Questions tagged [file-encryption]
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
488
questions
3
votes
2
answers
113
views
TPM - ECC based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 259
0
votes
0
answers
7
views
Protecting office/excel files from theft; changing MS office excel's auto recovery path is not working [closed]
I'm changing Excel 19's autorecover file location on Windows 10 on Excel > options > save to a folder on a bitlocker encrypted partition.
When editing the file without saving, it creates a file ...
- 126k
1
vote
3
answers
79
views
Is there a way to store data securely on a client so that it can only be read by the client while connected to an authorising source?
I have a difficult issue facing an online gaming social space I frequent where personal content I've made for the platform is being stolen by users.
I'm wondering if there are any solutions to make ...
0
votes
0
answers
50
views
Deleting files from folder encrypted with fscrypt
I have a folder encrypted with fscrypt. If I unlock this folder and delete a file from it (as the folder is unlocked anyone can see the contents of the files), then after deletion I lock this folder ...
- 126k
0
votes
0
answers
18
views
Which is preferable compress and encrypt or just encrypt and no compression in purely security perspective and not in resources or efficiency? [duplicate]
I want to know what attack am I exposed to if I implement one of the two method. I'm pretty sure both of them are not 100% fool-proof and both of them are expose to traffic-analysis attack if I do ...
- 193k
0
votes
1
answer
80
views
Why some ransomware adds padding to headers
Does anyone know why some ransomware families (e.g. Cuba but also Phobos if I am not mistaken) pad the file header to get to 1024 bytes?
I mean what would be a reason for the ransomware developer to ...
- 126k
1
vote
1
answer
119
views
How to protect files in use on a system powered on from physical theft or tampering?
I'm in the process of figuring out an encryption strategy for a personal Linux system.
My laptop is almost always on, or in sleep mode, except for longer travels.
My main threats are theft of my ...
- 22.7k
0
votes
1
answer
74
views
How to setup a Per-File Encryption architecture
I would like to set up a per-file encryption architecture where every file is encrypted with its own key, and each key is encrypted using a master key.
Is there any good articles to read regarding ...
CommunityBot
- 1
0
votes
0
answers
64
views
How to find the correspond hash algorithm? [duplicate]
I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+...
1
vote
1
answer
57
views
AEAD: Authenticating a digest of my data instead the data itself
Relevant question for Python:
Stack Exchange: https://stackoverflow.com/questions/75739308/aead-authentication-with-huge-input-that-doesnt-fit-into-ram
Top Answers: https://topanswers.xyz/python?q=...
- 8,873
5
votes
4
answers
2k
views
Is it safe to store my login credentials in a Veracrypt volume?
I have a list of login credentials (usernames and passwords) that I wanna keep safe. I'm planning to keep it in an encrypted Veracrypt virtual drive with AES, SHA-512, and an 8-character password. Is ...
CommunityBot
- 1
0
votes
1
answer
252
views
Does Wire encrypt data-at-rest in their apps?
Does Wire employ encryption of data at rest?
I generally consider Signal and Wire to be the best tools today for sending information privately between two parties. Both meet the marks on crypto, open-...
CommunityBot
- 1
2
votes
2
answers
177
views
How to set up full disk file encryption?
I want to set up my company's laptops in a way that all files created on these laptops can only be read by these laptops. If it is copied to a USB then that file is only readable when plugging that ...
CommunityBot
- 1
1
vote
1
answer
218
views
How to design a secure file storage/sharing platform
As the title implies, I would like to design a secure file storage/sharing platform. This is an abstract design question, so details regarding programing languages or platforms are not particularly ...
CommunityBot
- 1
0
votes
1
answer
114
views
How does Ransomware encrypt files? [duplicate]
I have a question about how ransomware works.
According to the authors of this paper: https://www.cise.ufl.edu/~traynor/papers/scaife-icdcs16.pdf (page 2 - 3) , class C is: ransomware reads the ...
- 12.1k
0
votes
2
answers
202
views
Ransomware public key: can I find the respective private key?
I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded).
Is it possible to extract the private key from the public key?
- 297
1
vote
1
answer
258
views
Android File Encryption without screen lock
I am trying to understand the FBE Key generation and verification process at every boot. My device is going to be handled without a lock screen (Android 11 with FBE + Metadata Encryption Enabled), so ...
- 6,491
3
votes
0
answers
502
views
Strongest symmetric algorithm in 2022 [duplicate]
I'm curious about the best encryption algorithm for encrypting my files in 2022? I thought it was a good solution to encrypt my private key with AES-256 but I decided to ask here and choose better ...
- 126k
0
votes
3
answers
38
views
Encryption key fuzzing for forensics analysts
I'm trying to make a simple encryption tool for Debian-like systems. I would simply hash a password, use it to lock/unlock a file, and it would never be stored on the drive. My dad threw out the idea ...
- 1,559
1
vote
1
answer
154
views
What’s the best way to only allow a file to be opened with multiple people’s authorisation?
Is there software available that makes it easy for multiple authorisations to be required before a file can be opened? The simplest solution I've found online is to encrypt a file with a password, ...
CommunityBot
- 1
3
votes
2
answers
267
views
What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)
I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
CommunityBot
- 1
1
vote
1
answer
330
views
How do I secure sensitive information like system credentials in a configuration file?
I often get this question:
I have sensitive data such as system credentials which my web application needs to secure. Some things I can store in a database, but others (like the credentials to access ...
- 41
3
votes
1
answer
1k
views
Decrypt AES 128 encrypted file with a key file
I have a file which is encrypted using AES 128 and I have a key file whose size is 48 bytes. How can I decrypt the file using the key file?
The key file has no extension, I opened it in notepad and it ...
- 121
1
vote
1
answer
183
views
Why does some Ransomware encrypt also the file header and trailer?
Some time ago I read an article that mentioned that it is possible for some ransomware to change the magic numbers of a file (that makes sense). However, the authors claimed that their method was ...
- 193k
0
votes
0
answers
272
views
Which of these filesystem encryption philosophies and methodologies are better for which purpose?
Currently on the "FLOSS market" there are multiple options for encrypting remote cloud storage following different security models and different philosophies. To name a few:
encfs (I guess ...
- 1,552
0
votes
1
answer
149
views
Security Tools - File Encryption vs Corruption
When security tools quarantine files, why do they tend to use encryption, rather than simple file corruption?
The main goal of quarantining a file is to make it impossible to run on a system. This ...
- 1
82
votes
6
answers
159k
views
Why would I ever use AES-256-CBC if AES-256-GCM is more secure?
I guess the gist of my question is: Are there cases in which CBC is better than GCM?
The reason I'm asking is that from reading this post by Matthew Green, and this question on cryptography stack ...
- 44k
0
votes
2
answers
138
views
Encryption method for file that can only be read by program
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they ...
- 1,952
0
votes
1
answer
115
views
Are Popular Closed Source Archivers Secure?
I'm wondering if popular closed-source archiving software like WinRAR or WinZIP are tested regularly by other developers to check if they add some kind of intentional backdoor or unintentional ...
- 126k
2
votes
1
answer
1k
views
Employ fscrypt to securely protect, from data-at-rest exposure, all files+data installed after an initial Linux system build?
Our team's goal
We want to protect our sensitive data from being potentially data-at-rest exposed after we relinquish a Linux VPS (see below) provided by a hosting service. We're exploring simple(r) ...
CommunityBot
- 1
3
votes
3
answers
260
views
Does knowing how an encrypted file changed make it vulnerable?
Scenario
The following bash commands create an empty file test.txt, encrypt it using a default algorithm to test1.gpg, then append the line new line to the original file and encrypt it again to test2....
1
vote
1
answer
73
views
can these encryption methods for a text file protect against physical access to machine by adversary?
My threat model is that, the adversary has physical access to the machine and root access.
I don't care about any data on the system other than a couple python scripts that contain sensitive ...
- 193k
6
votes
2
answers
17k
views
Excel 2007 Encryption Strength
With a strong password of 10+ characters, mixed case, etc... is the encryption of an Excel 2007 document secure enough to create reasonably strong defense against a brute force attack?
What ...
- 2,265
0
votes
0
answers
438
views
How to fix import private key in GPG?
Since, I am new to gpg I wanted to generate a key pair. So I typed gpg --full-gen-key and inputted the following:
root@kali-linux:~# gpg --full-gen-key
gpg (GnuPG) 2.2.35; Copyright (C) 2022 g10 Code ...
- 1,552
0
votes
1
answer
129
views
How secure is a bitlocker startup key on a mountable encrypted container?
Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely.
I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
- 126k
1
vote
1
answer
77
views
Flashdrive data confidentiality when disconnecting flashdrive from machine abruptly
Assuming I boot up a fully encrypted OS from a portable flash drive and do some tasks in this running OS; then abruptly disconnect this flash drive from my computer and a malicious actor gets their ...
- 1,403
1
vote
1
answer
210
views
Military-grade encryption on Blu-ray discs?
Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
- 65.8k
4
votes
1
answer
1k
views
EncFS vs EFS advantages for Dropbox-seamless encryption
I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
CommunityBot
- 1
0
votes
0
answers
68
views
Secure logs on an embedded IoT device
I need to secure logs on a IoT device (Infineon TC233). It has 2 MB flash and a HSM. We are at the design stage of development.
Since logs will be primarily event & data logs, the size of the log ...
- 126k
40
votes
7
answers
77k
views
Does password protecting an archived file actually encrypt it?
For example if I use WinRAR to encrypt a file and put a password on the archive how secure is it? I keep a personal journal and am thinking of doing this, or is there a better way? It's just one huge ....
- 2,265
2
votes
0
answers
1k
views
When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?
VirtualBox has an option to encrypt the drive of a VM.
When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted.
I'm thinking that both do pretty much the same ...
- 937
1
vote
0
answers
95
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
- 1,552
0
votes
1
answer
124
views
Is there a way for a file/binary/exexutable to verify it's own integrity?
So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my ...
- 193k
11
votes
5
answers
17k
views
How secure are the password files used by Password Safe and Password Gorilla?
Password Safe and Password Gorilla are both programs to manage passwords. Both store a list of user passwords in a file, which is encrypted using a master password. They use the same file format, so ...
- 131
3
votes
3
answers
1k
views
Should I chunk or not for AES-GCM file encryption
New to file encryption. Need to use AES-GCM for file encryption, can't change the alg. Heard about the max plain text size should be 64GB with same key and IV pair. Environment is python 3 with ...
CommunityBot
- 1
0
votes
2
answers
97
views
Is it possible to eavesdrop HTTPS encryptions by file size?
I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when ...
- 44k
1
vote
1
answer
2k
views
Is it problematic to use file encryption (for cloud storage) inside an encrypted drive?
Background / Requirements
using a Windows machine
hard drives are already (veracrypt) encrypted volumes
not relying on any cloud service provider to trust them with their encryption
file by file ...
- 440
0
votes
1
answer
225
views
How do I import a private key from a hard copy?
I started playing with encrypting some personal files, and I exported the private key as an .asc file, but also on hard copy (plain paper) and can't understand a thing about how it says to import it ...
- 15.2k
16
votes
3
answers
4k
views
Is it possible to use SSH agent for generic data encryption?
Is it possible to use running SSH agent to decrypt some data (supplied as a string or read from file)?
- 131
0
votes
1
answer
199
views
Should I encrypt backup files with WinRar?
Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
- 52.3k