Linux Cryptography - Page 25 - Results from #480

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Competition for New Cryptographic Hash to Boost Web Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The U.S. National Institute of Standards and Technology is having a competition for a new cryptographic hash function. This matters. The phrase "one-way hash function" might sound arcane and geeky, but hash functions are the workhorses of modern cryptography. They provide web security in SSL. They help with key management in e-mail and voice encryption: PGP, Skype, all the others. They help make it harder to guess passwords. They're used in virtual private networks, help provide DNS security and ensure that your automatic software updates are legitimate. They provide all sorts of security functions in your operating system. Every time you do something with security on the internet, a hash function is involved somewhere.

LinuxSecurity.com Team
Feb 09, 2007

RSA Survey Insights on Evolving Banking Fraud and Authentication Efforts

RSA, The Security Division of EMC, (NYSE: EMC) today released the findings of its fourth annual Financial Institution Consumer Online Fraud Survey. Conducted in December 2006, the online survey asked 1,678 adults from eight countries around the world for their opinions on evolving fraud threats such as phishing, vishing and keylogging, and on the efforts of their financial institutions to strengthen remote channel banking authentication.

LinuxSecurity.com Team
Jan 26, 2007

Discover Steganography Tools For Hidden Data Protection

Remember those invisible ink kits from when you were a kid? You'd write a secret message that no one could see unless they had a black light or the decoder marker. The digital equivalent of invisible ink is steganography software, apps that embed files and data inside other files, hidden from everyone who doesn't know any better. You don't have to be a trained spy plotting international espionage to put steganography to good use. With some free tools for both the Mac and PC, you can embed secret information in image, PDF, HTML and MP3 files for fun or profit.

LinuxSecurity.com Team
Jan 26, 2007

Blu-ray Encryption Exposed: Janvitos' Innovative Extraction Method

Late last year, a crafty individual who goes by the name

LinuxSecurity.com Team
Jan 25, 2007

Understanding Elliptic Curve Cryptography and Mathematical Concepts

Elliptic Curve Cryptography (ECC) is a public key cryptography. In public key cryptography each user or the device taking part in the communication generally have a pair of keys, a public key and a private key, and a set of operations associated with the keys to do the cryptographic operations. Only the particular user knows the private key whereas the public key is distributed to all users taking part in the communication. Some public key algorithm may require a set of predefined constants to be known by all the devices taking part in the communication. ?eDomain parameters?f in ECC is an example of such constants. Public key cryptography, unlike private key cryptography, does not require any shared secret between the communicating parties but it is much slower than the private key cryptography.

LinuxSecurity.com Team
Jan 24, 2007

Examining SHA-1 Cracking and Its Legal and Security Impact

SHA-1 is one of the most prevalent forms of a secure hash algorithm used in the legal and security industry. Now that Professor Xiaoyun Wang and her associates in Tsinghua University and Shandong University of Technology have officially cracked the SHA-1 hashing algorithm, the fallout will begin. This won't actually be due to security concerns for the most part, but the legal ramifications may be severe.

LinuxSecurity.com Team
Jan 23, 2007

Evaluating SHA-1: Current Claims and Their Security Implications

Slashdot is reporting on this article claiming that SHA-1 has been cracked. The reality is more complicated.

LinuxSecurity.com Team
Jan 23, 2007

Managing Public Key Infrastructures Efficiently With CSRTool

If you've worked with Public Key Infrastructures (PKI) at all, you'll probably know at least one thing: PKIs are complex! Aside from the fact that there are so many details to remember, there is also the added burden that most tools for working with PKIs are command-line interface (CLI) tools. Well, in one small way, StrongAuth, Inc. has changed that.

LinuxSecurity.com Team
Jan 23, 2007

Impact of SHA-1 Breakthrough on Data Protection and Security Algorithms

" These two main algorithms are currently the crucial technology that electronic signatures and many other password securities use throughout the international community. They are widely used in banking, securities, and e-commerce. SHA-1 has been recognized as the cornerstone for modern Internet security. According to the article, in the early stages of Wang's research, there were other data encryption researchers who tried to crack it. However, none of them succeeded. This is why in 15 years Hash research had become the domain of hopeless research in many scientists' minds. "

LinuxSecurity.com Team
Jan 23, 2007

Expert Insights from Bruce Schneier on Security and Cryptography

He's eaten guinea pig in Peru, whale in Japan, and tried insects in Australia. But security guru -- and part-time restaurant critic -- Bruce Schneier mostly steers clear of chain restaurants, which he finds oppressively uniform. When he's not sampling exotic cuisine, Schneier is best known as the developer of the Blowfish and Twofish encryption algorithms and as the bestselling author of Applied Cryptography, which has been called the bible for hackers. He's written other books that examine security and society, and he is a renowned security speaker, blogger, and columnist, as well as a popular media talking head who offers unique views on everything from encryption to post-9/11 security overkill.

LinuxSecurity.com Team
Jan 11, 2007

Innovative Molecular Device Powers Electronic Keypad Lock Security

Israeli scientists have invented the ultimate in small-scale security: a molecule that acts like an electronic keypad lock. The tiny device lights up when three input signals

LinuxSecurity.com Team
Jan 10, 2007

A Comprehensive Look at Cryptography's History and Applications

Cryptography has a long and fascinating history. The most complete non-technical account of the subject is Kahn

LinuxSecurity.com Team
Dec 12, 2006

Exploring Encryption and Hashing for PCI DSS Compliance

or many people, cryptography is akin to biblical Gnosticism -- there are a few who intimately know cryptography and its s-boxes, permutations, salts, and other magic1 -- and then there are the rest of us whose eyes glaze over when the topic arises. This is partially because cryptography by design was once known only to the denizens of the National Security Agency and a few academics. Until 1996, it was illegal under federal law to export strong cryptography from the United States, which may have discouraged others from learning the art.

LinuxSecurity.com Team
Dec 07, 2006

Risks Associated With Image-Based Keyboards And Trojan Phishing

Recently, I stumbled upon this which nicely showed how a Trojan horse can, utilizing a key stroke capture and screenshot capture, grab a user

LinuxSecurity.com Team
Nov 28, 2006

Exploring HSPD-12 Influence on Public Key Infrastructure Standards

In 1995, when Tim Polk began working full time on developing standards and guidance for using public-key infrastructure applications, he figured it would be a two- or three-year project. But 11 years later, Polk, the National Institute of Standards and Technology

LinuxSecurity.com Team
Nov 27, 2006

RSA Algorithm Attack Analysis: Threats to DRM Software Development

Security researchers have developed a new approach to breaking the RSA algorithm that creates new problems for the development of effective rights management software. Cryptoanalysts already known the time taken to make different calculations using the same encryption key might, in theory at least, give attackers code-breaking clues in much the same way electro-magnetic leakage or power fluctuations can be used in so-called "side-channel" attacks on secure systems. The new so-called Branch Prediction Analysis (BPA) attack is a refinement on this approach that makes code breaking feasible on commodity PCs instead of expensive high-performance kit.

LinuxSecurity.com Team
Nov 27, 2006

Understanding Side-Channel Attacks from Branch Prediction Risks

Deep CPU pipelines paired with the CPU

LinuxSecurity.com Team
Nov 22, 2006

Enhancing RSA Cryptography: New Threat from Branch Prediction Exploits

"Branch Prediction Analysis is a recent attack vector against RSA public-key cryptography on personal computers that relies on timing measurements to get information on the bits in the private key. However, the method is not very practical because it requires many attempts to obtain meaningful information, and the current OpenSSL implementation now includes protections against those attacks. However, German cryptographer Jean-Pierre Seifert has announced a new method called Simple Branch Prediction Analysis that is at the same time much more efficient that the previous ones, only needs a single attempt, successfully bypasses the OpenSSL protections, and should prove harder to avoid without a very large execution penalty."

LinuxSecurity.com Team
Nov 20, 2006

Celebrating 15 Years of PGP Technology in Data Security

PGP Corporation salutes the 15th anniversary of PGP encryption technology. Developed and released in 1991 by Phil Zimmermann, Pretty Good Privacy 1.0 set the standard for safe, accessible technology to protect and share online information.

LinuxSecurity.com Team
Nov 15, 2006

Harnessing Quantum Cryptography for Secure Data Transmission

With security on the Internet, there's always some nagging doubt. Can you ever be absolutely certain, for example, that the e-mail you're sending with some confidential business information attached isn't going to be intercepted and read as it travels the digital highways and byways? Using the Internet for anything sensitive requires some faith that everything in place to ensure the security of the information you're working with

LinuxSecurity.com Team
Nov 12, 2006

Community Poll

More Polls

Linux Cryptography - Page 25

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense