Linux Cryptography - Page 26 - Results from #500

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Expert Panel Discusses Usability Barriers in Cryptography Adoption

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

US government controls held back cryptography in the past, but today, it's usability that blocks adoption, a panel of experts said on Thursday. At an event in Mountain View, California, celebrating 30 years of public key cryptography, several top minds in the field gathered for a trip down memory lane. Over the years, public key cryptography has grown from an idea in a paper published by Whitfield Diffie and Martin Hellman, both present at the event, to technology used in everyday transactions on the web.

LinuxSecurity.com Team
Oct 31, 2006

Exploring Cryptography's Role in Modern Data Protection

Richard Moulds explains how cryptography is converging with other security technologies, such as identity management systems and strong authentication, to lay a foundation for data and content security. With the distinction between inside and outside disappearing and remote users demanding access from anywhere and at anytime, organisations are turning to a more data-centric approach to security. And fundamental to this is the use of encryption. While cryptography has long been used to protect data in motion, it is now being applied to protect data at rest, in databases, file systems and storage devices. In addition, cryptography is expanding beyond privacy enforcement to establish the integrity of data and documents and to ensure the security of audit information, easing compliance.

LinuxSecurity.com Team
Oct 19, 2006

Achieving Harmony in Security and Usability During Software Development

sability of security software is partly to blame for low protection levels in many computers, according to international security experts. In a panel session at this year's Australian Unix Users Group (AUUG) conference in Melbourne yesterday, software security developers gave reasons why the IT industry is still at the mercy of so many problems. University of Auckland computer scientist Peter Gutmann said many security standards were written 10 years ago and have mostly just been tweaked since then. "A lot of the security stuff is designed by crypto geeks [and] because of a lack of usability, people can't apply them correctly," Gutmann said, adding usability is just as important as "having a bunch of crypto and let people figure it out from there".

LinuxSecurity.com Team
Oct 13, 2006

184.6 Km Transmission: Quantum Key Breaks Previous Record

A encrypted quantum key has been transmitted over a distance of 184.6 km, which is 50% further than the previous record of 122 km. The work was done by researchers in the US, based at the Los Alamos National Laboratory (LANL) in New Mexico and the National Institute of Standards and Technology (NIST) in Boulder, Colorado (New Journal of Physics 8 193). The previous record of 122 km was set by researchers at Toshiba

LinuxSecurity.com Team
Oct 04, 2006

Exploring Cryptography's Role In Data Security Best Practices

Cryptography is, traditionally, the study of means of converting information from its normal, comprehensible form into an incomprehensible format, rendering it unreadable without secret knowledge

LinuxSecurity.com Team
Oct 04, 2006

Swift Data Protection Leveraging Itanium Framework for Government Entities

Linux kernel maintainer Linus Torvalds has charged that Itanium designers "threw out all the good parts of the x86." One emerging niche for Itanium, though, seems to be high-speed encryption and decryption. For instance, encryption and key management provider Eruces Inc. of Lenexa, Kan., is bullish on Itanium. Eruces devotes a large chunk of its business to federal intelligence agencies. The company's symmetric key management system encrypts documents, programs and databases, using a centralized KeyServer to generate and manage keys.

LinuxSecurity.com Team
Sep 12, 2006

Enhancing Online Banking Security With Mutual Authentication Techniques

The best way to protect online users of banking services against an ever-growing variety of threats is with an effective, efficient multi-layered security environment that utilizes a mutual authentication model. This Best Practices approach enables the 'User' to authenticate the bank site and the bank to authenticate the user.

LinuxSecurity.com Team
Sep 11, 2006

StrongKey Open-Source Key Management Tool For PCI Compliance

StrongAuth, Inc. has announced the availability of a free and open-source software product - StrongKey - designed to help enterprises manage symmetric encryption keys as a centrally managed resource. This capability, a first for the open-source community, provides implementers with independence from application-specific, operating system-specific or database-specific encryption key-management solutions.

LinuxSecurity.com Team
Sep 11, 2006

Northwestern and BBN Launch Quantum Cryptography Network Demo

Northwestern University researchers have joined forces with BBN Technologies to demonstrate what they are calling the first truly quantum cryptographic data network. The university has combined its quantum noise-protected data-encryption technology with quantum key distribution technology from BBN on a 5.5-mile SONET link between BBN headquarters and Harvard University. Quantum cryptography uses single photons of light to distribute keys to encrypt and decrypt messages. Because quantum particles are changed by any observation or measurement, even the simplest attempt at snooping on the network interrupts the flow of data and alerts administrators.

LinuxSecurity.com Team
Sep 04, 2006

Analyzing The Snake Oil Phenomenon In Cryptography Claims

The term snake oil is often used to describe cryptography that does not actually provide the level of security that its proponents claim. The origin of the term is somewhat unclear, but one story is that it can be traced back to one of the traditional remedies for joint pain and inflammation that was brought to the US in the nineteenth century by Chinese immigrants. The fat from Chinese water snakes is high in eicosapentaenic acid (EPA), which has been shown to have some medicinal properties, so there may be some basis for believing that the traditional remedy actually had useful effects. Like the effects of many medications, however, the benefits from the traditional snake oil were subtle and varied significantly from person to person, making it difficult to rigorously prove the effectiveness of the remedy.

LinuxSecurity.com Team
Sep 04, 2006

Crypto 2006: New Attack Method Against SHA-1 Hash Algorithm

Cryptographic experts at the Crypto 2006 conference have demonstrated a modified method of attack against a reduced variant of the SHA-1 hash algorithm. The new method is an attack which, for the first time, allows at least a part of the message to be freely selected, for example as straight text. Previous approaches, for example the collision attack by Xiaoyun Wang and her team, which attracted considerable attention, were merely able to produce almost completely different hash twins of the same length, both consisting of meaningless gibberish.

LinuxSecurity.com Team
Aug 28, 2006

Understanding Cryptographic Hashes and Their Security Implications

With the recent news of weaknesses in some common security algorithms (MD4, MD5, SHA-0), many are wondering exactly what these things are: They form the underpinning of much of our electronic infrastructure, and in this Guide we'll try to give an overview of what they are and how to understand them in the context of the recent developments.A "hash" (also called a "digest", and informally a "checksum") is a kind of "signature" for a stream of data that represents the contents. The closest real-life analog we can think is "a tamper-evident seal on a software package": if you open the box (change the file), it's detected.

LinuxSecurity.com Team
Aug 23, 2006

Exploring Cryptography: Securing Data Through History And Technology

Cryptography has been employed for keeping secrets since the time of Caesar. From the simplest ciphers of shifting letters, to mathematically provably secure ciphers of today, cryptography has progressed a long way.

LinuxSecurity.com Team
Aug 17, 2006

U.K. Police Urge Seizure Of Encryption Keys In Criminal Cases

Because British law enforcement officers don't have the authority to seize encryption keys, an increasing number of criminals are able to evade justice, a senior police officer said. Suspected terrorists, pedophiles and burglars have all walked free because encrypted data couldn't be opened, Detective Chief Inspector Matt Sarti of the Metropolitan Police said Monday during a public meeting in London. "There are more than 200 PCs sitting in property cupboards which contain encrypted data, for which we have considerable evidence that they contain data that relates to a serious crime," Sarti said. "Not one of those suspects has claimed that the files are business-related, and in many cases, the names of the files indicate that they are important to our investigations."

LinuxSecurity.com Team
Aug 16, 2006

Exploring Modern Security for Hash Algorithm Weaknesses

Hashing has long been used as a means to verify data elements. Parity bits were originally used to confirm that a data transmission was received correctly and helped to detect any single-bit errors. However, parity didn

LinuxSecurity.com Team
Aug 07, 2006

Data Protection With PHP: Techniques And Practical Examples

In this increasingly virtual online world, you have to be careful to protect your data. Learn the basics of encoding and encrypting important bits of information, such as passwords, credit card numbers, and even entire messages. Get an overview of what it means to encrypt and decrypt information, as well as some practical examples involving passwords and other data, using PHP's built-in functionality.

LinuxSecurity.com Team
Jul 25, 2006

Exploring Password Length: Insights from Roger Grimes on Protection

Does size matter? The question has arisen lately on Security-Basics, a computer security mailing list hosted by SecurityFocus.com. As usual, the question comes down to physical size or mental prowess.

LinuxSecurity.com Team
Jul 24, 2006

Explore Godzilla Crypto Tutorial: 509 Slides on Encryption Techniques

This page contains my godzilla crypto tutorial, totalling 509 slides in 8 parts, of which the first 7 are the tutorial itself and the 8th is extra material which covers crypto politics. Part 8 isn't officially part of the technical tutorial itself. The tutorial is done at a reasonably high level, there are about two dozen books which cover things like DES encryption done at the bit-flipping level so I haven't bothered going down to this level. Instead I cover encryption protocols, weaknesses, applications, and other crypto security-related information. Since the slides are accompanying material for a proper tutorial, there's a lot of extra context which isn't available just by reading the slides. Bear in mind that some of the claims and comments on the slides need to be taken in the context of the full tutorial. Accompanying the slides are about 150 images, unfortunately I can't make these available for copyright reasons.

LinuxSecurity.com Team
Jul 20, 2006

Investigation of USENET Images for Steganography Detection Techniques

After scanning two million images from eBay without finding any hidden messages, we extended the scope of our analysis. A detailed description of the detection framework can be found in Detecting Steganographic Content on the Internet. This page provides details about the analysis of one million images from the Internet Archive's USENET archive. Processing the one million images with stegdetect results in about 20,000 suspicious images. We launched a dictionary attack on the JSteg and JPHide positive images. The dictionary has a size of 1,800,000 words and phrases. The disconcert cluster used to distribute the dictionary attack has a peak performance of roughly 87 GFLOPS.

LinuxSecurity.com Team
Jul 10, 2006

Exploring Cryptovirology: Risks of Malicious Cryptography in Malware

Cryptology is everywhere these days. Most users make good use of it even if they do not know they are using cryptographic primitives from day to day. This two-part article series looks at how cryptography is a double-edged sword: it is used to make us safer, but it is also being used for malicious purposes within sophisticated viruses.

LinuxSecurity.com Team
Jul 03, 2006

Community Poll

More Polls

Linux Cryptography - Page 26

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense