Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
-1
votes
1answer
176 views

Check to see if public key provided is PGP/openPGP compatible

I'm still new to encryption and differences between an RSA public keys and PGP/openPGP compatible public keys. First of all, is there a difference between an RSA public key and a PGP/openPGP ...
2
votes
2answers
10k views

Determine Security Of A PDF File [closed]

How do I find the exact encryption on a PDF file? I can't seem to get a direct answer on the net. For example how do I tell if a document is PDF 1.1 - 1.3 (Acrobat 2 - 4), PDF 1.4 - 1.6 (Acrobat 5 - 8)...
-1
votes
2answers
137 views

Inherited a project with a backdoor to manage; code was promptly stolen by a known entity. What's next?

I have a doozy for you - almost posted this in the project management stack. I was asked to oversee a development of a project. At some point the previous manager thought it was prudent to create a ...
0
votes
1answer
142 views

How secure is an archive file if the password is cryptographically random?

I looked for an answer for this question over here, yet all I could find were about cracking the password. So let's say I'm using PHP to generate a cryptographically secure random password: echo "...
1
vote
1answer
61 views

Securing folder being accessed by batch file

I will state up-front that I know fairly little about encryption and could be asking a silly question, or asking a good question in a silly way. Thank you in advance for your patience. I have a ...
8
votes
2answers
3k views

Is it possible to use SSH agent for generic data encryption?

Is it possible to use running SSH agent to decrypt some data (supplied as a string or read from file)?
2
votes
2answers
911 views

Data at Rest vs Data in Storage

I have a question about regulatory compliance. If I am required to have data at rest secured (encrypted), what are they looking for? Should my database files be encrypted, or is data at rest referring ...
2
votes
2answers
2k views

Is mattermost encryption for group messaging and file transfer secure?

Mattermost is an open source group messaging and file transfer service, designed as an alternative to Slack. Their account of their security setup is detailed here. Are the encryption options it ...
0
votes
1answer
73 views

Can the content of a plain-text help breaking the key to the encyption used? [duplicate]

i am currently trying to encrypt a set of files safely (using AES encryption in CBC mode), but knowing that plain text copies of some of these files may be floating around the file system i am worried ...
9
votes
6answers
24k views

Whats the point in having software's like Veracrypt, which end of the day needs password to decrypt?

There are encryption softwares like Veracrypt which encrypt data and the only way to open encrypted file is via password, but a simple compressing softwares like RAR also provide password protection. ...
3
votes
1answer
4k views

Is EFS on Windows useless?

So, after reading through the dialog from one the EFS Windows--after encrypting certain files on my system--I ran into a possible complication. If I'm not mistaken, the encrypted file or folders are ...
0
votes
3answers
471 views

Make Files Encrypted As They Download

Is it possible to encrypt a file as it downloads? Security is #1 concern, so what I am after is a way that once the file is completely downloaded and moved to an encrypted drive (not directly ...
1
vote
2answers
4k views

Encrypt files on FTP server

I have a practical situation here, my company is a FTP server provider for some clients. The clients are sharing their files on our FTP server and have had no problem with access management and ...
5
votes
2answers
2k views

Designing a cryptographic file-sharing protocol

As a learning project, I am trying to implement a secure way to share files with a friend over dropbox. (I am not looking for existing software, I am doing this in order to learn how to do this right.)...
3
votes
2answers
460 views

Best practice for encrypted file (or password) recovery

I am writing an app (Java) that stores potentially sensitive data in the cloud using a provider chosen by the user. So I am encrypting the files using AES/EAX + PBKDF2. That's the easy part, or so it ...
4
votes
0answers
232 views

Is there are way to do Per-User Encrypted Samba Storage?

I'd like to address following scenario: Company keeps documents in-house and not in Cloud Documents are stored on Samba Share Sysadmins have access to the storage so they can dump it The point is to ...
1
vote
1answer
653 views

Sweet 32: Which applications we consider vulnerable?

Backgound There is a lot of hype about the Sweet 32 paper in the recent days. The paper shows that 64bit block size symmetric cyphers are too vulnerable today, it performs a birthday attack on ...
-2
votes
1answer
317 views

How to encrypt a file? [closed]

I created my own encrypt / decrypt script and I can encrypt any kind of strings. I just need to know how can I use my script to encrypt a file like an image or a text file? My script is working in ...
-1
votes
2answers
770 views

How to securely encrypt and decrypt files between a server and a client PC [closed]

I am building an application where users send files with a password for encryption to a server via ssl. They can then share the encrypt files with people I will then build a desktop application in C+...
1
vote
2answers
720 views

Various questions about file compression and encryption regarding hacking (zip, rar, 7z) [closed]

So I'm curious about a few aspects of compressed files (Zip, rar, 7z, etc), and how they impact hack-ability. There is enough on this subject that I'm not clear about (since this isn't a career of ...
0
votes
1answer
4k views

PGP encryption using .ASC file. [closed]

I need to send a important file(i.e.: pdf) to someone. They gave me a .ASC file for encrypting the file i will send. What could be the procedure for encrypting the pdf using that .ASC file? Please ...
3
votes
1answer
334 views

Are AES-CBC encrypted files subject to padding oracle attacks?

Almost all info related to padding oracle attacks on AES are described in the context of client/server scenarios but does it apply to local encrypted files as well? For example, a file P is ...
1
vote
2answers
557 views

How to eliminate data leaks when accessing encrypted data?

Goal: Encrypt/secure and access sensitive files (PDFs, etc.) locally. Method 1: Store files in a VeraCrypt file-hosted volume (container). Concern: Data Leaks. When mounting and reading files from ...
-3
votes
4answers
535 views

Which cryptographic algorithm should be used on client side to encrypt file before uploading to a cloud which is only for storing purpose?

I want to develop a website which will take the files from my computer encrypt it with my key and upload it on cloud which is only for storage purpose and decrypt it after downloading it on my ...
30
votes
6answers
3k views

Is there any reason I shouldn't make a GPG-encrypted file publicly-accessible?

I'm working on a project where we need to keep a few specific files easily accessible, but encrypted. My idea for accomplishing this is to have the files available in the project's public website, ...
2
votes
2answers
110 views

Is there such a thing as application-specific encryption?

I am looking for a way to encrypt certain files (.jpg, .pdf, standard file extensions) such that they can only be opened by a certain application (assuming this application will have the relevant file ...
2
votes
1answer
7k views

How to crack encrypted disk (crypto-LUKS) in an efficient way?

I had a disk encrypted by crypto-LUKS but forgotten password. I read a question posted here. LUKS HDD Encryption crack But before that I want to know if there's some free software I can use to ...
1
vote
1answer
97 views

Javascript file detection

One common technique I use is xor bruteforcing on binary data. In this case, I would like a heuristic approach to determine whether or not any possible candidate plaintexts are javascript. This rules ...
4
votes
3answers
383 views

Safely remove original file after encryption

My application encrypts a file, and the result is written to a different one. How do I safely remove the original one (C++)? Update. Wow! The problem is more complicated than I thought of it... 1) ...
0
votes
4answers
255 views

Secure way to create encrypted file

What is the secure way to encrypt a file with a key? Since it will be a small file, is using AES good enough for this assuming I keep the key in memory? So what I can do is just use AES for encryption/...
5
votes
1answer
2k views

Secure sharing between Windows computers

I'm working on a project to setup a secure system to share files between 5 Windows computers. The computers are part of a domain so could have multiple different users logging in (based on an AD group)...
3
votes
1answer
2k views

VeraCrypt: create encrypted container: Volume Format: Options: Filesystem: None?

I see VeraCrypt has an option to create an encrypted container with no filesystem. How is this possible? If there is not filesystem there, then how can I place my files or folders in the container? Is ...
1
vote
0answers
342 views

AES keyfile size

I would like to encrypt files using a key file instead of a password. What I would do is: 1) Generate X random bits using openssl rand X > mykey 2) openssl enc -aes-256-cbc -in secretfile -out ...
0
votes
2answers
207 views

Which of AES modes are safer and faster for transferring data over the network?

I have using Crypto++ in Qt and use of AES Algorithm for encrypting files. I know about AES modes and their applications. I have use of StreamTransformation method for encrypting files in CBC and EAX ...
1
vote
2answers
2k views

How does SFTP work? Please help someone [closed]

We run a system that automatically sends a swift message at the end of a process. But this messages are sent using FTP. We feel the FTP process is too prone to MITMA and wish to change the sending ...
4
votes
3answers
1k views

I want to roll my personal cloud hosted Password Manager using pass. How secure/insecure would this be?

I've come to the conclusion that I need to up my security. I currently have a dozen memorized passwords I use for every device and website. I'm against KeePass/Lastpass due to having to trust they ...
1
vote
2answers
754 views

Suggestion on asymmetric (hybrid encryption) encryption for big file

We will be using following commands to encrypt to firmware file at server and that will be decrypted on the embedded board using decryption command mentioned below, Following command will be used to ...
-1
votes
1answer
633 views

How to protect EXIF data against editing/deleting in jpeg file?

Is there any option to protect EXIF data against editing or provide password protection? I came accross the idea of creating executable file from image file, so that someone can view image the way is ...
1
vote
1answer
642 views

How to use a different key and IV for encrypting a file with AES in C++?

I know how AES encryption works, and different modes (for example EAX, CBC, CCM, ...), and also about CipherBlock and StreamTransformationFilter methods and their implementation in C++. I am using ...
-1
votes
2answers
165 views

Limit possible harm of ransomware on a fileserver

First to say: I know I need a backup and I have one of course but my question isn't about the safety of the data but about how to reduce the possible time that is needed to restore data. I'm already ...
0
votes
2answers
216 views

What are the recommended steps involved in creating an encrypted file format? [closed]

I'm developing a pretty standard program which lets users save their work in a custom file format and reopen it later. Now I'd like to add the capability to encrypt the file using a user-defined ...
2
votes
3answers
2k views

Do file-encrypting software give a false sense of security? [closed]

I sometimes use a VeraCrypt volume to store personal data (mostly backups from another computer) on a Windows computer I don't own. But I learned over the years that modern OSes store users' data in ...
3
votes
1answer
166 views

Offering a privacy scenario with PHP mcrypt library

first of all, sorry if my question is not clear, because English is not my first language. Anyway, let-me explain the concept I'm struggling to solve as the best solution. I have some guys, and they ...
7
votes
1answer
1k views

Encrypting individual files on OS X

I am about to go paperless, and I want to protect the documents that I scan. The use case is that I'll be scanning paper documents, encrypting each file, and storing them locally and on various backup ...
-2
votes
6answers
8k views

How to prevent illegal file transfer or copying of video files from a PC? [closed]

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
3
votes
2answers
4k views

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack them,...
21
votes
3answers
3k views

Would it be plausible to write your own anti-crypto-ransomware tool? [closed]

Question After reading about how basic ransomware targets and encrypts your files. I was wondering if it would be plausible to write your own script to try and detect such activities? Initial ...
4
votes
1answer
488 views

How to encrypt an entire portable HDD, so that it cannot be read/written without the password for it?

I use a portable USB drive (Seagate FreeAgent Go Flex) to keep all my personal stuff, and though the HDD company does offer a password scheme to control access to it, that would work only on windows, ...
1
vote
1answer
275 views

Getting file from Amazon s3 encrypted based on user

I am storing my files on Amazon S3. My problem is that whenever a user asks for a file I want to generate an encryption key (user specific key) and encrypt the file and send it to him. So basically I ...
7
votes
2answers
8k views

Security of Microsoft OneDrive

A friend asked about putting some of his data on Microsoft's OneDrive. I did some research, and what I learned seems very surprising. It appears that all the user data on MS OneDrive is store ...