Linux Cryptography - Page 42 - Results from #820

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Guide to PGP Signature Verification and Document Integrity

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This paper (pdf) provides some background information about PGP and explains how to check signatures for validity. "PGP stands for Pretty Good Privacy. It is a computer program that uses mathematical algorithms to encrypt files and protect them from unauthorized access.. . .

LinuxSecurity.com Team
Mar 20, 2002

Bruce Schneier Critiques Bernstein's Claims on Code Breaking Efficiency

Encryption expert Bruce Schneier downplayed this week the importance of a University of Illinois professor's newest method of breaking the digital codes that secure information. In a paper published on his Web site, Daniel Bernstein, an associate professor of . . .

LinuxSecurity.com Team
Mar 19, 2002

Achieving Robust Security through Full Privilege Separation in OpenSSH

The goal of this work is complete privilege separation within in OpenSSH. Privilege separation uses two processes: The privileged parent process that monitors the progress of the unprivileged child process. The child process is unprivileged and the only process that processes . . .

LinuxSecurity.com Team
Mar 18, 2002

Concerns Over Factoring Technology's Threat To Strong Encryption Security

Concerns that improvements in factoring technology might make it easier to break large key length encryption codes are misplaced, according to noted cryptographer Bruce Schneier. Last year mathematician Dan Bernstein circulated a paper discussing improvements in integer factorization, . . .

LinuxSecurity.com Team
Mar 13, 2002

PureTLS: Free Java SSLv3 and TLSv1 Implementation Overview

PureTLS is a free Java-only implementation of the SSLv3 and TLSv1 (RFC2246) protocols. PureTLS was developed by Eric Rescorla for Claymore Systems, Inc. but is being distributed for free because we believe that basic network security is a public good and . . .

LinuxSecurity.com Team
Mar 10, 2002

OpenSSH 2.0-3.0.2 High Risk: Local Privilege Escalation Advisory

"A bug exists in the channel code of OpenSSH versions 2.0 - 3.0.2 Users with an existing user account can abuse this bug to gain root privileges. Exploitability without an existing user account has not been proven but is not considered impossible. A malicious ssh server could also use this bug to exploit a connecting vulnerable client.". . .

LinuxSecurity.com Team
Mar 07, 2002

Impact of PGP Desktop Discontinuation on Users and Their Privacy

A week ago, on Feb. 26, Network Associates (NAI) sent an e-mail to some of its customers announcing that it had killed the PGP Desktop Security product line. This, ladies and gentlemen, is very grim news indeed. Why do I care about PGP Desktop? Because it's a critical software package for me, and presumably for many of you as well.. . .

LinuxSecurity.com Team
Mar 05, 2002

Enhancing Security: OpenSSH Agent Forwarding Techniques

In this third article in a series, Daniel Robbins shows you how to take advantage of OpenSSH agent connection forwarding to enhance security. He also shares recent improvements to the keychain shell script. If you can't run ssh-agent on untrusted hosts, then how do you establish secure, passwordless ssh connections from these systems?. . .

LinuxSecurity.com Team
Feb 28, 2002

CodeCon: Cutting-Edge P2P Innovations and Crypto Audio Insights

The wonderful CodeCon conference that took place in San Francisco last weekend is now available as an audio stream. And in keeping with the true hackish nature of the event, the audio stream is a cross-platform DIY project in its own right.. . .

LinuxSecurity.com Team
Feb 25, 2002

AEP Showcases Innovative Encryption Products At RSA 2023 Conference

Accelerated Encryption Processing (AEP) will show off two new encryption-processing products at the RSA Security conference to be held in San Jose, California next week (18 February). Web servers used for e-commerce, financial services and other tasks that make intensive use . . .

LinuxSecurity.com Team
Feb 13, 2002

Exploring PGP For Email Security: Protecting 900 Million Users

By some estimates, well over 900 million people -- nearly one out of every seven people on Earth -- have access to e-mail. Most of them are, or should be, familiar by now with the saying, "Sending e-mail is like sending . . .

LinuxSecurity.com Team
Feb 13, 2002

NIST Approval Of Advanced Encryption Standard: Securing Data In IT

Secretary of Commerce, Don Evans, announced the National Institute of Standards and Technology?s (NIST; www.nist.gov), approval of a new information technology encryption standard for the federal government. The Advanced Encryption Standard (AES; is expected to be widely used in the private sector, as well, to protect sensitive computerized information and financial transactions. The announcement marked the culmination of a four-year effort by computer scientists at the NIST to achieve a highly secure algorithm for the AES. The effort was conducted through a competition that started in 1997. Researchers from 12 different countries submitted encryption algorithms. Each of the algorithms submitted was required to support key sizes of 128, 192 and 256 bits. For a 128-bit key size, there are approximately 340 undecillion (340 followed by 36 zeros) possible keys. The link for this article located at ISP World is no longer available.

LinuxSecurity.com Team
Feb 10, 2002

Integrating Digital IDs for Secure Email Communications in Enterprises

Do people in your company send confidential information to business partners or remote employees via Internet email? Are they using some form of digital ID system to secure their communications? If they're not, any sensitive information contained in those messages is at risk as the email travels across the Internet.. . .

LinuxSecurity.com Team
Feb 08, 2002

Analyzing AES As The Future Standard For Encryption Techniques

A nice summary of all the issues pertaining to AES and how it has replaced DES as the encryption standard. "Nothing moves fast in the world of encryption, which may help explain why the U.S. is only now about to leave 56-bit DES behind for new encryption schemes.. . .

LinuxSecurity.com Team
Feb 07, 2002

Forrester Conference: Trust And Security In Identity Providers

For all the pro-Web services enthusiasm here at Forrester's conference, serious security-and trust-related concerns emerged as a common theme. Citing worries about investing trust in third-party identity providers such as RSA and VeriSign, conference attendees and speakers at the conference . . .

LinuxSecurity.com Team
Feb 06, 2002

Addressing Encryption Issues In Counter-Terrorism Threats

Ironically, winning possession of computer equipment on the battlefield may be the easy part; terrorists today have the capacity to protect data with encryption schemes that not even America's high-tech big guns can crack. The number of possible keys in the . . .

LinuxSecurity.com Team
Feb 05, 2002

Hyper-Encryption: The Future of Secure Communication with Unbreakable Codes

AS MYSTICS SEARCH for the lost island of Atlantis and UFO buffs seek out alien spacecraft, cryptologists are continuing their own quest to create an unbreakable code. Michael Rabin, a Harvard University computer science professor, believes he has moved cryptology . . .

LinuxSecurity.com Team
Feb 01, 2002

Impact of Encrypted Communications on Intelligence Operations Post 9/11

Within days of the September 11 attacks U.S. intelligence agencies were being blamed in many quarters for their failure to detect the terrorists' plans in advance. Mistakes in the formulation and execution of intelligence policy were no doubt made. Yet there . . .

LinuxSecurity.com Team
Jan 29, 2002

Delving into Government Cryptography: Safeguarding Confidential Information

Knowledge of cryptographic techniques used to belong almost exclusively to governments, which use cryptography to protect political, diplomatic and military secrets against the prying eyes of other governments. Historically, governments took steps to restrict the spread of cryptographic knowledge. Cryptographic activities . . .

LinuxSecurity.com Team
Jan 15, 2002

Court Rules Source Code Is Protected Speech: Impacts on Encryption Policy

The U.S. Court of Appeals for the Sixth Circuit has ruled that computer source code is protected by the First Amendment. The ruling could have significant implications on the United States' encryption policies. This article discusses the case and the lessons it teaches about encryption.. . .

LinuxSecurity.com Team
Jan 13, 2002

Community Poll

More Polls

Linux Cryptography - Page 42

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense