Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
0
votes
1answer
63 views

Recover corrupted password protected Zip

Good evening. I have a password protected zip archive (Zip 2.0 CryptoZip) with a .txt file with sensitive info inside. The problem is that I can't extract it. 7Zip:"Data error : Wrong password?" ...
0
votes
0answers
56 views

Is there any Password Manager that supports Hardware-Based OTP encryption/decryption?

I see that some projects like KeepassXC use CR based OTP to provide some additional security. While this is discussed quite controversial my opinion is that - for quite some cases (e.g. most non-...
1
vote
0answers
70 views

Employ fscrypt to securely protect, from data-at-rest exposure, all files+data installed after an initial Linux system build?

Our team's goal We want to protect our sensitive data from being potentially data-at-rest exposed after we relinquish a Linux VPS (see below) provided by a hosting service. We're exploring simple(r) ...
0
votes
1answer
57 views

Windows Encrypted temp directory for files at rest in Windows?

It would be nice if there was an area on my computer where I could work with temp files that may contain sensitive information that could be encrypted with bitlocker or something similar when the ...
0
votes
1answer
61 views

How are files in file container (posibly in archive file) encrypted? [closed]

I see advantage of using container in it that offer work with more files rather than with one but is there some advantage in encryption technique?I would like to know if it encrypt each single file in ...
1
vote
2answers
119 views

Securely editing encrypted text files

My method for editing encrypted text files is to decrypt them in a RAM drive, edit them, and then encrypt them. What I'm worried about is information from my text files being transferred to non-...
14
votes
2answers
274 views

Does File-Based Encryption offer comparable security to Full-Disk Encryption on Android?

Between version 4.4 and 9, Android supported Full-Disk Encryption (FDE). On Android 7, a new system called File-Based Encryption (FBE) was introduced, and was subsequently made mandatory on Android 10....
0
votes
2answers
149 views

Bitlocker/Filevault and VeraCrypt together?

I'm researching ways to make the most secure encryption for additional fixed drives to protect against unknown vulnerabilities, side channel attacks, etc. Basically, securing the data beyond just a ...
7
votes
3answers
494 views

How long should zip encryption password be for it take 10 years to crack?

I am using zip 3.0.0 on macOS High Sierra and Debian. Here is my zip version on macOS: $ zip --version | head Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license. This is Zip 3.0 (...
0
votes
0answers
30 views

Safely store W-9 forms

I am currently working on a web application that requires W-9 file submissions. Currently we are storing these on a designated file system, but since these forms can contain SSN I would like to know ...
2
votes
3answers
131 views

Is it safe to store my login credentials in a Veracrypt volume?

I have a list of login credentials (usernames and passwords) that I wanna keep safe. I'm planning to keep it in an encrypted Veracrypt virtual drive with AES, SHA-512, and an 8-character password. Is ...
0
votes
4answers
135 views

Generate Fake Encrypted Data

I want to create a file server that will be serving encrypted files without permissions. It would be really awesome if it were impossible for a hacker to tell if a file exists or not, so I am thinking ...
1
vote
2answers
138 views

Encrypting intellectual property on client side

Is it possible to effectively protect/encrypt intellectual property that is on the client side? Assume that I am selling a product (software) to clients, that contains intellectual data, for example ...
1
vote
1answer
83 views

Isn't it almost always not helpful to just change the password of a container after a leak?

Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
0
votes
0answers
83 views

Is it still not advisable to use recent versions of EncFS >1.7 to encrypt Dropbox?

I'd like to use EncFS to encrypt files synced with Dropbox. Unfortunately, its Wikipedia page https://en.wikipedia.org/wiki/EncFS mentions security concerns from an audit of version 1.7: EncFS is ...
22
votes
2answers
8k views

Do Veracrypt encrypted volumes have any kind of brute force protection?

I have a 10mb encrypted volume which I made with Veracrypt and was planning to upload it to the internet. I have a pretty strong password but was worried about its protection against brute force ...
0
votes
0answers
72 views

How secure is Microsoft's Office and LibreOffice's password protection?

AFAIK both Microsoft Office and LibreOffice have features to add passwords to protect the content. In general, there are two ways: protect from editing/changing (without a revision at least) protect ...
1
vote
0answers
51 views

Which attributes does DPAPI's “UseMachineProtection” use to identify a machine?

We're using DPAPIProtectedConfigurationProvider from the Windows Data Protection API to encrypt an application config file. The API offers a property called UseMachineProtection, so that the config ...
1
vote
1answer
183 views

Can we write both encrypted text and plain text to the same file?

We have a requirement from customer to write payment transaction information to a text file. Of many lines of data per transaction, only one line contains cardholder information, which needs ...
0
votes
1answer
637 views

Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?

TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool? My threat model is archiving and backing up important and private files. Files will be stored in many places ...
1
vote
2answers
228 views

Is it too late to encrypt my already used USB drive?

I've had my USB for quite a while now. It contains quite a lot of personal information on it. (I know, I'm stupid for not encrypting it before hand). Is it too late to encrypt my drive even if files ...
2
votes
2answers
164 views

How is it possible that hardware-encrypted flash devices are safe?

I start with the fact that I understand how flash devices (pendrives) can be encrypted with software, for example Bitlocker. Simply, the encryption key is the password given during encryption and ...
0
votes
0answers
62 views

Cracking Zip File Password Encryption [duplicate]

Hey all I am currently taking a computer security course and while doing some research in cryptography I found that it was possible to crack the encryption of a password protected file in an encrypted ...
1
vote
1answer
69 views

How to protect file integrity and history containing counters

I would like to create a solution that would sign the data and will have a increasing counter so I can track the number of signatures. One of the requirement is to have an increasing order of ...
-2
votes
1answer
133 views

Is GPG symmetric (decryption) vulnerable?

Suppose a file (say, a text file source.txt) was encrypted into danger.gpg using GPG symmetric encryption on a compromised device. Since the device is compromised, danger.gpg could have been created ...
0
votes
0answers
44 views

Why boxcryptor use hybrid cryptosystem to encrypt files

I do not understand why they need asymmetric key encryption, if the client does not use the public key. As far as I understand it, the user password is used to decrypt the private key and no public ...
1
vote
0answers
62 views

When using openssl to encrypt a file, how would I create a key made up of specific letters? [closed]

I want to create a 128bit AES key made up of specific letters. I think I would need to use something like openssl genrsa -aes128 -out privkey.pem or openssl genrsa -out privkey.pem but I'm not ...
4
votes
1answer
201 views

Safe encryption algorithm that works with files bigger than 68GB

In my Java application, I used AES/GCM/NoPadding algorithm for encryption, however it throws an exception when I try to encrypt files bigger than ~68GB. From what I read, it is limit of data that can ...
2
votes
2answers
87 views

File integrity assurance

I have the following scenario : Two parties want to exchange files. First party publishes a file on a secure server First party sends to the second, a hash of the file in order to be able to verify ...
4
votes
1answer
80 views

How file-level security works?

How a file-level security system works internally? For example https://en.fasoo.com claims that if someone in your organization trys to leak information you will be noticed ( They didn't say this ...
7
votes
1answer
106 views

Will prepending random data (of random length) result in more secure communication?

Many files begin with a "well-known" header sequence which I imagine helps a lot in performing cryptanalysis over a huge number of data transfers. So I have the thought of prepending a block or two ...
1
vote
2answers
70 views

What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)

I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
0
votes
2answers
72 views

Detecting Spoofed InDesign File Creation Date

I apologize for turning here with a question, my research both searching here and on Google has only turned up useless information. I believe that someone has sent me files that have had their file ...
0
votes
1answer
46 views

Storing files in database through encryption and Viewing them only on providing key for the file

I have this use case: User1 uploads his file into the database which should be encrypted. Any other users who request that file, user1 will be notified for approval, on approving other users should ...
0
votes
1answer
46 views

Best practice for config files for ec2 instances

I am building a lamp server ec2 image for a project we are doing. These images will be in an autoscaling group and on startup will be running startup script. THere are some config files that have ...
1
vote
2answers
233 views

Can I use RSA to encrypt an AES256 key that I put at the beginning of my AES256 encrypted file?

I have a master server generating large files for other (known) servers to download. Those files: Are quite big. From 20MB to 5GB. Are written once by the server and then it forgets about them. ...
1
vote
1answer
454 views

Encryption for cloud storage

Background / Requirements using a Windows machine hard drives are already (veracrypt) encrypted volumes not relying on any cloud service provider to trust them with their encryption file by file ...
0
votes
1answer
85 views

Backing up an encypted drive on an encrypted drive

I have searched, and have been unable to find an adequate answer to my question. My apologies as I'm sure this is a relatively elementary question for the users here. I have encrypted my Windows 10 ...
3
votes
1answer
307 views

How secure is a 100-bit password in 2018 and onwards?

Long story short, I share a server with a few other people and store my backups there. All these backups are archived to a .7z file using AES-256 encryption, using a randomly-generated password of ...
0
votes
1answer
61 views

Is there any 'Open Enrypted File Container' Format?

Tools that create 'encrypted file containers' use open encryption standards like AES to encrypt container contents, however the container format is proprietary, I am guessing, so need the same tool to ...
1
vote
1answer
41 views

Potential security issue with md5 filename

I've been storing files using a filename of the md5 hash of the file. This allows me to not store duplicates of the same file and avoids any filename clashes. Each file has uses a different salt/iv. ...
0
votes
1answer
271 views

Crypto-shredding & backups of keys

I was wondering, how is crypto-shredding implemented in an environment, where data backups/mirroring is mandatory for the "key database" - as it must not be possible to lose the machine/db with all ...
0
votes
1answer
87 views

Recognise tool by which file was encrypted [duplicate]

I have file with extension *.encrypted. Can you give me some advice how to recognise by witch tool was this file encrypted? It´s not encrypted by some ransomware but by some encrypt tool. When I open ...
2
votes
1answer
227 views

Dropbox ransomware experience

How Dropbox handles ransomware issues? Can it effectively restore files encrypted by ransomware? The reason I am asking is because I am looking for a bullet-proof solution against ransomware and ...
1
vote
1answer
2k views

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG? I ask because some have stated that ...
4
votes
2answers
183 views

Is it safe to upload a read-only encrypted volume to a cloud folder?

I know keeping an active encrypted volume (like a VeraCrypt drive or a simple zip folder encrypted with AES256) on Dropbox/OneDrive/Gdrive/etc. is risky; data can be corrupted and the pattern of ...
1
vote
0answers
27 views

Using the same passphrase for files and filenames with filesystem-level encryption such as eCryptfs

In filesystem-level encryption schemes where files are encrypted and stored individually, filenames may or may not be encrypted. eCryptfs allows to encrypt filenames with a different key than the one ...
1
vote
1answer
1k views

Is it safe to keep my KeePassX database on my server or cloud with encryption? [duplicate]

My KeePassX file has a long and strong password. I've read several articles and discussions about how safe it'll be stored such a file on VPS or cloud service such as Dropbox. There was no consensus ...
1
vote
0answers
95 views

Can Gmail read password protected .docx files?

Can Gmail read MS-Word .docx 2011 (OS X) files that require a password to open? As I understand it, Gmail servers read emails and attachments in their efforts to characterize users for advertising ...
1
vote
1answer
274 views

Is there any mechanism that using multiple keys encrypt and decrypt a shared document?

I wanted to achieve the following mechanism to encrypt a document each person in a group of N (user a, b, c...)has her own key; user a and user b somehow decided to encrypt document M, and they can ...