Tag Info

New answers tagged

0

The actual format of NaCL's output is not completely specified -- or, rather, it is specified as being the raw output from some cryptographic primitives (as described there). The format is thus non-extensible and does not include any feature supporting multiple recipients. Ability to send a message to multiple recipient appears to be a functionality that has ...


0

Keep in mind the key to measuring security is not just entropy of the password, but the weakest link in the chain. In this case, physical security of the computer plays a part in addition to if the machine is on a windows domain. It is fairly trivial to reset any windows password using Trinity provided that you can mount a DVD in the drive and reboot the ...


5

In SSH, RSA keys are used only during the initial connection setup. Once you are connected, size of RSA key has no consequence whatsoever on CPU and bandwidth usage for transferring files. The initial handshake uses asymmetric algorithms (RSA, Diffie-Hellman) to handle authentication and setup of a shared secret, which is then used with symmetric ...


2

While Dropbox and Box do encrypt "data at rest", I couldn't find anywhere where it says that OneDrive does so too--this part is surprising. However, it's not surprising that most cloud providers (e.g. Dropbox, Box, OneDrive, Copy.com) don't provide client side security. OneDrive does scan your files--in order to be able to do so, your files cannot be under ...


4

It is not unusual for cloud providers to have a system in place where they can access their customer's data, because there are all sorts of useful things they can't do without looking at the data. They can't index it, they can't de-duplicate it, they can't compress it, they can't scan it for illegal content, and most important of all, they can't restore it ...


1

What stops you from mounting/decrypting the files with knowledge of just this key? The sig-cache.txt is only a signature of the file encryption key. This means that it is not used at all to decrypt the encrypted volume. It is only used to verify that the encryption key stored has not been modified or changed. This is to ensure that the correct key ...



Top 50 recent answers are included