Questions tagged [file-encryption]
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
489
questions
0
votes
0
answers
70
views
Choosing Encryption Strategies for Secure Long-Term Storage of Sensitive Data
When considering external drives for secure long-term storage of sensitive data, what are the pros and cons of using the same password for encrypting all files versus using random passwords for each ...
- 163
1
vote
2
answers
449
views
Encrypted 7z file password not working
I'm in an interesting predicament. I have an encrypted 7z file that I made myself. The password for the file is a 60 character generated password that I saved to my password manager. I made sure to ...
- 113
0
votes
1
answer
83
views
Is rsyncrypto secure?
My information security model right now is "if you want the data that I am storing on the cloud, you can have it" and I would like to change that to "if you want the data and have a $5 ...
- 251
3
votes
2
answers
402
views
TPM - ECC based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 271
1
vote
3
answers
100
views
Is there a way to store data securely on a client so that it can only be read by the client while connected to an authorising source?
I have a difficult issue facing an online gaming social space I frequent where personal content I've made for the platform is being stolen by users.
I'm wondering if there are any solutions to make ...
- 111
0
votes
0
answers
108
views
Deleting files from folder encrypted with fscrypt
I have a folder encrypted with fscrypt. If I unlock this folder and delete a file from it (as the folder is unlocked anyone can see the contents of the files), then after deletion I lock this folder ...
- 1
0
votes
0
answers
36
views
Which is preferable compress and encrypt or just encrypt and no compression in purely security perspective and not in resources or efficiency? [duplicate]
I want to know what attack am I exposed to if I implement one of the two method. I'm pretty sure both of them are not 100% fool-proof and both of them are expose to traffic-analysis attack if I do ...
- 1
0
votes
1
answer
121
views
Why some ransomware adds padding to headers
Does anyone know why some ransomware families (e.g. Cuba but also Phobos if I am not mistaken) pad the file header to get to 1024 bytes?
I mean what would be a reason for the ransomware developer to ...
1
vote
1
answer
179
views
How to protect files in use on a system powered on from physical theft or tampering?
I'm in the process of figuring out an encryption strategy for a personal Linux system.
My laptop is almost always on, or in sleep mode, except for longer travels.
My main threats are theft of my ...
- 11
0
votes
0
answers
65
views
How to find the correspond hash algorithm? [duplicate]
I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+...
- 11
1
vote
1
answer
83
views
AEAD: Authenticating a digest of my data instead the data itself
Relevant question for Python:
Stack Exchange: https://stackoverflow.com/questions/75739308/aead-authentication-with-huge-input-that-doesnt-fit-into-ram
Top Answers: https://topanswers.xyz/python?q=...
- 121
0
votes
1
answer
174
views
How does Ransomware encrypt files? [duplicate]
I have a question about how ransomware works.
According to the authors of this paper: https://www.cise.ufl.edu/~traynor/papers/scaife-icdcs16.pdf (page 2 - 3) , class C is: ransomware reads the ...
1
vote
1
answer
674
views
Android File Encryption without screen lock
I am trying to understand the FBE Key generation and verification process at every boot. My device is going to be handled without a lock screen (Android 11 with FBE + Metadata Encryption Enabled), so ...
- 13
3
votes
0
answers
1k
views
Strongest symmetric algorithm in 2022 [duplicate]
I'm curious about the best encryption algorithm for encrypting my files in 2022? I thought it was a good solution to encrypt my private key with AES-256 but I decided to ask here and choose better ...
- 169
0
votes
3
answers
52
views
Encryption key fuzzing for forensics analysts
I'm trying to make a simple encryption tool for Debian-like systems. I would simply hash a password, use it to lock/unlock a file, and it would never be stored on the drive. My dad threw out the idea ...
- 209
0
votes
2
answers
340
views
Ransomware public key: can I find the respective private key?
I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded).
Is it possible to extract the private key from the public key?
0
votes
1
answer
174
views
How to setup a Per-File Encryption architecture
I would like to set up a per-file encryption architecture where every file is encrypted with its own key, and each key is encrypted using a master key.
Is there any good articles to read regarding ...
- 1
1
vote
1
answer
891
views
How do I secure sensitive information like system credentials in a configuration file?
I often get this question:
I have sensitive data such as system credentials which my web application needs to secure. Some things I can store in a database, but others (like the credentials to access ...
- 41
1
vote
1
answer
298
views
Why does some Ransomware encrypt also the file header and trailer?
Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
- 35
0
votes
2
answers
158
views
Encryption method for file that can only be read by program
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
- 103
0
votes
1
answer
134
views
Are Popular Closed Source Archivers Secure?
I'm wondering if popular closed-source archiving software like WinRAR or WinZIP are tested regularly by other developers to check if they add some kind of intentional backdoor or unintentional ...
- 1
3
votes
3
answers
302
views
Does knowing how an encrypted file changed make it vulnerable?
Scenario
The following bash commands create an empty file test.txt, encrypt it using a default algorithm to test1.gpg, then append the line new line to the original file and encrypt it again to test2....
- 715
1
vote
1
answer
90
views
can these encryption methods for a text file protect against physical access to machine by adversary?
My threat model is that, the adversary has physical access to the machine and root access.
I don't care about any data on the system other than a couple python scripts that contain sensitive ...
- 15
1
vote
1
answer
797
views
How to fix import private key in GPG?
Since, I am new to gpg I wanted to generate a key pair. So I typed gpg --full-gen-key and inputted the following:
root@kali-linux:~# gpg --full-gen-key
gpg (GnuPG) 2.2.35; Copyright (C) 2022 g10 Code ...
- 111
1
vote
1
answer
85
views
Flashdrive data confidentiality when disconnecting flashdrive from machine abruptly
Assuming I boot up a fully encrypted OS from a portable flash drive and do some tasks in this running OS; then abruptly disconnect this flash drive from my computer and a malicious actor gets their ...
- 13
0
votes
1
answer
208
views
How secure is a bitlocker startup key on a mountable encrypted container?
Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely.
I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
2
votes
1
answer
366
views
Military-grade encryption on Blu-ray discs?
Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
- 123
1
vote
2
answers
523
views
How to design a secure file storage/sharing platform
As the title implies, I would like to design a secure file storage/sharing platform. This is an abstract design question, so details regarding programing languages or platforms are not particularly ...
- 111
0
votes
0
answers
84
views
Secure logs on an embedded IoT device
I need to secure logs on a IoT device (Infineon TC233). It has 2 MB flash and a HSM. We are at the design stage of development.
Since logs will be primarily event & data logs, the size of the log ...
- 173
3
votes
0
answers
2k
views
When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?
VirtualBox has an option to encrypt the drive of a VM.
When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted.
I'm thinking that both do pretty much the same ...
- 987
1
vote
0
answers
132
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
0
votes
1
answer
175
views
Is there a way for a file/binary/exexutable to verify it's own integrity?
So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my ...
0
votes
2
answers
129
views
Is it possible to eavesdrop HTTPS encryptions by file size?
I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
- 101
0
votes
1
answer
301
views
How do I import a private key from a hard copy?
I started playing with encrypting some personal files, and I exported the private key as an .asc file, but also on hard copy (plain paper) and can't understand a thing about how it says to import it ...
- 13
0
votes
1
answer
252
views
Should I encrypt backup files with WinRar?
Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
- 489
0
votes
0
answers
89
views
Step-by-step file encryption/decryption using user-supplied password
Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
- 101
1
vote
1
answer
731
views
At-rest encryption. Use SFTP log-in credentials to unlock/decrypt encrypted drive or folder on an Ubuntu Linux server
I have a simple file server running on a small Ubuntu machine that facilitates file sharing and 2 way folder syncing between my and my girlfriend's 4 computers through SFTP over a private network.
The ...
- 13
1
vote
1
answer
169
views
What’s the best way to only allow a file to be opened with multiple people’s authorisation?
Is there software available that makes it easy for multiple authorisations to be required before a file can be opened? The simplest solution I've found online is to encrypt a file with a password, ...
- 11
0
votes
3
answers
369
views
Naming encrypted files in the cloud, without leaking info about their content
I'm working on a photo sharing app that stores files in the cloud, encrypted, and lets you share those files with others. To do that, as suggested in answers to this previous question:
files are ...
- 135
1
vote
3
answers
751
views
Standard for encrypt files before transfer them over internet
I know there are some standards for transferring data securely such as HTTPS for web applications, or SPC & SFTP for secure file transfers.
Encrypting files using PGP is a way to encrypt files ...
- 185
0
votes
1
answer
725
views
What is the best way to encrypt extremely sensitive and important data
I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines.
I understand ...
- 781
0
votes
1
answer
161
views
File transfer service through server that is not P2P, encrypt files without letting the server know its contents
A file transfer tool, that works through a middle man server, as the following diagram:
Client A uploads a file to the server, Client B has websocket events that a file is transferring and starts ...
- 105
0
votes
1
answer
169
views
Security Tools - File Encryption vs Corruption
When security tools quarantine files, why do they tend to use encryption, rather than simple file corruption?
The main goal of quarantining a file is to make it impossible to run on a system. This ...
2
votes
2
answers
310
views
Sharing files with others, encrypted on untrustworthy file storage (e.g. the cloud)
I want to work on a photo-sharing tool, where I can:
store photos on untrustworthy disk space (like the cloud)
share photo albums with friends and family
update photo albums (rarely but happens)
...
- 135
20
votes
3
answers
7k
views
Not understanding why I should use public/private key encryption over password?
My knowledge about these topics is very elementary, please "school me" if I said something completely wrong, it would surely help me understand these things better. Now, to my issue.
Now ...
0
votes
1
answer
132
views
I want my customers to download the encrypted video file to a secured usb and play it directly in TV by providing unique key which i shared to them
How do I make sure that this content is not hacked by anyone ?
Do I encrypt every file and store the key before my customers download their unique copy?
0
votes
0
answers
389
views
Where to store passwords needed by linux processes?
I am working with C++ processes on a linux (CentOS 8) environment. These processes should be able to access an encrypted file on the system.
Where should I store the password for this encrypted file?
...
- 65
0
votes
1
answer
142
views
How to securely encrypt shared data for a dynamic amount of users?
Example:
Bob uploads a file to my custom file server locked with a password, which then the file server generates a link for him to share
Bob wants to be able to share this data to anyone that has ...
0
votes
1
answer
680
views
Is it possible to extract encryption keys from software executing on your own system?
I'm a newbie in this field so forgive me in advance if this question is stupid in anyway.
Say we have a software that is executing on our system and encrypting files using a secret key that is not ...
- 3
3
votes
3
answers
612
views
Does EFS protect against data theft by ransomware?
Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key ...
user257952