Linux Cryptography - Page 19 - Results from #360

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Unlock True Full Disk Encryption on Linux With LFDE Tool

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Linux Full Disk Encryption (LFDE) is a tool designed to provide Linux with a means to do true full disk encryption (FDE).

LinuxSecurity.com Team
Aug 17, 2010

Exploring SSL Risks to E-Commerce Security at Black Hat Conference

Lots of code excitement will spring from the Black Hat hacker conference this week, but already a huge controversy is erupting: Black Hat's founder thinks SSL--the security code making much of online commerce safe--is broken.

LinuxSecurity.com Team
Jul 29, 2010

Secure Your Data With TrueCrypt Encryption Across Major Operating Systems

Though encryption is a strong way to safeguard passwords, personal information, and other sensitive data, it can be confusing due to the acronyms and technobabble that surround the topic. Many encryption utilities--such as the BitLocker feature in Windows 7 Ultimate, or the Rohos Mini Drive utility for protecting info on a thumb drive--are available.

LinuxSecurity.com Team
Jul 26, 2010

TrueCrypt 7.0 Enhancements: Hardware-Accelerated AES and Volume Management

The TrueCrypt development team have announced the release of version 7.0 of their open source, cross platform, disk encryption tool. According to the developers, this major update to their on-the-fly encryption tool includes several improvements, new features, security enhancements and bug fixes on all platforms.

LinuxSecurity.com Team
Jul 20, 2010

Understanding AES Encryption's Role in Security Practices

Nearly nine years after the publication of FIPS 197, AES encryption remains the de facto standard today for symmetric encryption, and brute-force attacks remain infeasible, at least for the foreseeable future. To date, most attacks methods have focused on weaknesses or characteristics in specific implementations, called "side-channel attacks," not on the algorithm itself.

LinuxSecurity.com Team
Jul 19, 2010

Estimating Password Cracking Times With Thor's Godly Privacy Tool

Instead of indicating password quality via coloured bars, the Windows crypto tool Thor's Godly Privacy (TGP) informs users about the estimated time required for a successful brute-force attack on the chosen password. TGP calculates the time from the number of iterations a brute-force tool would need to arrive at the correct character combination.

LinuxSecurity.com Team
Jul 15, 2010

Key Findings from Black Hat 2010 on SSL Testing and Security Issues

Ivan Ristic has been quietly weeding through millions of registered domain names to find and test SSL protocol implementations. Ristic, director of engineering at Redwood Shores, Calif.-based Qualys Inc., runs SSL Labs, a non-commercial research effort that was acquired by Qualys last year.

LinuxSecurity.com Team
Jul 14, 2010

How Poor SSL Configurations Deter Customers and Affect E-Commerce

Online merchants are shooting themselves in the foot with faulty SSL deployments that trigger alarms scaring customers away before they have the chance to complete transactions.

LinuxSecurity.com Team
Jul 09, 2010

Enhancing Image Security With Reversible Watermarking for Authentication

Every picture tells a story, but how do you know that a digital photo has not been manipulated to change the tale being told? A new approach to adding an encrypted watermark to digital images allows the an image to be validated against a pass key, according to research published in the International Journal of Signal and Imaging Systems Engineering.

LinuxSecurity.com Team
Jul 07, 2010

FBI Arrests 11 Russian Spies Using Steganography for Secret Messaging

In a case that smacks of a Cold War spy novel, the FBI has arrested 11 suspected Russian spies who for years had blended into day-to-day American life in the suburbs and cities. Aside from hiding their true identities and posing as legitimate American citizens, the suspects also masked their communications with their intelligence agency back home in Moscow, using an oft-forgotten form of stealth communication -- steganography.

LinuxSecurity.com Team
Jun 30, 2010

Credit Card Security: RSA's Tokenization Versus Encryption Insights

Payment industry executives and security experts are currently debating over the right way to preserve and protect credit card data. Merchants can choose between a variety of formats, from format preserving encryption, which replaces the 16-digit credit card number with an encryption algorithm to card-based tokens, which substitute a random token with the hope that it could reduce the scope of a PCI DSS assessment.

LinuxSecurity.com Team
Jun 24, 2010

Firefox Extension: HTTPS Everywhere Secures Your Online Connections

Privacy campaigners the Electronic Frontier Foundation and the Tor Project have jointly released a beta version of a Firefox extension that encrypts all connections to compatible websites.

LinuxSecurity.com Team
Jun 21, 2010

Padding Oracle Exploit Tool: Insights and Implications for Web Security

Researchers last week introduced a new penetration-testing tool that makes it possible to capture poorly encrypted Web session data -- such as cookies and HTML parameters. Now they say they're looking into how similar attacks against Web applications can be used to advance attacks against Web-facing databases with sloppy encryption-key deployment.

LinuxSecurity.com Team
Jun 16, 2010

Introduction to the Poet Tool and Its Use in Padding Oracle Attacks

Two researchers have released a tool which can be used to crack web server-encrypted session data contained in cookies and parameters hidden in HTML pages. The method used by Juliano Rizzo and Thai Duong's Padding Oracle Exploitation Tool (Poet) can also be used to crack CAPTCHAS.

LinuxSecurity.com Team
Jun 09, 2010

Bletchley Park Codebreakers of WWII: Secrets of the Enigma Machine

During World War II, Britain's brightest minds routinely decoded encrypted German military messages, an effort believed to have significantly shortened the war and saved the country further devastation.

LinuxSecurity.com Team
Jun 07, 2010

Effective Encryption Methods to Safeguard Sensitive Information

Here's the perfect plan to solve all those pesky security problems. Confidentiality and data leakage, secure backups, individual privacy, data integrity, identity and access management - all can be dealt with in some way by encryption. So why don't we all just use it then, and be done?

LinuxSecurity.com Team
Jun 06, 2010

OpenSSL: 0.9.8o & 1.0.0a Critical: Code Injection And Memory Flaws

The OpenSSL developers have released versions 0.9.8o and 1.0.0a, fixing two security problems. A flaw in the ASN.1 parser can be exploited to write to invalid memory addresses using specially crafted "Cryptographic Message Syntax" (CMS) structures.

LinuxSecurity.com Team
Jun 04, 2010

University of Toronto QKD Attack Exposes Critical Security Weakness

An important weakness has been discovered in the technology of quantum key distribution (QKD), which is increasingly being used by military and government to secure sensitive communications.

LinuxSecurity.com Team
May 21, 2010

Strategic Approaches to Achieve Effective Key Management for PCI Compliance

At its core the PCI Data Security Standard is nothing more than a series of guidelines that constitute security best practices. But companies that institute programs to better protect cardholder data can also leverage and extend these efforts throughout their business, ensuring that other sensitive customer, employee and partner data is better protected.

LinuxSecurity.com Team
May 18, 2010

Examining DECT Cryptanalysis and Malware Vulnerabilities in Security

As already announced at the 26C3 congress, Karsten Nohl, Erik Tews and Ralf-Philipp Weinmann have released details of their cryptanalysis of the proprietary and secret encryption algorithm used with DECT (DECT Standard Cipher, DSC) an encryption commonly used with cordless phones. The analysis was carried out by reverse engineering DECT hardware and descriptions from a patent document.

LinuxSecurity.com Team
May 06, 2010

Community Poll

More Polls

Linux Cryptography - Page 19

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense