New answers tagged integrity
There are several libraries that allow for authenticated encryption in .NET. Bouncy Castle, mentioned in an earlier answer, is not. Microsoft itself offers an open source library that is quite low-level, just wrapping the CNG APIs that offer authenticated symmetric encryption in Windows, called CLR Security. The CLR Security library is going to be the ...
You can safely use bouncy castle.
PGP is the established way to provide confidentiality and integrity of files. I'm not sure what else you need here. You need to track they keys yourself, but you can easily come up with a system for that.
Assuming you've setup your SFTP server to use public key authentication only, you're pretty much safe with it. It is always possible to add another layer of security, for instance, a VPN between your endpoints but, in your specific case, you're just exchanging the risks in one software for the same risk with another one: if your VPN software has a ...
No, LUKS does not do any integrity checking. Authenticated encryption expands the ciphertext with respect to the plaintext, and LUKS does not have any functionality in place to deal with this. LUKS uses dm-crypt, usually in CBC or XTS mode.
Integrity is about making sure that some piece of data has not been altered from some "reference version". Authenticity is a special case of integrity, where the "reference version" is defined as "whatever it was when it was under control of a specific entity". Authentication is about making sure that a given entity (with whom you are interacting) is who you ...
You are correct in that it is an intractable problem very similar to the why DRM can never be provably secure. You can make it very difficult for a user to forge the log but ultimately the application will need to have the key needed to digitally sign log messages. If the key exists on the client computer it can be removed from the client computer. The ...
I would use an externally provided service (Splunk on Cloud, Papertrail - there are others but i have used these ones) to ensure reasonable integrity. Or use your own, separated from the service (based on a commercial solution or, for instance, ELK) The confidentiality part is more tricky. For the Splunk case, if you have a pre-defined list of users, you ...
Top 50 recent answers are included