Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
2
votes
1answer
187 views

How can a pdf file have two passwords?

I receive emails from my bank with password protected PDF files, and they provide two passwords - either xxxx or yyyy. How is this possible?
2
votes
1answer
154 views

Is AES the recommended symmetric cipher for production level software?

I was considering developing an application level software for file encryption after stress testing many of my implementations of popular symmetric ciphers. I would love to support multiple ...
2
votes
2answers
145 views

File integrity assurance

I have the following scenario : Two parties want to exchange files. First party publishes a file on a secure server First party sends to the second, a hash of the file in order to be able to verify ...
2
votes
2answers
279 views

Is there any 'Open Enrypted File Container' Format?

Tools that create 'encrypted file containers' use open encryption standards like AES to encrypt container contents, however the container format is proprietary, I am guessing, so need the same tool to ...
2
votes
2answers
322 views

Encryption before backing up to the Cloud

I have collected a lot of data (approx 3TB) in photos and videos over the years, I've been upgrading to newer and bigger hard disks and luckily they've not failed on me. I've realized that my access ...
2
votes
1answer
874 views

eCryptfs: what if I remove ~/.ecryptfs

I'm learning how to use eCryptfs: https://wiki.archlinux.org/index.php/ECryptfs I get things as below from the link: This is used to derive the actual file encryption master key. Thus, you ...
2
votes
1answer
393 views

Secure file storage in cloud as backup

At start I'll admit I'm a total newbie when it goes for stuff I want to achieve, but I'm willing to learn, so sorry in advance for writing total nonsense. Stuff I want to achieve: I want to store my ...
2
votes
1answer
354 views

Securing connection credentials on a web server

I'm in process of creating a tiny blog platform and I've encountered a pretty controversial topic of storing connection string to a DB securely on a host. Here is a reference question: How to encrypt ...
2
votes
1answer
983 views

How can I compare GPG encrypted files in order to upload only the ones that have changed? [duplicate]

This question follows this one, in regards to encrypting files individually in order to upload them to a cloud service. --- Scenario: I have my folder full of unencrypted files Via script I make a ...
2
votes
2answers
1k views

Data at Rest vs Data in Storage

I have a question about regulatory compliance. If I am required to have data at rest secured (encrypted), what are they looking for? Should my database files be encrypted, or is data at rest referring ...
2
votes
2answers
2k views

Is mattermost encryption for group messaging and file transfer secure?

Mattermost is an open source group messaging and file transfer service, designed as an alternative to Slack. Their account of their security setup is detailed here. Are the encryption options it ...
2
votes
1answer
285 views

How does encryption strength make a difference to an attacker

Take for example I have my social security and other personal information stored as a string that I am trying to encrypt on my local drive. My first method of encrypting the string is to use a ...
2
votes
2answers
1k views

Keeping user files secure while allowing a web-application to use the files

Short background I am currently in the process of designing a web-application where the user uploads some files to the server and then asks the server to do some calculations based on these files (...
2
votes
1answer
750 views

Secure data by encrypting and rewriting on same file

I'm working on a project to Encrypt files using AES encryption with a key generated from SHA-256 from a keyword. My idea to claim this was to first : read all bytes from a file second : encrypt ...
2
votes
1answer
670 views

On the fly encryption for unencrypted cloud services?

Today Amazon announced their Cloud Drive with unlimited storage for only 60$/yr. Microsoft did the same with Office 365 a while ago. I don't really want to entrust either service with my dearest ...
2
votes
1answer
222 views

Purpose of Initialization Vector in File Encryption and Authentication (FEA)?

I came across this schematic of FEA implementation using RSA and AES: Suppose that PKB is Bob's public key, PKA is Alice's public key, SKB is Bob's private key, SKA is Alice's private key, Ks is the ...
2
votes
2answers
232 views

Best way to securely store passwords for local use?

I am writing a Java application who needs three username/password pairs. I would like to add a "remember me" feature, implying I would have to store passwords on the user's computer. Knowing this ...
2
votes
1answer
2k views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
2
votes
1answer
262 views

Method/program for editing secure files

I'm not entirely sure if this is on-topic for Security.SE, but it doesn't seem entirely off-topic either, so I'll try. :) I keep a couple of (GPG-)encrypted files with more-or-less sensitive ...
2
votes
1answer
231 views

GPG encryption date or GPG version recoverable?

Is there a way to determine the date of encryption or the GPG version of a GPG-encrypted file (with symmetric encryption)? I lost the password but some rough information about when the file was ...
2
votes
1answer
752 views

Encrypting Files With A Certificate

I am hunting for a solution where I can send someone encrypted files and a digital certificate that allows them to open the file. The reason for doing it this way is because: I don't want to keep ...
2
votes
1answer
159 views

Potential security issue with md5 filename

I've been storing files using a filename of the md5 hash of the file. This allows me to not store duplicates of the same file and avoids any filename clashes. Each file has uses a different salt/iv. ...
2
votes
1answer
1k views

How to encrypt files on my SD card and still be able to access them on my phone seamlessly?

I'm looking for a way to encrypt files on my SD card in a way that I could still access them on my phone without huge delays if the file is big (100mb). Is there such a way to do it? I'm using ...
2
votes
1answer
549 views

Best way to secure a cross-platform mobile app for HIPAA compliance

I'm developing a cross-platform, offline first mHealth application using Ionic 3 and Cordova which may need to be HIPAA compliant in the near future. It uses PouchDB as a client-side DB, HTTPS, at-...
2
votes
2answers
292 views

What is the point of encrypting my files (on a server); if I can decrypt them why can't a hacker do that too?

I help maintain a webserver that users use. They store data on our server. Most of the data is not sensitive, but some of it is highly sensitive. So, it seems like we want to encrypt it so that if ...
2
votes
1answer
261 views

Are their any consequences to encrypting a one bit message? Does size/variability matter?

I'm trying to understand encryption a little more and couldn't get past this one nagging question. Let's just say I happen to want to send a one bit message to someone over an encrypted channel. I do ...
2
votes
1answer
378 views

Security of hybrid encryption scheme

I want to use a hybrid encryption scheme for file encryption. The scheme must use PKCS#1 v1.5 – which is vulerable to padding oracle attacks – because many smartcards (e.g. the OpenPGP Card) only ...
2
votes
1answer
454 views

TrueCrypt External Multimedia Hard Drive

I have an external multimedia hard drive (1.36TB). I made 4 partitions of 350GB each. Then I shredded the free disc space of all the partitions. Now I want to put Truecrypt on the disk. I can't ...
2
votes
0answers
927 views

Employ fscrypt to securely protect, from data-at-rest exposure, all files+data installed after an initial Linux system build?

Our team's goal We want to protect our sensitive data from being potentially data-at-rest exposed after we relinquish a Linux VPS (see below) provided by a hosting service. We're exploring simple(r) ...
2
votes
2answers
211 views

What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)

I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
2
votes
0answers
136 views

Windows EFS Files Spontaneously Unavailable

We are trying to secure a folder with over 1 million very small text files using Windows EFS on Windows Server 2008 R2. We already have an infrastructure in place for backing up keys and data. We ...
2
votes
3answers
2k views

Is it safe to store VeraCrypt or TrueCrypt container inside RAR - could this method corrupt the file?

I need to split my container into smaller files. So plan is this: I create RAR archive and let it split into about 10 smaller archives, no compression and I also add password for extra security. Is ...
2
votes
1answer
523 views

OpenPGP encrypting backup files and sending them to Usenet servers

My Internet service provider includes Usenet servers with about about 45 days of retention. I'm planning to backup my most important files on there. I have a 50Mb/s symmetrical fiber connection to ...
2
votes
0answers
674 views

Does Sookasa really make Dropbox more secure? [closed]

Sookasa is a service that integrates with Dropbox and claims to make your files more secure by seamlessly encrypting them. In their article Is Dropbox secure? 3 weaknesses you should know about, ...
2
votes
0answers
391 views

Hiding symmetric key inside encrypted data [duplicate]

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
2
votes
0answers
300 views

Has Stackfield been security audited and is the metadata safe?

It appears that Stackfield is one of the only functioning applications that combines end to end encryption, messaging services and file sharing. Peerio has just been launched (literally a day or two ...
1
vote
6answers
3k views

Downloading a file from a server with a secret: in text or binary?

Suppose, a user can click a button on a website and downloads a file with a secret. Via ajax. Is it more secure if a server generates that file and sends it as 1) zip, tar or the like -- a binary ...
1
vote
2answers
6k views

Encrypt files on FTP server

I have a practical situation here, my company is a FTP server provider for some clients. The clients are sharing their files on our FTP server and have had no problem with access management and ...
1
vote
1answer
647 views

Does a solution exist for transferring large files across a network that is faster, yet just as secure as scp? [closed]

I'm posting this here rather than unix/linux, because the primary deal breaker here would be a deteriorated security layer. I'm wondering if there are (noticeably) faster solutions available for ...
1
vote
2answers
242 views

Encrypting intellectual property on client side

Is it possible to effectively protect/encrypt intellectual property that is on the client side? Assume that I am selling a product (software) to clients, that contains intellectual data, for example ...
1
vote
3answers
679 views

Encrypting a huffman encoded file

I wrote a huffman encoding program that can compress and decompress files. The file contains a header which contains information that allows me to retrieve the huffman tree. I wanted to add a simple ...
1
vote
2answers
98 views

Transferring passwords to outside counsel

As part of a new eDiscovery effort, we send large amounts of data on encrypted hardware to third parties (outside counsel) that are not very technically proficient (so no key exchange via PGP desktop)....
1
vote
3answers
191 views

Preventing access to encrypted files at all

Suppose I create an encrypted container using VeraCrypt and want to upload it to Google Drive/One Drive for storage. The container is encrypted with AES-256. I know that no one can extract any meaning ...
1
vote
2answers
1k views

Various questions about file compression and encryption regarding hacking (zip, rar, 7z) [closed]

So I'm curious about a few aspects of compressed files (Zip, rar, 7z, etc), and how they impact hack-ability. There is enough on this subject that I'm not clear about (since this isn't a career of ...
1
vote
1answer
360 views

Brief staging area for unencrypted files

I have an integration workflow where: A server retrieves remote file via an encrypted connection. The file is unencrypted. The server runs linux (Ubuntu 14.04LTS). The file is downloaded to a ...
1
vote
2answers
2k views

Does "Magic Numbers" weaken encryption?

I was wandering at superuser and I found this question: Compress and then encrypt, or vice-versa? Nearly all files have a Magic Number at a certain position in them. So, I wonder if I can attack (to ...
1
vote
1answer
813 views

What is the best practice to save encryption and decryption method in an application?

Almost all the application regardless of their nature and purpose are using encryption to secure sensitive data to be saved to database, if the user using a method to encrypt a file (for instance an ...
1
vote
2answers
2k views

Password Protected Zip: if attacker had one file, can use it to decrypt all files?

Consider a folder containing the following files: (file1.txt, file2.doc, file3.pdf) all zipped and password protected, if attacker had one of these file, can use it for decrypting all without knowing ...
1
vote
2answers
1k views

How secure is using this (p3 Python) module to encrypt a file?

I've recently been looking for a good (enough) method to encrypt files, and I came across this thing. It says that it's a Simple p3 encryption "algorithm": it's just SHA used as a stream cipher ...
1
vote
1answer
410 views

Can we write both encrypted text and plain text to the same file?

We have a requirement from customer to write payment transaction information to a text file. Of many lines of data per transaction, only one line contains cardholder information, which needs ...

1
3 4
5
6 7
10