Linux Cryptography - Page 44 - Results from #860

Discover Cryptography News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

OpenSSH 3.0.2 Security Advisory: Critical UseLogin Local Attack Fix

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

OpenSSH 3.0.2 has just been released. This release fixes a vulnerability in the UseLogin option of OpenSSH. This option is not enabled in the default installation of OpenSSH.. . .

LinuxSecurity.com Team
Dec 04, 2001

Tim May's Insights on The Future of The Cypherpunks Mailing List

Over the course of the last week or so a number of news sites reported the demise of the cyperpunks mailing list. Tim May writes that he thinks it's a matter of course for the lifecycle of a mailing list, and perhaps not as noteworthy as it's being made to be... "The article is not a bad one, and actually makes some good points. Predictably, the headline is lurid and derogatory.". . .

LinuxSecurity.com Team
Nov 30, 2001

Federal Appeals Court Upholds DMCA DVD-Cracking Code Ban

A federal appeals court on Wednesday upheld an order that prohibits publishing or linking to DVD-cracking code--a decision with sweeping significance for free speech rights and copyright protection on the Internet.. . .

LinuxSecurity.com Team
Nov 29, 2001

OpenCryptoki: PKCS #11 Integration for Secure Device Communication

openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices (such as a smart card, smart disk, or PCMCIA card) that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the . . .

LinuxSecurity.com Team
Nov 28, 2001

Exploring Encryption Security: Key Issues On Data Protection

Encryption technology has come under fire from proponents of rival socket layer technology, who claim it will always be vulnerable to hackers. Encryption has been traditionally seen as the most secure way to transport data as the technology relies on the . . .

LinuxSecurity.com Team
Nov 28, 2001

Phil Zimmermann On PGP Development, Legal Battles And Encryption Challenges

InfoSecurityMag talks with the creator of PGP and the motivations behind creating it. "Zimmermann says he was confident that the first release of PGP domestically would be safe from legal restrictions, albeit not unnoticed.. . .

LinuxSecurity.com Team
Nov 27, 2001

Exploring GnuTLS: Ensuring Secure TCP/IP Through TLS Protocol

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer (ie. TCP/IP). Currently the gnuTLS library implements the proposed standards by the IETF's TLS working group. "The TLS protocol provides . . .

LinuxSecurity.com Team
Nov 20, 2001

OpenSSH 3.0.1 Moderate: Authentication Issue and Memory Bug Fix

A security hole that may allow an attacker to authenticate if -- and only if -- the administrator has enabled KerberosV. By default, OpenSSH KerberosV support only becomes active after KerberosV has been properly configured.. . .

LinuxSecurity.com Team
Nov 19, 2001

IBM: Evaluate Cryptographic Security Breach After Student Findings

An independent expert has backed two Cambridge University students' claims to have uncovered a flaw in a key IBM cryptographic coprocessor that is at the heart of some of the world's most secure systems. IBM has been warned not to dismiss . . .

LinuxSecurity.com Team
Nov 14, 2001

Enhancing E-Business with Effective PKI Integration Strategies

Like a successful public works project, a good Public Key Infrastructure (PKI) should also be invisible to its end users, whether they're company employees, business partners, or customers. Similarly, PKI and the digital certificates that are its stock in trade can be complex and complicated-the potential for messy mishaps is high.. . .

LinuxSecurity.com Team
Nov 12, 2001

California Court Ruling Declares DeCSS as Forms of Protected Speech

A California appeals court Friday issued a potentially far-reaching decision in a case involving the online publication of DVD-copying software. The Court of Appeal in the Sixth Appellate District of California reversed a lower court's decision to impose a temporary injunction . . .

LinuxSecurity.com Team
Nov 06, 2001

Protect Your Network From Eavesdropping With Secure Protocols

Securing your network activity is not difficult, but it does require an awareness of how certain protocols work. This article will attempt to address these protocols and situations and suggest ways of adding security.. . .

LinuxSecurity.com Team
Nov 02, 2001

California Court Decision on DeCSS DVD Descrambler and Free Speech

The Copy Control Association (CCA), which was granted a preliminary injunction against Andrew Bunner and other Webmasters, was handed its head in a California appellate court Thursday. The trial court had granted the injunction against publishing Jon Johansen's DeCSS DVD descrambler, but Brunner appealed on First Amendment free-speech grounds.. . .

LinuxSecurity.com Team
Nov 01, 2001

Analysis of MultiSwap Cipher in Microsoft DRM by Beale Screamer

An anonymous security researcher working under the pseudonym "Beale Screamer" reverse engineered the Microsoft Digital Rights Management subsystem and, by October 20th, the results were available on cryptome.org. As part of the reverse engineering effort Screamer found an unpublished block cipher, which he dubbed MultiSwap, being used as part of DRM. Screamer did not need to break the MultiSwap cipher to break DRM, but we thought it would be a fun excercise, and summarize the results of our investigation below.. . .

LinuxSecurity.com Team
Oct 29, 2001

Key Escrow Abandonment: Government Control Over Encryption Issues

As concern grows over the vulnerability of government and industry organizations, a familiar and controversial battle has been revisited on Capitol Hill: the question of whether government should have control of encrypted messages. "Key escrow" -- a system whereby digital keys . . .

LinuxSecurity.com Team
Oct 25, 2001

The Encryption Debate: Privacy and Regulatory Challenges

The perennial target for government disapproval is encryption, and recent events in New York have added serious fuel to the already glowing embers of the argument. It is a touchy subject in light of the recent atrocities, which are being used . . .

LinuxSecurity.com Team
Oct 25, 2001

Master OpenSSH: Secure Data Transmission Over Insecure Networks

Computer networks are an inherently insecure medium. Unless you are assured that your packets will never pass through a router or computer which you do not have direct control over, your data is not safe. It may be viewed by an . . .

LinuxSecurity.com Team
Oct 22, 2001

Sen. Judd Gregg Abandons Backdoor Encryption Proposals Amid Concerns

Sen. Judd Gregg has abruptly changed his mind and will no longer seek to insert backdoors into encryption products. A spokesman for the New Hampshire Republican said Tuesday that Gregg has "no intention" of introducing a bill to require government . . .

LinuxSecurity.com Team
Oct 17, 2001

Evaluating Encryption's Critical Role In Securing IT Post-Attacks

Many companies have reassessed their technology initiatives in the month since the tragic attacks on the United States. Some are focusing on security measures for IT systems while others are deepening efforts to secure facilities and intellectual property. Encryption technologies are . . .

LinuxSecurity.com Team
Oct 15, 2001

Master PGP Basics: A Quick Guide to Secure Email Communication

The intent of this document is to provide the new PGP user with enough information to effectively use PGP. This is just a primer; for more information, check the PGP help file and manual or see the Resources list at the . . .

LinuxSecurity.com Team
Oct 11, 2001

Community Poll

More Polls

Linux Cryptography - Page 44

Linux Kernel Gains Hardware-Wrapped Encryption Keys

When Security Hinges on a Single Key: A Wake-Up Call for Admins

IPFire 2.29 Core Update 193: Key Improvements in Security and Defense