The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [file-encryption]

The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.

Filter by
Sorted by
Tagged with
2
votes
1answer
63 views

How does gpg know what cipher algorithm is needed for decryption?

I am using gpg to make encrypt a tar.gz. My first try uses --verbose --symmetric and then the decryption is done with ...
-2
votes
1answer
96 views

AES encryption with 2048-bit RSA key

I have the following draft to keep my data secure in transit. Generate 2048 bit RSA key sha256sum that private key and use that sum as aad, key and iv parameters in the following aes encryption ...
17
votes
7answers
6k views

How to check a file was encrypted (really & correctly)

I would like to audit how an implementation of an encryption algorithm is really performed with the following given data of the problem: the encryption mechanism is reversible (this isn’t a signature)...
2
votes
1answer
182 views

In GnuPG, what's the difference between --s2k-cipher-algo and --cipher-algo? [duplicate]

I want to change some encryption options while using GnuPG to encrypt a file symmetrically. 1) However, for choosing the cipher algorithm, GnuPG has two commands and I don't know which one to use. ...
0
votes
1answer
119 views

Best practices when encrypting a file with three different ciphers [closed]

I have some files that contain important information, so I want to encrypt them by the most secure encryption method possible. I've read countless StackExchange answers on similar questions and some ...
2
votes
1answer
78 views

Authenticated encryption and file data integrity

I've got a task to provide the integrity and an authenticated encryption for files in our application. I need an assurance if my way of thinking is correct. I can't use AES GCM, I have to stay with ...
2
votes
2answers
709 views

What is a good AES mode to use on file encryption?

I'm new to encryption and cryptography, I was wondering if there is a good or best suited AES mode for file encryption (Planning on zipping a folder and encrypt it as a file). If there is, how complex ...
0
votes
0answers
47 views

Verifying valid public key and finding private key? [duplicate]

A naive user of RSA has announced the public key $n = 2903239, e = 5$. Eve has worked out that $n = 1237×2347$. Verify that the public key is valid and explain why the private key is $d = 2319725$. [...
2
votes
1answer
80 views

How to encrypt sensitive files in a business application? Is it needed? [closed]

I'm currently working on a business Java application, and we store sensitive files related to our users. What is the appropriate approach to store them securely? Is it viable to encrypt/decrypt all ...
1
vote
2answers
120 views

How secure is a system that retrieves encrypted private keys from a public database?

The system in question is one with multiple users. Each user has a password associated with their account, and each user owns several public-private keypairs. A user's private keys are encrypted using ...
0
votes
1answer
62 views

Which symmetric algorithm should I use for storing files in untrusted servers?

I have gigabites of files, which I have to backup. I have some servers for storing this files. But these servers are untrusted. So I need to encrypt files, then backup files. When my PC breaks down, ...
4
votes
3answers
785 views

Reusing IV in AES for encrypting file

Everyone says that you shouldn't use the same IV and Key. Is it safe to use the same IV and Key on only one file. EDIT: I will be using CBC or CFB encryption modes so the IV will be updated based on ...
-1
votes
2answers
486 views

Rsa encryption security

What tool is used to measure the security of rsa encryption? If no, is there any tool to measure rsa encryption in terms of security. Or any idea how to measure security of rsa encryption?
1
vote
1answer
94 views

Robust cryptosystem for files/chunks protection?

I'm not a cryptographic expert by far but I do understand that when it comes to cryptography it's best to stick with established standards. I have to ensure confidentiality and integrity of a bunch ...
1
vote
1answer
387 views

Why does Apple use One-Pass Diffie-Hellman for file encryption?

I was reading the iOS Security Guide (snapshot) and stumbled upon the following file protection class on page 15: (NSFileProtectionCompleteUnlessOpen): Some files may need to be written while the ...
0
votes
1answer
58 views

A file chunk in a group/field

I am reading a paper by Shacham and Waters on Compact Proofs of Retrievability. In this paper on page number 3 under section 1.1 in the very first line the author states that an encoded file is broken ...
1
vote
2answers
229 views

Can a hash of the original plain text file be used to brute force an encrypted copy?

I have encrypted files stored on a public cloud, in the same directory on the cloud I have the sha256 hash of the files before they were encrypted in a text file. The keys used to encrypt the files ...
2
votes
3answers
495 views

Do I need to generate unique IV for CBC encryption of a file if I encrypt multiple blocks of data?

The situation is that I download a mp3 file (song) and I encrypt blocks of data (4096 bites for example). The output of every encryption operation I save it in a new file. When I play the song (...
2
votes
1answer
711 views

Simple secret key encryption with PyNaCl [closed]

I am playing around with PyNaCl to get a bit into cryptography atm. Now I wrote two scripts to encrypt a file with a secret key and then decrypt it again using that key. The encryption part works ...
-1
votes
1answer
743 views

Best complementary algorithm to AES

I'm looking to protect sensitive data from deletion by hosting it on Amazon Glacier. I'd like to secure that data against possible hacks of Amazon by encrypting it, and I'd like for the data to be ...
0
votes
1answer
116 views

What is the fuss about 'dot blockchain' and music metadata? [closed]

and how does it work? http://wmot.org/post/music-money-and-metadata-promise-blockchain#stream/0 claims that this is an answer to the metadata woes of the music/recorded media industry. I don't see ...
1
vote
3answers
142 views

Can multi-encrypted file be decrypted with one password only?

Let's say I have a single file I want to encrypt with AES and I encrypt it twice (first encrypt the unencrypted file, then encrypt the encrypted file again). The first time I use password 'ABC', the ...
2
votes
0answers
202 views

Conforming to best practices in password file (keyring) encryption

In order to implement a plaintext password file safe (keyring), while adhering to best Crypto practices today, I came up with this scheme: A user's master password is hashed with Argon2 (\$argon2id\$...
2
votes
0answers
416 views

AES OCB with Argon2 KDF for keyring file encryption

I've just released a python keyring companion package to encrypt the passwords in a file, available here. Description The project is mainly targeted to provide a sufficiently secure storage for ...
8
votes
1answer
4k views

What is a safe maximum message size limit when encrypting files to disk with AES-GCM before the need to re-generate the key or NONCE

The general limits from the NIST recommendation are as follows: Maximum Encrypted Plaintext Size ≤ 239 - 256 bits; Maximum Processed Additional Authenticated Data ≤ 264 - 1 bits; This stack ...
2
votes
1answer
568 views

Can I use a deterministic NONCE for AES-GCM file encryption if I generate “fresh” keys for each encrypted file

The NIST specification states that the deterministic NONCE(IV) should be 96 bits. It should consist of two fields: fixed field of 32 bits and a 64 bit counter. The use of a random 96 bit NONCE is ...
6
votes
1answer
508 views

Derivation of many (Key, IV) pairs from random 128 nonces and one secret 512 master key

The ext4 encryption system encrypt files with aes-256-xts. Each file uses two unique keys which are derived from a 512 bit master key and a per-file 128 bit nonce randomly generated when the file is ...
1
vote
1answer
76 views

Warding an ECIES setup against MitM: ECDSA?

Is it necessary/appropriate to digitally sign an ETM file in an ECIES context? The encryption mode is CTR(using Inferno). The current output is: [shared public key] [ciphertext] [MAC]. The encrypted ...
0
votes
1answer
234 views

Implementing Inferno's ECIES: Creating a symmetric key from sender's public key [closed]

I'm coding(in C#) an offline(no network or server), hybrid file encryption app, implementing Inferno's ECIES. The user's private key is to be stored either on the pc drive or on a usb key, after ...
0
votes
1answer
204 views

How to effectively apply combination of Block and Stream Cipher?

I have used TrueCrypt but it uses a cascaded encryption. I want to know about encrypting a file using two ciphers with each cipher having different key. Cipher A (Block Cipher) - with Key KA Cipher ...
9
votes
4answers
2k views

Does exposing algorithm, key size and IV weaken the security?

I am using an encryption program to encrypt my documents. Previously I have used PGP and AxCrypt, so I just wanted to see how this new tool encrypts the file. This tool is keeping parameters like ...
6
votes
3answers
12k views

Best way to generate a IV for AES-CBC when encrypting files?

The situation is that I want to use symmetric encryption to store some info in files. I'm going to use AES-CBC algorithm. The user is going to remember the password (meaning it will not be stored ...
2
votes
1answer
166 views

Is this cascading encryption, and is my security weakened as a result?

I'm trying to understand what is, and what is not, considered cascading encryption. All of the posts and conversations I've read over the past few days discourage the practice, including this article. ...
1
vote
1answer
55 views

Crypto lib that use files instead of passphrase [closed]

I would like to program an application to allow people to encrypt files without using a password or pass-phrase but an arbitrary long file. I'm searching for a library that allows me to safely create ...
1
vote
2answers
106 views

Using what we already know about the data to decrypt it?

Are there any methods or tools out there that let us use what we know about the data in order to crack the encryption? For example let's say I get access to an encrypted database file but I know ...
-1
votes
1answer
839 views

can pdfcrack software crack a 128 bit encrypted pdf file

One day ago,i downloaded a pdf that requires password then i search a software to decrypt the password that's s/w called pdfcrack Then i install pdfcrack and run a cmd in terminal pdfcrack -f ...
3
votes
1answer
248 views

(How) Can we use HOTP for file encryption?

I recently went through the list of available KeePass plug-ins and noticed one that advertises support for HOTP as a means to derive the database key. Now I trust the developer of this plug-in who is ...
-1
votes
1answer
271 views

I homebrewed an algorithm. Is it secure?

This is a bit of a cross-posted question which I first asked at StackOverflow, however I was not satisfied with stackoverflow, so I came here for an in depth answer. I, as they say, "rolled my own ...
1
vote
1answer
571 views

Dangers of using CTR mode for encryption

I know that it is never suggested to use the same key or key/IV pair twice for a stream cipher or for a block cipher operating in CTR mode. Filesystem-level encryption reuses the same key for a file ...
0
votes
1answer
97 views

Considerations on using a single long-term key for file encryption

I'm thinking about designing my own container file format that allows me to store a file in it along with, say, a thumbnail or other metadata. Some of these files are confidential and therefore must ...
6
votes
3answers
3k views

Can elliptic curve (25519) be used to encrypt file?

This is probably a simple question, but I haven't been able to see it stated anywhere. Is it possible to directly encrypt a file (of any length) with some form of EC using the 25519 curve. I know it'...
3
votes
0answers
74 views

Is EFS vulnerable to chosen plaintext attack?

I have some backup files encrypted with EFS, but I lost the EFS certificate--thus I am unable to decrypt the files. I understand that EFS uses the user certificate public key to encrypt the symmetric ...
0
votes
2answers
508 views

Password in first line of file for AES-256 encryption

I'm using openssl with aes-256-cbc encryption to encrypt a file. The password is on the first line of the file and the ...
2
votes
1answer
1k views

Best practises to generate IV for AES-CTR in this scenario

I'm building a cloud storage application that will store files on my servers. I want these files to be encrypted with AES in CTR mode and the key will be always the same. I'm wondering what would be ...
5
votes
2answers
2k views

Would it be better to split a file and then encrypt, or vice versa?

Assuming that you are paranoid before storing your file (distributed across a shared location), which will be the best case scenario: splitting the file first and then encrypting or encrypting first ...
2
votes
1answer
72 views

Design for file transfers to a new party

I'm pondering a problem of how to enable transfers of files from clients to people that does not yet have an application/account/keys yet. Here's my current thought for Alice wanting to send Bob ...
2
votes
1answer
1k views

Can a file encrypted with one tool be decrypted with different tool? [closed]

I'm new to cryptography and I'm trying implement a file encryption feature into a Python program but I'm running into a big issue...what is needed for someone else to decrypt the file?! Obviously, I ...
2
votes
1answer
1k views

What is required to decrypt an encrypted file?

At the risk of sounding stupid and being laughed at...I must ask this question. What is required to decrypt an encrypted file? Obviously you need the appropriate key to decrypt, but is any other ...
1
vote
0answers
58 views

research on Encryption for master [closed]

I'm tring to choose an way for an Encryption mothod for my research? So,I want to choose one-layer encryption or multilayer encryption,and I want it to be easy to applicable. when I search about it, ...
6
votes
1answer
2k views

Is ChaCha20 alone sufficient for securing data-at-rest?

I wonder if ChaCha20 alone is sufficient for securing files stored on a disk or should Poly1305 should be used along with it? AFAIK, Poly1305 is used to secure the authentication channel, but for ...