Tag Info

New answers tagged

0

Salsa20, at least as implemented in libSodium, seems ideal for this: Salsa20 is a stream cipher developed by Daniel J. Bernstein that expands a 256-bit key into 2^64 randomly accessible streams, each containing 2^64 randomly accessible 64-byte (512 bits) blocks. ... The crypto_stream_salsa20_xor_ic() function is similar to ...


0

I'm looking for a file encryption algorithm (or library) that supports efficient random access to the cleartext. That is, given an encrypted file, I need to be able to repeatedly read arbitrary byte-ranges from the cleartext with as little overhead as possible. What you are asking is highly dependent on the encryption primitive. You can't have ...


0

I'm not familiar with Cryptree, but from reading the first page of the PDF I can see that it's basically a file encryption library. (Actually directory-tree encryption.) So the answer to your question is: it depends on where the decryption happens and where the keys are stored. If the provider uses Cryptree internally but holds the keys and does the crypto ...


1

Truecrypt works with linux, it just doesn't work with full disk encryption. Within linux, you can mount a Truecrypt volume that features plausible deniability, and then simply chroot it. Or if you feel fancy, have the volume contain a Docker image, and "Dock" it.


0

PGP is the established way to provide confidentiality and integrity of files. I'm not sure what else you need here. You need to track they keys yourself, but you can easily come up with a system for that.


1

Assuming you've setup your SFTP server to use public key authentication only, you're pretty much safe with it. It is always possible to add another layer of security, for instance, a VPN between your endpoints but, in your specific case, you're just exchanging the risks in one software for the same risk with another one: if your VPN software has a ...


1

If I understand the security audit report correctly, one should not use encfs for encrypting Dropbox: Dropbox saves several versions of all files and this can be exploited for an attack. Anyone having access to your Dropbox account has access to these different versions. I do not know how many versions an attacker would need and I am by no means an expert ...


1

Alasjo already provided a good answer, but I think some additional information could help you grasp the difficulties you have and how to address them. In you question you suggested encryption. Just encrypting the uploaded data cannot be enough to secure them. Since encrypted data is useless without a mean to decrypt them, your application would have to ...


0

I think Docker would be a possible solution for this. I am not an expert on Docker. So this is a concept idea solution. I am thinking that you could create a few containers for the database and fig up. So say you build 3 containers (1-master, 1-internal and 1-webapp) with containing the same database in each. Then you could get them to be scanned before ...


2

There are numerous questions with answers on this site as well as Owasp guidelines that cover the risks of allowing file uploads and how to store files properly. You may want to check the legislation that applies to your application and take necessary action to store files accordingly (encryption, access rights, data integrity, logging). As for your idea ...


8

scp uses the SSH protocol which is already up to the task to transferring at the full bandwidth allowed by the local network, at least on 100baseT ethernet. For gigabit networks, you may have to fiddle a bit, but usually the CPU is not the bottleneck. Since you do not tell much details about your performance issues, I can only hazard hypotheses. What must ...



Top 50 recent answers are included