Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

45 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
326 views

Is there are way to do Per-User Encrypted Samba Storage?

I'd like to address following scenario: Company keeps documents in-house and not in Cloud Documents are stored on Samba Share Sysadmins have access to the storage so they can dump it The point is to ...
3
votes
0answers
69 views

How can we protect encrypted files and directories from being fingerprinted when stored on online storage services?

Assuming that online storage providers are considered untrusted, if files and directories are encrypted, how can these be protected against fingerprinting? The files are encrypted using rclone's ...
3
votes
3answers
788 views

Should I chunk or not for AES-GCM file encryption

New to file encryption. Need to use AES-GCM for file encryption, can't change the alg. Heard about the max plain text size should be 64GB with same key and IV pair. Environment is python 3 with ...
3
votes
1answer
1k views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...
2
votes
0answers
852 views

Employ fscrypt to securely protect, from data-at-rest exposure, all files+data installed after an initial Linux system build?

Our team's goal We want to protect our sensitive data from being potentially data-at-rest exposed after we relinquish a Linux VPS (see below) provided by a hosting service. We're exploring simple(r) ...
2
votes
2answers
167 views

What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)

I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
2
votes
0answers
103 views

Windows EFS Files Spontaneously Unavailable

We are trying to secure a folder with over 1 million very small text files using Windows EFS on Windows Server 2008 R2. We already have an infrastructure in place for backing up keys and data. We ...
2
votes
0answers
271 views

Has Stackfield been security audited and is the metadata safe?

It appears that Stackfield is one of the only functioning applications that combines end to end encryption, messaging services and file sharing. Peerio has just been launched (literally a day or two ...
1
vote
0answers
493 views

Decrypt AES 128 encrypted file with a key file

I have a file which is encrypted using AES 128 and I have a key file whose size is 48 bytes. How can I decrypt the file using the key file? The key file has no extension, I opened it in notepad and it ...
1
vote
0answers
270 views

Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?

I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
1
vote
0answers
39 views

Is it possible to adjust the header size in eCryptfs?

If I understand it correctly, eCryptfs creates a file in the "lower" directory whose content is a header, plus the encryption of the file in the "upper" directory. But when I create an empty file in ...
1
vote
0answers
184 views

OpenLDAP encrypt database or by attributes

I run an OpenLDAP server on which there is some data I wanted to encrypt. I cannot use a userPassword like attributes as this is hash. In my case I need to crypt/decrypt it with a secret key. But if ...
1
vote
0answers
96 views

Which attributes does DPAPI's "UseMachineProtection" use to identify a machine?

We're using DPAPIProtectedConfigurationProvider from the Windows Data Protection API to encrypt an application config file. The API offers a property called UseMachineProtection, so that the config ...
1
vote
0answers
36 views

Using the same passphrase for files and filenames with filesystem-level encryption such as eCryptfs

In filesystem-level encryption schemes where files are encrypted and stored individually, filenames may or may not be encrypted. eCryptfs allows to encrypt filenames with a different key than the one ...
1
vote
0answers
253 views

Can Gmail read password protected .docx files?

Can Gmail read MS-Word .docx 2011 (OS X) files that require a password to open? As I understand it, Gmail servers read emails and attachments in their efforts to characterize users for advertising ...
1
vote
0answers
428 views

Decrypt to memory for editing

I am looking for a secure way to edit sensitive text data, using Git and Vim in the process. An ideal solution would be: clone the encrypted git repository into memory; decrypt into memory; do the ...
1
vote
0answers
45 views

Is this protection for customer data both secure and fast enough?

A small electrical installation company has a big list of customers. The list contains personal information like names, phone numbers, addresses, info (like what product/installation) and some small ...
1
vote
0answers
174 views

Is volume level encryption enough to satisfy compliance requirements?

We are implement a cloud application and using nosql technology. We know there are quite a few compliance requirements out there require doing data encryption at rest. However, we would like to know ...
1
vote
0answers
115 views

Encrypted file to Remote Storage

Suppose I wanted to send some files to a remote storage device and (reasonably) guarantee their security and I am wondering whether something like the following method would be suitable: Encrypt a ...
1
vote
0answers
243 views

Encrypting File System Data at Rest on Windows Web Application

We have a web application (running in Apache Tomcat on a Windows Server 2008 machine) that stores most of its data in the file system. We are investigating ways to implement encryption for this data ...
1
vote
0answers
66 views

Secure upload/download design with malicious storage server

Assume we have a malicious storage server (a user-agnostic key-value store, supporting server.put(key, value) and server.get(key)) that we want to use for per-user based secure file storage. The two ...
1
vote
0answers
89 views

when/how does an encrypted volume .dmg change to reflect the file system it stores

I'm trying to verify that storing a .dmg file stays encrypted while only the mounted file system is unencrypted (see here). My thought was to create a .dmg containing a text file, make a copy of the ....
1
vote
0answers
457 views

AES keyfile size

I would like to encrypt files using a key file instead of a password. What I would do is: 1) Generate X random bits using openssl rand X > mykey 2) openssl enc -aes-256-cbc -in secretfile -out ...
1
vote
0answers
344 views

Clear EFS Cache at Set Interval

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
0answers
131 views

Where to save digital content and prevent sharing?

I've been inspired by the answer to the question here: Location to store an encryption key It gave me a lot to think about. My friend and I are building a website and we've encountered a problem in ...
1
vote
0answers
2k views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
0
votes
0answers
38 views

Naming encrypted files in the cloud, without leaking info about their content

I'm working on a photo sharing app that stores files in the cloud, encrypted, and lets you share those files with others. To do that, as suggested in answers to this previous question: files are ...
0
votes
1answer
48 views

Standard for encrypt files before transfer them over internet

I know there are some standards for transferring data securely such as HTTPS for web applications, or SPC & SFTP for secure file transfers. Encrypting files using PGP is a way to encrypt files ...
0
votes
0answers
81 views

Where to store passwords needed by linux processes?

I am working with C++ processes on a linux (CentOS 8) environment. These processes should be able to access an encrypted file on the system. Where should I store the password for this encrypted file? ...
0
votes
1answer
86 views

Does Wire use encryption-at-rest?

Does Wire employ encryption of data at rest? I generally consider Signal and Wire to be the best tools today for sending information privately between two parities. Both meet the marks on crypto, open-...
0
votes
0answers
211 views

Crack Windows 10 password with Cain and Able

A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
0
votes
0answers
32 views

How to protect IP-sensitive data in files generated and used by users

I'm working on an offline windows application that generates and loads key results as files. However, these files provide key insights into how our product works internally. To make matters worse my ...
0
votes
0answers
83 views

Decrypting a file knowing only the password

I have encrypted a file using a program with a password and would like to decrypt it on another device just with the password. Is there any software that takes the password, runs it through all key ...
0
votes
0answers
55 views

Password Vault Storing Passwords

I've been working on just a fun side project in C++ to practice encryption algorithms and I sort of ran into a bit of a roadblock of sorts. To summarize the project I have a text file of encrypted ...
0
votes
0answers
114 views

How secure is /dev/stdin in UNIX systems?

Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure? I've written the following alias to start an openvpn client more easily than before: sudo bash -c 'cd ...
0
votes
0answers
87 views

Encrypt files transparently from applications

Many CLI applications store or need secrets in plaintext files. I'm searching preferably for a tool, or a methodology, to encrypt those files without the application knowing. What do I mean by that : ...
0
votes
0answers
35 views

When using Encryption that produces random memory/storage can you randomly input memory/data that reads as known file types?

I refer to this question's answer, the second part mentioning the random data, and no headers or anything, including files that are recognizable. Reading the answer just made me think adding random ...
0
votes
0answers
179 views

Securely encrypt and decrypt files via PBE in Java (Jasypt seems insecure)

This post has been MOVED to StackOverflow due to lack of answers on Info Security: https://stackoverflow.com/questions/60960802/securely-encrypt-and-decrypt-files-via-pbe-in-java-jasypt-seems-...
0
votes
0answers
273 views

Possible to restore LUKS header from partition that uses the exact same password and keyfile?

I was in Windows 10 and it told me I needed to Initialize Disk so I clicked it and now my LUKS header has been overwritten. I created my encrypted partitions in Linux with cryptsetup command. However, ...
0
votes
0answers
276 views

How to determine what cipher I encrypted a file with?

Years ago I had a bunch of bitcoin in a wallet that I encrypted. This was back when bitcoin was like $0.20 or $0.30 each. At one point I couple hundred of them but didn't know what to do with them. I ...
0
votes
0answers
1k views

How to encrypt user files securely on the server with PHP

Description: I want to create an upload center for small files (word/excel/zip documents etc) with PHP. I want to protect files uploaded by user as much as possible, so if server is breached, ...
0
votes
0answers
200 views

Is there any Password Manager that supports Hardware-Based OTP encryption/decryption?

I see that some projects like KeepassXC use CR based OTP to provide some additional security. While this is discussed quite controversial my opinion is that - for quite some cases (e.g. most non-...
0
votes
0answers
99 views

Is it possible to encrypt Word Docs with something other than default?

AES 128-bit advanced encryption is fairly simple to break and was wondering if there was any way to use a more secure one? And if so - any suggestions?
-1
votes
1answer
53 views

Storing files in database through encryption and Viewing them only on providing key for the file

I have this use case: User1 uploads his file into the database which should be encrypted. Any other users who request that file, user1 will be notified for approval, on approving other users should ...
-2
votes
1answer
243 views

Is GPG symmetric (decryption) vulnerable?

Suppose a file (say, a text file source.txt) was encrypted into danger.gpg using GPG symmetric encryption on a compromised device. Since the device is compromised, danger.gpg could have been created ...