New answers tagged integrity
4
Use any authenticated encryption mode.
That could be a stream cipher with built-in support for authentication (not what I would recommend; all of the candidates are still bleeding-edge), any standard authenticated encryption mode (e.g., GCM, EAX, etc.); or use encrypt-then-MAC with AES-CTR and a suitable MAC (e.g., AES-CMAC or SHA256-HMAC). Any of those ...
0
Assuming your protocol is stateful (i.e. you only need to send the parameters - such as the nonce/IV - once), then the overhead of using an AE mode should be very small. CCM for instance has a fixed overhead of as little as 4 bytes (depends on the desired MAC size). Since the minimum size of a TCP/IP packet is 40 bytes, that's a maximum 10% increase in size ...
2
Not sure what file integrity monitoring system you're using, but most commercial file integrity monitoring systems such as Verisys and Tripwire can be configured to 'automatically' monitor the relevant files.
For example, you tell them you're running Windows Server 2008 and Microsoft SQL Server 2008, and then they monitor applicable files and registry ...
Top 50 recent answers are included
