Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
3
votes
2answers
66 views

Preventing/Detecting forgery of logs generated in a potentially hostile environment

I have an application that runs on some host machine and generates logs. Later in the day those logs are securely transmitted to my machine. The problem is that while the logs are being generated I ...
1
vote
3answers
636 views

Encrypting a huffman encoded file

I wrote a huffman encoding program that can compress and decompress files. The file contains a header which contains information that allows me to retrieve the huffman tree. I wanted to add a simple ...
1
vote
2answers
860 views

How to transfer securely a file between servers?

Let's say I have two Linux servers. One containing a desktop app database (running on a local network) and a webserver. I want to automatically transfer each hour a database file (with a size of a ...
-2
votes
2answers
96 views

Identifying/decrypting hashed/encrypted data [closed]

This weekend I took part in an security challenge. I had great fun doing it but i found a huge gap in my knowledge that I'm really keen to fill and hope someone here can help get me pointing in the ...
1
vote
3answers
5k views

How does encryption/decryption work when one generate random key?

I am new to this and want to ask a basic question. Suppose I used my password (say "ABC123") to generate a key using the PBKDF2 algorithm (or any such algorithm). For encrypting a file I'll input my ...
0
votes
1answer
308 views

Can I test/determine all decryption types on an unkown filetype. I do have the password [closed]

I have a file that's nearly 200Mb. It was reportedly packed/encrypted with Kruptos 2. But it has a .~enc extension. The header of the file is pure gibberish. Running file says it's data running ...
1
vote
3answers
105 views

Completely Protected Virtual Folder

I am a Python / C developer currently working on a extremely important piece of software. The details of the code will not be mentioned, and the only place the code appears is on my own hard drive, in ...
1
vote
0answers
130 views

Where to save digital content and prevent sharing?

I've been inspired by the answer to the question here: Location to store an encryption key It gave me a lot to think about. My friend and I are building a website and we've encountered a problem in ...
4
votes
1answer
612 views

File Vault 1 password from memory dump

I have a osx 10.9 machine with a File Vault1 encrypted user partition. I would like to remove the encryption, but I don't remember the "master key" which is the only way to remove encryption on-the-...
1
vote
3answers
3k views

Is storing the private key and public keys in same directory on server recommended, like OwnCloud does?

Is this recommended or a good/normal practice? I think not. Because I saw that OwnCloud stores all encryption keys in one directory on the server. One directory contains the private key(s) and one all ...
8
votes
4answers
7k views

TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?

I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
2
votes
2answers
202 views

Securing data on a server

I have a server which has 'loose' physical security (somewhat easy for the entire server to get stolen). For the sake of the question, let's assume that anyone can access the server physically, what ...
1
vote
1answer
102 views

Cryptographic patterns a security risk?

I am writing an application that serialises objects and then saves the resultant XML in an encrypted file. I am using an Initialisation Vector and a Salt both saved in the file for decryption so two ...
3
votes
3answers
4k views

AES encryption do I need to use a Mode?

I am currently working on a file encryption program using Java Cryptography Architecture. My plan is to have a number of encrypted files where each file has a different AES key. To keep track of the ...
1
vote
2answers
703 views

What is the security benefit of Per-File Encryption key architecture?

Are there any security benefits to having a different key(it is encrypted by a master key and that encrypted key is included in the metadata for the file) used to encrypt each file versus just one key ...
0
votes
2answers
2k views

Encrypting files in .NET?

I am in a situation where I would like to encrypt audio and text files for an application I am working on. I did some looking around and from what I have seen the Rijndal encryption algorithm would ...
2
votes
1answer
1k views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
12
votes
1answer
16k views

Why is GPG file encryption so much slower than other AES implementations?

Correct me if I'm wrong: When encrypting a file, GPG creates a one-off AES encryption key and encrypts that key using RSA. This is supposedly to take advantage of AES's superior performance when ...
1
vote
0answers
2k views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
2
votes
1answer
224 views

Method/program for editing secure files

I'm not entirely sure if this is on-topic for Security.SE, but it doesn't seem entirely off-topic either, so I'll try. :) I keep a couple of (GPG-)encrypted files with more-or-less sensitive ...
1
vote
2answers
373 views

How could police identify digital contraband and charge someone if it's encrypted with keys?

For example, say I am transferring heavily-encrypted DVD/Blu-ray movies/game copies over the internet. However, I am using double or (+) encryption with keys required to decrypt the file using an ...
0
votes
1answer
1k views

File encryption with external key

I want to encrypt a few files on my computer (not FDE). To do this, I'd like to use something that requires having some external usb thing with the key on it plugged into the computer. Price is not ...
0
votes
3answers
96 views

Security checks on file transfer [closed]

What are the security checks that I can make on a PDF file being transferred between server and the client?
2
votes
1answer
2k views

Retrieve RAR Password through Extracted File

So I was wondering about something, but for the simplicity, consider this example: You have a file with n encrypted files in it, of which one is called 'Note.txt' You also happen to have another file ...
5
votes
2answers
5k views

How secure is EncFS compared to TrueCrypt?

If I choose the paranoia option for EncFS and for TrueCrypt I create containers using the encryption algorithm AES-Twofish-Serpent and the Hash Algorithm Whirlpool. Are both methods equally secure, ...
2
votes
2answers
276 views

Appropriate way to encrypt passwords/financial info?

I am in the process of creating a file/files containing all of my logins/password info for various accounts. In the event of my untimely demise this file would be sent to the appropriate party(s). ...
1
vote
2answers
194 views

Revoke decryption capability

I'm looking for a way to encrypt some data in such a way that I can later revoke a single person's ability to decrypt it. We have a store of database backups that are currently encrypted using GPG. ...
4
votes
4answers
1k views

Apple FileVault — would Apple build a backdoor?

Could Apple build a backdoor into it's FileVault encryption technology? Is that a risk you take of using a closed-source encryption product in general? Would using something like TrueCrypt be more ...
1
vote
1answer
464 views

How to generate Initalization Vectors correctly

I'm working on a project that splits large files into several encrypted fixed-size blocks (e.g. 4KiB). Those blocks shall be used to be stored persistently on a storage device. Blocks are encrypted ...
6
votes
7answers
2k views

How do I secure patient data cheaply in a small doctor's office?

I am a single practitioner with 3 work stations and a server. What is the best cost effective way to secure my data and I suppose encrypt it. The gov't wants us to prevent any unsecure access to ...
3
votes
1answer
3k views

Hacked site - encrypted code

Couple days ago I gave noticed that almost all php files on my server are infected with some encrypted code and in almost every file is different. Here is the example from one of the files: http://...
8
votes
2answers
8k views

What trust level should I give keys I need for encryption?

As I'm encrypting server backups, I typically install my public GPG key from a keyserver into me server's keyring: gpg --search-keys 6569758F I import the key into my keyring. I then attempt to ...
-1
votes
2answers
115 views

Restricting locations for unzipping a zip file

I hope that I have found the correct place to ask my question regarding unzipping files. I would like to see if there is a way to restrict the locations available to the user to unzip a password ...
2
votes
1answer
423 views

TrueCrypt External Multimedia Hard Drive

I have an external multimedia hard drive (1.36TB). I made 4 partitions of 350GB each. Then I shredded the free disc space of all the partitions. Now I want to put Truecrypt on the disk. I can't ...
1
vote
1answer
764 views

What is the best practice to save encryption and decryption method in an application?

Almost all the application regardless of their nature and purpose are using encryption to secure sensitive data to be saved to database, if the user using a method to encrypt a file (for instance an ...
1
vote
1answer
141 views

Securing data on a mobile device (even from the user/owner)?

I am writing an application to generate OTP codes for two factor authentication where I need to securely store data locally. This data must be secure from both the owner/user as well as intruders. I ...
2
votes
2answers
5k views

Scan password protected email attachments for malware

We have an email policy that prevents email from going through if it has password protected archive files attached. This is to protect users from viruses and trojans because the contents of the ...
5
votes
1answer
1k views

What iOS apps use data protection?

The iOS data protection API and its implementation are fairly well documented, but it is only really useful if apps actually use some level other than NSFileProtectionNone for their files. Is there ...
4
votes
1answer
558 views

How is the FileVault master key protected?

FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. Reference: this cnet article. See also the stack exchange question How does FileVault 2 ...
3
votes
2answers
4k views

Explain real world symmetric key encryption

I'm new to cryptography. While reading about symmetric key encryption, it was mentioned that it requires secret key exchange so that 2 parties can decrypt the ciphertext. Now, using some encryption ...
1
vote
1answer
709 views

Questions towards my application that uses bouncy castle crypto

I am implementing an application using bouncy castle crypto API it uses AES-CBC to encrypt files and i have some questions regarding the development of my application. I dont want to use a static IV ...
15
votes
4answers
12k views

What are you doing when you move your mouse randomly during a truecrypt volume creation?

Is that called a 'round' every time you move your mouse when creating a new volume? I'm talking about the screen with the random numbers during the volume creation process. What is the purpose of ...
5
votes
1answer
1k views

truecrypt second encryption of the master and XTS key with a back door password

this table was published by (Ubuntu Privacy Remix Team ), in an analysis document, anyway i was quite skeptical. On file based containers as well as on completely encrypted partitions or drives ...
5
votes
2answers
12k views

Can I properly make password-protected 7z archives secure?

After reading the question and answers of this and this, I left with an overall impression from the last one that zips were considered not safe and insecure way of sharing data. I still think ...
7
votes
4answers
9k views

when people say a file has a checked md5 hash, what exactly does that mean?

ok I was just reading this site: http://www.zdnet.com/blog/bott/stay-safe-online-5-secrets-every-pc-and-mac-owner-should-know/3542?pg=4&tag=mantle_skin;content and thought of something I always ...
2
votes
2answers
908 views

7zip AES encrypted archive, padding oracle attack

I created an encrypted but forgot the password. When I attempted a pattern based brute force it said it had over a 100 trillion passwords to check. And to my knowledge that could take a few years. ...
2
votes
1answer
319 views

AES + CBC to encrypt individual local files, fixed IV?

I am using AES and CBC to encrypt a local files separately. I don't plan to transmit them over any network. What are the risks of using a fixed IV for my encrypting application? The only problem I ...
1
vote
1answer
119 views

How to protect integrity of resource files in a white-box attack context?

In a white-box attack context (e.g. PC, tablet, smartphone), there is no trusted entity, which can be used to guarantee some reasonable security. TPM is not considered a solution because it is not ...
0
votes
1answer
569 views

Should I run my password through Bcrypt before using it for encrypting a file with AES-256? [duplicate]

I need to encrypt a file with a password that can be memorized. So I was thinking about running the password through some rounds of Bcrypt before using it for AES encryption, so every time I want to ...
-1
votes
1answer
4k views

How long does it take to crack a 100-letter long winrar password? [closed]

i´m interested in how long time it would take for a super computer dedicated to crack to crack a 100-letter long winrar password. The password contains Lowercase, Uppercase, Digits, ...

1
5 6 7
8
9