Cryptography

Discover Cryptography News

The Process of Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Here's an excellent (as always) article by Bruce Schneier on the process of thinking about security. "Security is a process, not a product. Products provide some protection, but the only way to effectively do business in an insecure world . . .

LinuxSecurity.com Team
Apr 20, 2000

Digital Certificates & Encryption

Lance Spitzner tells us all about Digital Certificates & Encryption how they work and apply to Internet Commerce. "On the Internet, information you send from one computer to another passes through numerous systems before it reaches its destination. Normally, . . .

LinuxSecurity.com Team
Apr 17, 2000

mod_ssl 2.6.3 Released

"mod_ssl combines the flexibility of Apache with the security of OpenSSL." This module provides strong cryptography for the Apache 1.3 webserver via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols by the help of the . . .

LinuxSecurity.com Team
Apr 16, 2000

Strong Encryption’s Weakness

Think that encryption will secure corporate data? Not according to virus specialist Ncipher (https://www.entrust.com/products/hsm). The company says it’s found viruses that hunt through a computer’s memory for the key used to decrypt data. First proposed in 1999 by Dr. Adi . . .

LinuxSecurity.com Team
Apr 15, 2000

Crypto-Convict Won't Recant

Before Jim Bell went to prison, he suspected that most government officials were corrupt. Three years behind bars later, the self-proclaimed Internet anarchist is sure of it. After Bell, a cypherpunk who the United States government dubbed a techno-terrorist, . . .

LinuxSecurity.com Team
Apr 15, 2000

CRYPTOCard PalmToken PIN Extraction Advisory

The CRYPTOCard PalmToken is a software-based token system that provides challenge-response authentication. "An attacker can determine the private PIN number of a users token within a matter of minutes and clone the challenge/response scheme of the legitimate user." . . .

LinuxSecurity.com Team
Apr 14, 2000

Record encryption puzzle cracked

An encryption method widely expected to secure next-generation wireless phones and other devices succumbed to a brute-force collaborative effort to break it, a French research agency announced Thursday. An international team of researchers — led by crypto researcher Robert . . .

LinuxSecurity.com Team
Apr 14, 2000

OpenBSD Crypto Page

Here's a link to an OpenBSD page that describes what crypto features are capable with it. Specifically, as pointed out on slashdot, http://www.openbsd.org/crypto.html#hardware is a link to new support for hardware crypto devices using OpenBSD. We'd be happy to post this kind of information in the future -- just send it along.

LinuxSecurity.com Team
Apr 13, 2000

Twilight of the crypto-geeks

At a recent Computers, Freedom and Privacy Conference, developers and lawyers battled it out on issues of crypto and freedom. "... the unique annual meeting that brings together an unlikely combination of programmers, activists and government officials -- two . . .

LinuxSecurity.com Team
Apr 13, 2000

'Draconian' Crypto Ideas Still Exist

While the Clinton administration has relaxed the international export of encryption technologies, there are still some other "draconian proposals" in the pipeline, according to the Electronic Privacy Information Center's (EPIC) third annual report on the state of encryption policies. The . . .

LinuxSecurity.com Team
Apr 13, 2000

US court rules encryption source code protected

A U.S. Appeals Court judge has ruled that encryption source code is constitutionally protected and not subject to restrictions imposed by the U.S. government. The U.S. government had previously limited its distribution until January of this year, but the latest . . .

LinuxSecurity.com Team
Apr 12, 2000

Fractal Encryption

Here's a short editorial on fractal encryption. "A fractally encrypted message cannot be broken even by the senders. It is so secure as to be that way for it's lifetime. Oh, the key is the message. So, it functions . . . The link at InfoWar is no longer available.

LinuxSecurity.com Team
Apr 10, 2000

Open source fans break strong encryption

597 computers get stuck into a feat of number crunching madness. Will Knight reports A group of French scientists joined forces with open source enthusiasts this week and claim to have broken a public encryption key of unprecedented strength (108-bit), . . .

LinuxSecurity.com Team
Apr 06, 2000

Study: E-commerce spread defeating crypto regulations

04/05/2000 TORONTO — Attempts by governments to curb the worldwide use of strong encryption are being eclipsed by the growth of electronic commerce and the corresponding need for privacy and Internet security, according to a study released yesterday by the . . .

LinuxSecurity.com Team
Apr 05, 2000

Crypto Regs Challenged Again

Privacy advocates won a preliminary victory when for the second time a federal appeals court questioned restrictions on data-scrambling encryption software. The Sixth Circuit Court of Appeals suggested Monday that President Clinton's restrictions on distributing encryption products might be . . .

LinuxSecurity.com Team
Apr 05, 2000

SSH Secure Shell 2.1 Available

Secure Shell protects Internet servers against the most common break-in method used by hackers -- stealing passwords from the Internet. The product encrypts passwords and all data transmitted between the user and host server over the Internet. SSH Secure Shell . . .

LinuxSecurity.com Team
Mar 31, 2000

Trial Date Set in DECESS Case

"The importance of the fight against the MPAA and the DVD Copy Control Association was underlined this week with the hiring of the legal team of Frankfurt, Garbus, Klein, and Selz to represent 2600. Martin Garbus, who will . . .

LinuxSecurity.com Team
Mar 24, 2000

Cryptic Response: Obstacles to Cryptographic Code Exportation Lifting

Since Linux has always been Open Source software, freely available on the Internet to all comers, the encryption software necessary to its security has been both a blessing and a curse. At its best, encryption software protects the OS from . . .

LinuxSecurity.com Team
Mar 24, 2000

National Fraud Center: Internet is driving identity theft

For all its promise, Internet commerce is also fostering a boom in the number of criminals using false identification to perpetrate a smorgasbord of crimes, according to a report released Thursday by the National Fraud Center. "The Internet takes . . .

LinuxSecurity.com Team
Mar 21, 2000

Teen Science Is Serious Business

Here is an interesting story..."On Monday, Risca was awarded a $100,000 scholarship for taking first place in the Intel Science Talent Search for her project called "DNA-Based Steganography," which combined the disciplines of cryptography, steganography, and molecular computing. . . .

LinuxSecurity.com Team
Mar 16, 2000

Abyss Locker Ransomware Targets Linux & Windows Users

Linux Foundation Joins Post-Quantum Cryptography Alliance

New Decryption Key Available for Babuk Tortilla Ransomware Victims