All Questions
Tagged with passwords file-encryption
42 questions
0
votes
0
answers
22
views
How to recover my password from my file.key [duplicate]
I don't remember my passphrase for my PGP key that was created several years ago.
How can I decrypt my file.key to recover it?
Or what should I do to recover it from my file.key?
0
votes
0
answers
135
views
Choosing Encryption Strategies for Secure Long-Term Storage of Sensitive Data
When considering external drives for secure long-term storage of sensitive data, what are the pros and cons of using the same password for encrypting all files versus using random passwords for each ...
- 173
1
vote
2
answers
3k
views
Encrypted 7z file password not working
I'm in an interesting predicament. I have an encrypted 7z file that I made myself. The password for the file is a 60 character generated password that I saved to my password manager. I made sure to ...
- 113
1
vote
0
answers
204
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
1
vote
1
answer
382
views
What’s the best way to only allow a file to be opened with multiple people’s authorisation?
Is there software available that makes it easy for multiple authorisations to be required before a file can be opened? The simplest solution I've found online is to encrypt a file with a password, ...
- 11
20
votes
3
answers
8k
views
Not understanding why I should use public/private key encryption over password?
My knowledge about these topics is very elementary, please "school me" if I said something completely wrong, it would surely help me understand these things better. Now, to my issue.
Now ...
0
votes
0
answers
502
views
Where to store passwords needed by linux processes?
I am working with C++ processes on a linux (CentOS 8) environment. These processes should be able to access an encrypted file on the system.
Where should I store the password for this encrypted file?
...
- 75
2
votes
1
answer
634
views
How can a pdf file have two passwords?
I receive emails from my bank with password protected PDF files, and they provide two passwords - either xxxx or yyyy. How is this possible?
- 121
0
votes
0
answers
246
views
Decrypting a file knowing only the password
I have encrypted a file using a program with a password and would like to decrypt it on another device just with the password. Is there any software that takes the password, runs it through all key ...
user237020
2
votes
2
answers
325
views
File encryption allowing changing password
My app needs to work with encrypted user files on their devices. It should keep the data secret when someone gets hold of the device. For this, I'm thinking about the following schema (which may be ...
- 704
1
vote
1
answer
355
views
Will using CTR mode with unique IVs, but only one password for encrypting multiple files, leak data or keys?
I'm working on a project to encrypt many files with a single password.
The steps I will employ to encrypt the files are:
user will execute a command similar to tool --encrypt --recurse directories/...
- 170
1
vote
2
answers
1k
views
Securely editing encrypted text files
My method for editing encrypted text files is to decrypt them in a RAM drive, edit them, and then encrypt them.
What I'm worried about is information from my text files being transferred to non-...
- 11
14
votes
3
answers
15k
views
How long should zip encryption password be for it take 10 years to crack?
I am using zip 3.0.0 on macOS High Sierra and Ubuntu. Here is my zip version on macOS:
$ zip --version | head
Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license.
This is ...
- 968
6
votes
4
answers
3k
views
Is it safe to store my login credentials in a Veracrypt volume?
I have a list of login credentials (usernames and passwords) that I wanna keep safe. I'm planning to keep it in an encrypted Veracrypt virtual drive with AES, SHA-512, and an 8-character password. Is ...
- 61
1
vote
2
answers
227
views
Is it sufficient to just change the password of a container after a leak?
Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
- 211
3
votes
1
answer
2k
views
How secure is a 100-bit password in 2018 and onwards?
Long story short, I share a server with a few other people and store my backups there. All these backups are archived to a .7z file using AES-256 encryption, using a randomly-generated password of ...
user193505
1
vote
1
answer
3k
views
Is it safe to keep my KeePassX database on my server or cloud with encryption? [duplicate]
My KeePassX file has a long and strong password.
I've read several articles and discussions about how safe it'll be stored such a file on VPS or cloud service such as Dropbox. There was no consensus ...
- 2,267
3
votes
2
answers
5k
views
truecrypt volume - Recover 18char known password with hashcat (characters variations)
I have an old truecrypt file that I'd like to decrypt.
I know the 18 characters password I was using at the time, I'm sure of it. However I made a "variation" of it : I mapped some characters to l33t ...
- 133
3
votes
1
answer
977
views
Are encrypted files safe in Windows 10 when using PINs?
In Secrets and Lies, Bruce Schneier writes:
Many keys are generated from passwords or passphrases. A system that
accepts 10-character ASCII passwords might require 80 bits to represent,
but has ...
- 4,824
1
vote
6
answers
3k
views
Downloading a file from a server with a secret: in text or binary?
Suppose, a user can click a button on a website and downloads a file with a secret. Via ajax. Is it more secure if a server generates that file and sends it as
1) zip, tar or the like -- a binary ...
- 2,267
1
vote
1
answer
310
views
How secure is an archive file if the password is cryptographically random?
I looked for an answer for this question over here, yet all I could find were about cracking the password. So let's say I'm using PHP to generate a cryptographically secure random password:
echo "...
- 340
9
votes
2
answers
4k
views
Ccrypt versus 7zip encryption
I'm on Debian and I have a folder, with thousands of files inside it, that has a size of about 14GB. From this folder I have created two encrypted archives: one is a password protected .7z archive, ...
- 93
3
votes
2
answers
878
views
Best practice for encrypted file (or password) recovery
I am writing an app (Java) that stores potentially sensitive data in the cloud using a provider chosen by the user. So I am encrypting the files using AES/EAX + PBKDF2. That's the easy part, or so it ...
- 133
0
votes
2
answers
341
views
What are the recommended steps involved in creating an encrypted file format? [closed]
I'm developing a pretty standard program which lets users save their work in a custom file format and reopen it later. Now I'd like to add the capability to encrypt the file using a user-defined ...
- 109
106
votes
11
answers
20k
views
Technology that can survive a "Rubber-Hose attack"
In the documentary film Citizenfour, Edward Snowden says about documents:
I'm comfortable in my technical ability to protect [documents].
I mean you could literally shoot me or torture me
and I ...
- 971
0
votes
1
answer
688
views
Are there best practices concerning application account credentials?
I am looking for best practices concerning application account credentials.
For example, suppose I got a corporate application which uses an Active Directory application user account to communicate ...
- 737
4
votes
3
answers
2k
views
I want to roll my personal cloud hosted Password Manager using pass. How secure/insecure would this be?
I've come to the conclusion that I need to up my security. I currently have a dozen memorized passwords I use for every device and website. I'm against KeePass/Lastpass due to having to trust they ...
- 41
1
vote
0
answers
3k
views
Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation
I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
- 121
2
votes
2
answers
472
views
How could police identify digital contraband and charge someone if it's encrypted with keys?
For example, say I am transferring heavily-encrypted DVD/Blu-ray movies/game copies over the internet. However, I am using double or (+) encryption with keys required to decrypt the file using an ...
- 21
4
votes
1
answer
864
views
File Vault 1 password from memory dump
I have a osx 10.9 machine with a File Vault1 encrypted user partition. I would like to remove the encryption, but I don't remember the "master key" which is the only way to remove encryption on-the-...
- 137
2
votes
1
answer
2k
views
Retrieve RAR Password through Extracted File
So I was wondering about something, but for the simplicity, consider this example:
You have a file with n encrypted files in it, of which one is called 'Note.txt'
You also happen to have another file ...
- 23
2
votes
2
answers
348
views
Appropriate way to encrypt passwords/financial info?
I am in the process of creating a file/files containing all of my logins/password info for various accounts. In the event of my untimely demise this file would be sent to the appropriate party(s). ...
- 123
2
votes
4
answers
4k
views
RatticDB for passwords is not encrypted. Is this good approach?
I am looking for a password application for storing passwords, and RatticDB have a web interface and SSH access is planned, which are exactly the features I am looking for. However, they write that ...
3
votes
2
answers
5k
views
Explain real world symmetric key encryption
I'm new to cryptography. While reading about symmetric key encryption, it was mentioned that it requires secret key exchange so that 2 parties can decrypt the ciphertext.
Now, using some encryption ...
- 33
7
votes
2
answers
13k
views
Can I properly make password-protected 7z archives secure?
After reading the question and answers of this and this, I left with an overall impression from the last one that zips were considered not safe and insecure way of sharing data.
I still think ...
- 3,089
1
vote
2
answers
2k
views
Password Protected Zip: if attacker had one file, can use it to decrypt all files?
Consider a folder containing the following files:
(file1.txt, file2.doc, file3.pdf) all zipped and password protected, if attacker had one of these file, can use it for decrypting all without knowing ...
- 1,377
56
votes
5
answers
409k
views
How to recover a lost zip file password?
I have some files I was given by my teacher at University, I could chase him up, but I may as well try getting blood from a stone, his response rate isn't great and I completed my degree a year ago!
...
- 681
6
votes
2
answers
17k
views
Excel 2007 Encryption Strength
With a strong password of 10+ characters, mixed case, etc... is the encryption of an Excel 2007 document secure enough to create reasonably strong defense against a brute force attack?
What ...
- 1,771
3
votes
1
answer
7k
views
What algorithm/encryption type does Gmail use for security?
In the wake of the recent database hacks, i.e. Sony, Gawker, etc.. where the hackers have access to the hashed usernames and passwords, i've been more keen in paying attention to the sites and ...
- 1,771
31
votes
6
answers
13k
views
Do spaces in a passphrase really add any more security/entropy?
I often see passphrase suggestions written as a sentence, with spaces. In that format are they more susceptible to a dictionary attack because each word is on it's own as opposed to a large unbroken ...
- 1,771
12
votes
5
answers
1k
views
Security of using passwords or even passphrases to encrypt files
Is it ever appropriate to use real-world passwords to encrypt files to be sent via unsecure means.
By real world, I mean a password that is memorable and memorisable by a mere person?
I am implying ...
- 3,683
8
votes
3
answers
2k
views
time to crack file-encryption password - more than just iteration
I have often seen that takes x amount of time to crack a certain length password. But this just seems to be the amount of time it takes to iterate through all the possibilities. What about the time it ...
- 81