Linux Cryptography - Page 16 - Results from #300

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Trustworthiness of Digital Certificates Compromised by Security Breach

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The keepers of the Internet have become acutely concerned about the Web's core trustworthiness. Hackers cracked three companies that work with the most popular Web browsers to ensure the authenticity of Web pages where consumers type in sensitive information, such as account log-ons, credit card numbers and personal data.

LinuxSecurity.com Team
Sep 28, 2011

Analyzing Off The Record Encryption Tool for Pidgin and Adium IM

The digital watchdog Electronic Frontier Foundation (EFF) lent a technical hand to fix security problems in a tool used to encrypt instant messenger conversations using the Adium and Pidgin programs.

LinuxSecurity.com Team
Sep 26, 2011

TLS 1.0 Weakness Exposes PayPal Cookies to BEAST Attack

Researchers have discovered a serious weakness in virtually all websites protected by the secure sockets layer protocol that allows attackers to silently decrypt data that's passing between a webserver and an end-user browser.

LinuxSecurity.com Team
Sep 21, 2011

TLS 1.0 Security Advisory: Risk of Data Breach Due to SSL Weakness

LinuxSecurity.com Team
Sep 20, 2011

Boosting Smartcard Security Testing Utilizing the Degate Tool

At this year's Black Hat Conference, crypto expert Karsten Nohl of SRLabs demonstrated the degate tool that can be used to take a closer look at applications stored on smartcards, such as credit cards and SIM cards.

LinuxSecurity.com Team
Sep 16, 2011

Stanford Hospital: 20000 Patient Records Exposed Due To Privacy Lapse

The ongoing furor over fake SSL certificates continued to dominate security headlines, while increasing SpyEye botnet activity and leaked patient health information also drew attention the week of Sept. 5.

LinuxSecurity.com Team
Sep 12, 2011

OpenSSH 5.9: SHA256 HMAC, Sandboxing, And Security Enhancements

The OpenSSH development team has announced the release of version 5.9 of its open source SSH (Secure Shell) implementation. Compared to the OpenSSH 5.8 release from 7 months ago, which was primarily a security update, the latest update includes a wider variety of changes including the addition of new SHA256-based HMAC (Hash-based Message Authentication Code) transport integrity modes.

LinuxSecurity.com Team
Sep 06, 2011

Certificate Authority Vulnerabilities: Risk Analysis for Google Services

What

LinuxSecurity.com Team
Sep 01, 2011

F-Secure Uncovers Covert RSA Phishing Malware Threats to Users

Ever since security giant RSA was hacked last March, anti-virus researchers have been trying to get a copy of the malware used for the attack to study its method of infection. But RSA wasn

LinuxSecurity.com Team
Aug 31, 2011

AES Encryption Key Length Reduction Due To New Vulnerability Findings

A team of researchers has discovered a first vulnerability in the AES encryption standard that shortens the algorithm's effective key length by two bits. This means that the usual key lengths of 128, 192 and 256 bits are reduced to 126, 190 and 254 bits.

LinuxSecurity.com Team
Aug 19, 2011

Cloud Security: Data Protection Strategies Against Insider Threats

A theme that appears anytime the cloud is discussed in the context of IT is security. The general direction of this concern is the prevention of unauthorized access to cloud-hosted data and apps. If the topic is pursued, rather than just acknowledged as an issue, it generally forks into two main threads: preventing access by outside parties (hackers, crackers, protesters, and the like) and preventing access by inside parties, such as unauthorized employees.

LinuxSecurity.com Team
Aug 12, 2011

11 Simple Steps For Effective Data Encryption With Truecrypt

Truecrypt, is a free and open-source disk encryption software. In this post we will show you how to encrypt all your data using Truecrypt in 11 easy steps.

LinuxSecurity.com Team
Jul 11, 2011

Timing Attack on SSL Servers: Exposing Private Keys with ECC

Security researchers have discovered a "timing attack" that creates a possible mechanism for a hacker to extract the secret key of a TLS/SSL server that uses elliptic curve cryptography (ECC).

LinuxSecurity.com Team
May 26, 2011

LinkedIn Account Hijacking: SSL Cookie Issues and Security Insights

AN INDEPENDENT insecurity researcher says there are multiple security vulnerabilities in the business social network Linkedin, due to the way it handles and transmits cookies over SSL.

LinuxSecurity.com Team
May 23, 2011

Dropbox Security Investigation Over User Data Breach Risks

Popular cloud storage service Dropbox is misleading users into thinking it is more secure than it really is, says a security researcher and academic, who has asked for the FTC to investigate.

LinuxSecurity.com Team
May 16, 2011

Emerging SSL Risks: Malicious Activity Through Network Traffic

As more applications turn to SSL to help keep users secure, they may also be inadvertently hampering the ability of enterprises to ensure malicious code and exploits are not slithering through network traffic from the endpoint.

LinuxSecurity.com Team
May 12, 2011

Survey Insights on Self-Encrypting Drives and Data Protection

One-third of security professionals who handle encryption don't understand self-encrypting hard disk drives. In particular, they're unsure whether the drives are better or worse than software-based encryption for preventing tampering, managing encryption, or handling authentication keys.

LinuxSecurity.com Team
May 10, 2011

NTRU: New Standard in Public-Key Encryption for Financial Transactions

Here comes the fastest public-key algorithm that most people have never heard of: It's called NTRUEncrypt and this month was approved by the financial services standards body, the Accredited Standards Committee X9.

LinuxSecurity.com Team
Apr 27, 2011

Toshiba's 2.5-Inch Self-Encrypting Drives With Key Deletion Capability

Toshiba has extended its range of 2.5-inch drives with hardware data encryption

LinuxSecurity.com Team
Apr 18, 2011

The Evolution Of Encryption In Enterprise Security And Data Protection

Back in the mid 70s, the use of encryption in enterprises was pretty much unheard of. Soon companies started to introduce some encryption in limited instances, such as encoders on communication lines to encrypt financial transactions.

LinuxSecurity.com Team
Apr 14, 2011

Community Poll

More Polls

Linux Cryptography - Page 16

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense