Linux Cryptography - Page 20 - Results from #380

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Symantec Acquisition of PGP and GuardianEdge Strengthens Data Protection

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Symantec will acquire encryption specialist PGP and endpoint security vendor GuardianEdge Technologies for $300 million and $70 million respectively, the company said today.

LinuxSecurity.com Team
Apr 29, 2010

Jon Callas Assumes Role In Apple OS Security Focusing On Encryption

Jon Callas, who as co-founder and chief technologist of PGP helped bring strong encryption to the masses, has taken a job with Apple working on operating-system security.

LinuxSecurity.com Team
Apr 26, 2010

Prevent Data Loss: Corporate Security Through Data Encryption

Companies stand to lose their reputation, not to mention business, in cases of severe data loss. One way to prevent the inadvertent leakage of information is to go in for encryption to secure data on hard drives, flash drives and the like. Subhankar Kundu looks at the different aspects of data encryption in the corporate world.

LinuxSecurity.com Team
Apr 23, 2010

Exploring GnuPG's Transition From PGP Alternative To Encryption Leader

This was written by Werner Koch, one of the primary developers, in 2007 about the 10th anniversary of GnuPG, and includes a great summary of the export restriction difficulty, engineering without the restricted algorithms, and the improvements that were made after the Diffie-Hellman patent expired in 1997. A real classic piece of open source history. It's been a decade now that the very first version of the GNU Privacy Guard has been released. This very first version was not yet known under the name of GnuPG but dubbed "g10" as a reference on the German constitution article on freedom of telecommunication (Grundgesetz Artikel 10) and as a pun on the G-10 law which allows the secret services to bypass these constitutional guaranteed freedoms.

LinuxSecurity.com Team
Apr 15, 2010

Research Reveals Government Use of Forged SSL Certificates for Interception

Here is a very technical discussion of some issues involved with intercepting communications in an SSL tunnel without breaking the encryption, and how it could be used by a federal government to wiretap on citizens.. Says Matt Blaze:A decade ago, I observed that commercial certificate authorities protect you from anyone from whom they are unwilling to take money. That turns out to be wrong; they don't even do that much.

LinuxSecurity.com Team
Apr 13, 2010

OpenSSL 1.0.0 Major Release: Enhanced Security And New Features

With more than twelve years of development, the first v1.0.0 release of OpenSSL is now available. The OpenSSL project team is pleased to announce the release of version 1.0.0 of our open source toolkit for SSL/TLS. This new OpenSSL version is a major release and incorporates many new features as well as major fixes compared to 0.9.8n.

LinuxSecurity.com Team
Mar 29, 2010

Exploring SSL Certificates And Risks of Man-in-the-Middle Attacks

A decade ago, I observed that commercial certificate authorities protect you from anyone from whom they are unwilling to take money. That turns out to be wrong; they don't even do that much. SSL certificates are the primary mechanism for ensuring that secure web sites -- those displaying that reassuring "padlock" icon in the address bar -- really are who they purport to be. In order for your browser to display the padlock icon, a web site must first present a "certificate", digitally signed by a trusted "root" authority, that attests to its identity and encryption keys.

LinuxSecurity.com Team
Mar 25, 2010

Exploring Bruce Schneier's Cryptography Engineering for Practitioners

Bruce Schneier has updated Applied Cryptography. I have a new book, sort of. Cryptography Engineering is really the second edition of Practical Cryptography. Niels Ferguson and I wrote Practical Cryptography in 2003. Tadayoshi Kohno did most of the update work

LinuxSecurity.com Team
Mar 24, 2010

DECT Encryption Flaw Exposed: Critical Cordless Phone Threat

Cryptographers have broken the proprietary encryption used to prevent eavesdropping on more than 800 million cordless phones worldwide, demonstrating once again the risks of relying on obscure technologies to remain secure.

LinuxSecurity.com Team
Mar 22, 2010

Expert Insights on SSL and Cloud Security with Taher Elgamal

In this wide ranging interview, cryptographer, Taher Elgamal, chief security officer of Axway Inc. and the inventor and initial driving force behind SSL, explains how applications may be better adapted to defend against attacks and how cloud computing may alter data protection and authentication. The SSL protocol will be updated to prevent man-in-the-middle attacks, but researchers need to find better ways to prevent malware from getting on PCs in the first place, Elgamal said. Better security at the browser layer and a greater focus on Web application security could help prevent future attacks, he said. End-to-end encryption is a marketing term that doesn't hold much weight, Elgamal said.

LinuxSecurity.com Team
Mar 12, 2010

Maximize Password Cracking Speed Using SSD with Athlon 64 X2

The security specialist Objectif S

LinuxSecurity.com Team
Mar 11, 2010

Advanced TrueCrypt Configurations for Secure Data Encryption

In the first installment of this two-part tutorial series, we learned some of the basics of configuring TrueCrypt, a free open source disk encryption tool, similar to the BitLocker feature in the Enterprise and Ultimate editions of Windows. After outlining the three different encryption methods, we configured the easiest method--file container.

LinuxSecurity.com Team
Mar 05, 2010

German Researchers Reveal BitLocker Bypass Methods In Windows 7 And Server

German researchers have devised five methods that determined attackers can use to bypass hard-drive encryption in recent versions of Microsoft operating systems.

LinuxSecurity.com Team
Mar 05, 2010

University of Michigan Research: RSA Authentication Flaws Revealed

Researchers at the University of Michigan say they have uncovered a way to circumvent encryption used on many devices. The research is the work of Valeria Bertacco, Todd Austin and Andrea Pellegrini. According to their paper, entitled 'Fault-Based Attack of RSA Authentication' (PDF), the trio demonstrated a way to beat the popular encryption method, which is used in media players, laptop computers, smartphones and other devices.

LinuxSecurity.com Team
Mar 03, 2010

Florida State University Research: Super Security Chips From Crystals

Crystals could lead to super security chips that would make extraction of data more complex and so more difficult for attackers to decrypt. Researchers at Florida State University have discovered crystals that could lead to super security chips as well as contribute to the discovery of materials that expand the capacity of electronic storage devices by 1,000 to 1 million times.

LinuxSecurity.com Team
Mar 01, 2010

Essential Tools for File Encryption and Password Management on Linux

Here's a great short article on the encryption techniques for Windows. What alternatives are there for Linux that you use? Have you tried filesystem encryption? Would you, if it were easy? Do you have anything that would need such a level of security? Windows passwords are all too easy to crack, and malware can give the wrong people access to your system. You need to encrypt your key files and passwords, but that can be a lot easier than it sounds with these very simple tools. Would you like to share your experiences with using encryption on Linux? Email us and let us know.

LinuxSecurity.com Team
Mar 01, 2010

Christopher Tarnovsky's Insights on TPM Attacks and Key Extraction

An American hacker has, with a great deal of effort, managed to crack a Trusted Platform Module (TPM) by Infineon. He was able to read the data stored on the TPM chip, for instance cryptographic keys (RSA, DES) such as those also used by Microsoft's BitLocker on appropriate motherboards.

LinuxSecurity.com Team
Feb 10, 2010

Secure File Transfer Using GPG And OpenPGP For Effective Protection

Are you looking for a safe way to encrypt your files and messages? What if there is a method that can do all that and more and yet it is FREE to use? If you are interested, keep reading to know about encrypting and exchanging files safely with GPG and PGP.

LinuxSecurity.com Team
Feb 03, 2010

Full Disk Encryption Techniques in Fedora for Data Protection

Disk encryption in one of the most overlooked and underused security tools in computing. When most people think about securing a computer or the operating system that powers it, a firewall, anti-virus, and other anti-malware software comes to mind. Those are all good and necessary tools, but they are only concerned with network security. What about physical security? What happens if someone gains unauthorized, physical access to your computer? Even with all the fancy firewall and other network security tools running, If the disk is not encrypted, check mate! Your data is now shared.

LinuxSecurity.com Team
Feb 02, 2010

SecurStar Addresses Concerns Over Voice Encryption Testing Allegations

German encryption firm SecurStar has strenuously denied being behind an apparently independent test of voice encryption products that found many of its rivals could be hacked using a $100 phone-tapping program.

LinuxSecurity.com Team
Feb 02, 2010

Community Poll

More Polls

Linux Cryptography - Page 20

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense