash drive was nudged ...


1

In a way, yes. However, btrfs will silently repair the data where possible so unless there is an unrecoverable error, you won't know. Since you use LVM and btrfs, there is a good chance the data will be fragmented making it even more difficult for an attacker to change it consistently. Offline cryptanalysis of a btrfs filesystem is complicated enough on its ...



Top 50 recent answers are included