Linux Cryptography - Page 21 - Results from #400

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Analyzing 3D Secure Risks: Phishing in Online Card Payments

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Ross Anderson reports (via Bruce Schneier blog): Online transactions with credit cards or debit cards are increasingly verified using the 3D Secure system, which is branded as "Verified by VISA" and "MasterCard SecureCode". This is now the most widely-used single sign-on scheme ever, with over 200 million cardholders registered. It's getting hard to shop online without being forced to use it.

LinuxSecurity.com Team
Feb 01, 2010

CIA And PayPal Under SSL Attack From Botnet Traffic Surge

The Central Intelligence Agency, PayPal, and hundreds of other organizations are under an unexplained assault that's bombarding their websites with millions of compute-intensive requests.

LinuxSecurity.com Team
Jan 31, 2010

Voice Encryption Systems Facing Urgent Threats from Trojan Attacks

Most voice encryption systems can be tapped in minutes by installing a voice-recording Trojan on the target computer, a security researcher has confirmed after testing a range of well-known products.

LinuxSecurity.com Team
Jan 27, 2010

Step-By-Step StartSSL Certificate Installation For Apache Web Server

Owning a web server that has its own SSL certificate from a registered Certificate Authority (so it won't trigger any browser warnings) does have its advantages. However, the price of a certificate issued by Verisign or a similar vendor usually tends to put a quick end to such fanciful ideas. Israeli vendor StartSSL offers free SSL server certificates that are valid for a year.

LinuxSecurity.com Team
Jan 22, 2010

PGP Corporation Announces Cross-Platform Data Protection for Linux and Mac

First encryption vendor to provide support across Ubuntu Linux, Red Hat Linux, Mac and Windows environments. PGP Corporation, a global leader in enterprise data protection, today announced availability of the latest version of PGP

LinuxSecurity.com Team
Jan 19, 2010

Explore Top Free Encryption Tools For Linux Data Security

One of the best ways to protect sensitive computer data like credit card numbers and social security information is to use encryption software. Encryption software executes an algorithm that is designed to encrypt data in such a way that it cannot be recovered (decrypted) without access to the key. It is a main component of all aspects of file protection and computer communication. Files on hard drives and other removable media, email messages, and packets sent over computer networks can be made secure by encryption software.

LinuxSecurity.com Team
Jan 18, 2010

IETF Security Advisory: SSL Protocol Fix for MITM Attack Severity Critical

The Internet Engineering Task Force (IETF) has completed a security extension to the Secure Sockets Layer (SSL) protocol that fixes a flaw affecting browsers, servers, smart cards, and VPN products, as well as many lower-profile devices, such as Webcams, that contain the protocol embedded in their firmware.

LinuxSecurity.com Team
Jan 13, 2010

Kasumi Encryption Compromise: New Attack on 3G GSM Security

A group of cryptographers has developed a new attack that has broken Kasumi, the encryption algorithm used to secure traffic on 3G GSM wireless networks. The technique enables them to recover a full key by using a tactic known as a related-hey attack, but experts say it is not the end of the world for Kasumi.

LinuxSecurity.com Team
Jan 12, 2010

26C3: DECT Phone Encryption Flaws Lead to Serious Security Risks

In addition to the crypto algorithm of the GSM mobile telephony standard, security researchers have also cracked the encryption code for calls from cordless phones that are based on the widely used Digital Enhanced Cordless Telecommunication (DECT) standard. This was announced by members of the deDECTed.org project group at the 26th Chaos Communication Congress (26C3) in Berlin on Tuesday. According to the researchers, the respective key used can be extracted from intercepted data traffic with a reasonable amount of effort. The experts think that such prep work will make the DECT Standard Cipher (DSC) "increasingly easier and faster to crack".

LinuxSecurity.com Team
Dec 30, 2009

Chaos Communication Congress: GSM Encryption Cracked By Engineer

A German computer engineer said Monday that he had cracked the secret code used to encrypt most of the world

LinuxSecurity.com Team
Dec 29, 2009

Effortlessly Manage Secure Shell Connections Using GNOME SSHmenu

I work with secure shell all the time. Day in and day out I am administering personal machines and client machines with the help of ssh. After a while opening up a terminal window and entering the command to connect to all of these clients gets old. And we all know saving time and effort equates to saving money. So any tool that can help make your daily administrative life easier is a good thing.

LinuxSecurity.com Team
Dec 28, 2009

GnuPG 2.0.14 Release: Key Management Enhancements And Security Improvements

We are pleased to announce the availability of a new stable GnuPG-2 release: Version 2.0.14. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data, create digital signatures, help authenticating using Secure Shell and to provide a framework for public key cryptography. It includes an advanced key management facility and is compliant with the OpenPGP and S/MIME standards.

LinuxSecurity.com Team
Dec 21, 2009

Cybercriminals Exploit Two-Factor Authentication: Banking Security Risks

Two-factor authentication -- used to protect online bank accounts with both a password and a computer-generated one-time passcode -- is supposed to be more secure than relying on a single password. But Gartner Research VP Avivah Litan warns that cyber criminals have had success defeating two-factor authentication systems in Web browsing sessions using Trojan-based man-in-the-middle attacks.

LinuxSecurity.com Team
Dec 17, 2009

Two-Factor Authentication Risks: Cyber Attacks Against Banking Systems

LinuxSecurity.com Team
Dec 15, 2009

Full Disk Encryption Techniques For Enhanced Data Protection

Today, full-system encryption in software is feasible and practical. Here's how to get up and running using solutions from PGP, McAfee, Sophos, and open-source options TrueCrypt and DiskCryptor. There was a time, not all that long ago, when a fully-encrypted system disk was something only for people with money to burn.

LinuxSecurity.com Team
Dec 14, 2009

Libgcrypt 1.4.5 Launch: Important Security Updates and Performance Boosts

Libgcrypt is a general purpose library of cryptographic building blocks. It is originally based on code used by GnuPG. It does not provide any implementation of OpenPGP or other protocols. Thorough understanding of applied cryptography is required to use Libgcrypt.

LinuxSecurity.com Team
Dec 11, 2009

Eddy Nigg Discusses StartSSL's Unique Approach to SSL Security

Linux Security had the chance to talk with Eddy Nigg, founder of StartSSL, an

LinuxSecurity.com Team
Nov 17, 2009

Security Features of Linux vs Windows 7: An In-Depth Comparison

Here is a nice overview of the security features on Linux and Windows, particularly focusing on the disk and system encryption functionality this time.How well do popular Linux distributions such as Ubuntu, Fedora and OpenSUSE stack up against Microsoft's new desktop flagship, Windows 7? eWEEK Labs identified 10 features new in Windows 7 and put them head-to-head with popular Linux distros to see how the platforms compete. Labs Analysts Jason Brooks and Andrew Garcia found that Version 7 makes big strides on the Windows front with its new features, but that Linux is competitive by most counts.

LinuxSecurity.com Team
Nov 11, 2009

SSL Protocol Analysis: Marlinspike's Perspective on Minimal Threat

Two security researchers are calling for an industry-wide response to fix a serious vulnerability they discovered in the SSL protocol, used widely on the Internet for secure data transfers. But a noted network security researcher says the vulnerability has very little impact on most users and will not result in data loss.

LinuxSecurity.com Team
Nov 06, 2009

Essential Dos and Don'ts for Full Disk Encryption Best Practices

Full disk encryption (FDE) systems use strong encryption algorithms to automatically protect all data stored on the hard drives of PCs and laptop computers. Users can access the data via an authentication device, such as a password, token or smart card. This enables the system to retrieve the key that decrypts the disk. On many systems, functions such as key management, access control, lock-outs, reporting and recovery are all managed centrally.

LinuxSecurity.com Team
Oct 22, 2009

Community Poll

More Polls

Linux Cryptography - Page 21

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense