Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
0 votes
0 answers
20 views

Security of Winrar 2022 - backdoors and encryption security

How likely is that the developers of Winrar would intentionally implement a backdoor to decrypt every file created by this program? Can anyone confirm that there isn't a built-in algorithm in the ...
  • 1
1 vote
1 answer
72 views

Why does some Ransomware encrypt also the file header and trailer?

Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
  • 13
0 votes
0 answers
40 views

Which of these filesystem encryption philosophies and methodologies are better for which purpose?

Currently on the "FLOSS market" there are multiple options for encrypting remote cloud storage following different security models and different philosophies. To name a few: encfs (I guess ...
0 votes
2 answers
125 views

Encryption method for file that can only be read by program

I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs. Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
0 votes
0 answers
35 views

Android FBE securely wipe all data

According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage. Does a factory reset of an FBE phone reset the keys of ...
  • 1
0 votes
1 answer
103 views

Are Popular Closed Source Archivers Secure?

I'm wondering if popular closed-source archiving software like WinRAR or WinZIP are tested regularly by other developers to check if they add some kind of intentional backdoor or unintentional ...
  • 1
3 votes
3 answers
228 views

Does knowing how an encrypted file changed make it vulnerable?

Scenario The following bash commands create an empty file test.txt, encrypt it using a default algorithm to test1.gpg, then append the line new line to the original file and encrypt it again to test2....
  • 705
1 vote
1 answer
66 views

can these encryption methods for a text file protect against physical access to machine by adversary?

My threat model is that, the adversary has physical access to the machine and root access. I don't care about any data on the system other than a couple python scripts that contain sensitive ...
0 votes
0 answers
128 views

How to fix import private key in GPG?

Since, I am new to gpg I wanted to generate a key pair. So I typed gpg --full-gen-key and inputted the following: root@kali-linux:~# gpg --full-gen-key gpg (GnuPG) 2.2.35; Copyright (C) 2022 g10 Code ...
  • 101
1 vote
1 answer
74 views

Flashdrive data confidentiality when disconnecting flashdrive from machine abruptly

Assuming I boot up a fully encrypted OS from a portable flash drive and do some tasks in this running OS; then abruptly disconnect this flash drive from my computer and a malicious actor gets their ...
0 votes
1 answer
77 views

How secure is a bitlocker startup key on a mountable encrypted container?

Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely. I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
1 vote
1 answer
114 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
0 votes
1 answer
102 views

How to design a secure file storage/sharing platform

As the title implies, I would like to design a secure file storage/sharing platform. This is an abstract design question, so details regarding programing languages or platforms are not particularly ...
0 votes
0 answers
64 views

Secure logs on an embedded IoT device

I need to secure logs on a IoT device (Infineon TC233). It has 2 MB flash and a HSM. We are at the design stage of development. Since logs will be primarily event & data logs, the size of the log ...
3 votes
0 answers
296 views

When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?

VirtualBox has an option to encrypt the drive of a VM. When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted. I'm thinking that both do pretty much the same ...
1 vote
0 answers
57 views

Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow

I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs. Decrypting is performed with gocryptfs as follows: PC boots as usual and starts the sddm service I enter my login ...
0 votes
1 answer
55 views

Is there a way for a file/binary/exexutable to verify it's own integrity?

So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my ...
0 votes
2 answers
77 views

Is it possible to eavesdrop HTTPS encryptions by file size?

I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
  • 101
0 votes
1 answer
133 views

How do I import a private key from a hard copy?

I started playing with encrypting some personal files, and I exported the private key as an .asc file, but also on hard copy (plain paper) and can't understand a thing about how it says to import it ...
  • 3
0 votes
1 answer
128 views

Should I encrypt backup files with WinRar?

Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
  • 487
0 votes
0 answers
77 views

Step-by-step file encryption/decryption using user-supplied password

Let's say I want to build a dropbox clone. When users upload files they need to be encrypted. Later on, when the user needs to access their files, the application should be able to decrypt them using ...
  • 101
1 vote
1 answer
270 views

At-rest encryption. Use SFTP log-in credentials to unlock/decrypt encrypted drive or folder on an Ubuntu Linux server

I have a simple file server running on a small Ubuntu machine that facilitates file sharing and 2 way folder syncing between my and my girlfriend's 4 computers through SFTP over a private network. The ...
0 votes
1 answer
130 views

What’s the best way to only allow a file to be opened with multiple people’s authorisation?

Is there software available that makes it easy for multiple authorisations to be required before a file can be opened? The simplest solution I've found online is to encrypt a file with a password, ...
0 votes
3 answers
197 views

Naming encrypted files in the cloud, without leaking info about their content

I'm working on a photo sharing app that stores files in the cloud, encrypted, and lets you share those files with others. To do that, as suggested in answers to this previous question: files are ...
1 vote
3 answers
249 views

Standard for encrypt files before transfer them over internet

I know there are some standards for transferring data securely such as HTTPS for web applications, or SPC & SFTP for secure file transfers. Encrypting files using PGP is a way to encrypt files ...
  • 185
0 votes
1 answer
228 views

What is the best way to encrypt extremely sensitive and important data

I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines. I understand ...
  • 781
0 votes
1 answer
147 views

File transfer service through server that is not P2P, encrypt files without letting the server know its contents

A file transfer tool, that works through a middle man server, as the following diagram: Client A uploads a file to the server, Client B has websocket events that a file is transferring and starts ...
0 votes
1 answer
138 views

Security Tools - File Encryption vs Corruption

When security tools quarantine files, why do they tend to use encryption, rather than simple file corruption? The main goal of quarantining a file is to make it impossible to run on a system. This ...
2 votes
2 answers
152 views

Sharing files with others, encrypted on untrustworthy file storage (e.g. the cloud)

I want to work on a photo-sharing tool, where I can: store photos on untrustworthy disk space (like the cloud) share photo albums with friends and family update photo albums (rarely but happens) ...
20 votes
3 answers
6k views

Not understanding why I should use public/private key encryption over password?

My knowledge about these topics is very elementary, please "school me" if I said something completely wrong, it would surely help me understand these things better. Now, to my issue. Now ...
0 votes
1 answer
113 views

I want my customers to download the encrypted video file to a secured usb and play it directly in TV by providing unique key which i shared to them

How do I make sure that this content is not hacked by anyone ? Do I encrypt every file and store the key before my customers download their unique copy?
0 votes
0 answers
166 views

Where to store passwords needed by linux processes?

I am working with C++ processes on a linux (CentOS 8) environment. These processes should be able to access an encrypted file on the system. Where should I store the password for this encrypted file? ...
0 votes
1 answer
114 views

How to securely encrypt shared data for a dynamic amount of users?

Example: Bob uploads a file to my custom file server locked with a password, which then the file server generates a link for him to share Bob wants to be able to share this data to anyone that has ...
0 votes
1 answer
236 views

Is it possible to extract encryption keys from software executing on your own system?

I'm a newbie in this field so forgive me in advance if this question is stupid in anyway. Say we have a software that is executing on our system and encrypting files using a secret key that is not ...
  • 3
3 votes
3 answers
366 views

Does EFS protect against data theft by ransomware?

Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key ...
0 votes
1 answer
459 views

Where is the PDF encryption key stored

Assuming you have the user protected PDF file. Using the password, the cryptographic key is generated and the file encrypted. Where is the key stored, is it on the RAM every time the file is opened?
0 votes
1 answer
184 views

Does Wire encrypt data-at-rest in their apps?

Does Wire employ encryption of data at rest? I generally consider Signal and Wire to be the best tools today for sending information privately between two parties. Both meet the marks on crypto, open-...
0 votes
0 answers
509 views

Crack Windows 10 password with Cain and Able

A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
  • 101
0 votes
2 answers
115 views

Key derived from source files; deduplicated file storage

I'm wondering if the following system would be a secure way to store frequently duplicated files. Hash the source file, deterministically derive a key from it. The source file(s) are likely to be ...
1 vote
0 answers
924 views

Decrypt AES 128 encrypted file with a key file

I have a file which is encrypted using AES 128 and I have a key file whose size is 48 bytes. How can I decrypt the file using the key file? The key file has no extension, I opened it in notepad and it ...
1 vote
1 answer
189 views

Can a host access a VPS disk's encrypted directory directly while running?

I have an Ubuntu VPS running at a remote host. The disk is not encrypted but I have a specific directory that is encrypted for which I must provide a password via an SSH session (not stored anywhere ...
0 votes
1 answer
2k views

Still able to recover files after running cipher.exe on windows 7

After running cipher.exe on my entire C: drive, I'm still able to recover deleted files using recuva. In fact, doing a before and after, I see no discernible difference in the files that are able to ...
0 votes
0 answers
70 views

How to protect IP-sensitive data in files generated and used by users

I'm working on an offline windows application that generates and loads key results as files. However, these files provide key insights into how our product works internally. To make matters worse my ...
  • 101
1 vote
2 answers
236 views

How can one encrypt a file and be sure the original file can not be recovered on a SSD?

Let's say that I have an unencrypted file and I'm trying to encrypt it and make sure the original file can not be recovered from my disk. If I, for example, create an archive, put the file into it and ...
3 votes
2 answers
1k views

How to pass both passphrase and password in GPG signed symmetric encryption?

I am new to GPG so I may be going about this all wrong. I have some files I would like to encrypt symmetrically using AES256, but I want to sign them with my GPG key. I need to automate this process ...
1 vote
2 answers
182 views

What is the name of the crypto system used by ICANN's DNS recovery system?

I once heard about a type of crypto system that behaves in the following way: I have x secret keys that work together to decrypt messages encrypted with a public key d. If I get at least n of the x ...
0 votes
1 answer
112 views

Does GPG encryption via subkey harm file quality?

If I were to encrypt a folder with music files or movie files, or even only the files themselves separately, would that hurt the quality of the files? For example, if I encrypted a lossless audio file,...
1 vote
3 answers
212 views

Preventing access to encrypted files at all

Suppose I create an encrypted container using VeraCrypt and want to upload it to Google Drive/One Drive for storage. The container is encrypted with AES-256. I know that no one can extract any meaning ...
  • 275
2 votes
1 answer
254 views

How can a pdf file have two passwords?

I receive emails from my bank with password protected PDF files, and they provide two passwords - either xxxx or yyyy. How is this possible?
  • 121
3 votes
2 answers
409 views

What is the reason for iOS per-file key encryption?

I know that apple provides per-file key encryption .i.e. a separate encryption key for each file exists on the apple device. The Hardware Key and the Passcode are required to generate these random ...

1
2 3 4 5
10