Main

June 16, 2006

Secure FTP

File transfer protocol or FTP sends username, password and data in the clear over the internet.

Secure FTP or sftp was developed to keep the data encrypted between the FTP client and server.

April 11, 2006

Hard drive Encryption

If it is windows, the easiest one is the one built into it, the EFS
(encrypted file system) which uses triple-des as the cipher algorithm,
and that is fairly secure.

If the OS is linux, then it is not so simple to do, but from what I have
tried and read, the most secure is a program called loop-aes.
Essentially you boot off a live linux-cd like knoppix and run the
program from there. If you want to have the HD encrypted while booted
into the OS, you have to recompile the kernel to add in some special
options, and make a loopback device that essentially encrypts/decrypts
data to/from the drive, which is no easy task to set up.

Encryption is not like what's in the movies. It's hard to setup, harder
to break, and not very sexy.

March 26, 2006

Secure Hash Algorithm

The family of SHA (blocked algorithm of parasitic information) is a whole of relative cryptographic functions of parasitic information. The function most generally used in the family, Sha-1, is used in a large variety of popular applications of safety and proclaims a protocol, including TLS, SSL, PGP, SSH, S/mime, and IPSec. Sha-1 is regarded as the successor with MD5, a first, employee usually function of parasitic information. The algorithms of SHA were designed by the agency of national safety (NSA) and published like normalizes government of the USA. The first member of the family, published in 1993, is called officially SHA; however, this is often called Sha-0 to avoid confusion with its successors. Two years afterwards, Sha-1, the first successor of SHA, was published. Four additional alternatives since were published with increased ranges of output and a slightly different design: Sha-224, Sha-256, Sha-384, and Sha-512 -- sometimes collectively indicated under the name of Sha-2. Attacks for were found Sha-0 and Sha-1. No attack still was returned Sha-2 account of the alternatives, but since they are similar to Sha-1, researchers is worried, and develops candidates for a news, better standard of jamming.

March 20, 2006

Harddrive Encryption

Howto encrypt your hard drive.

If it is windows, the easiest one is the one built into it, the EFS (encrypted file system) which uses triple-des as the cipher algorithm, and that is fairly secure.

If the OS is linux, then it is not so simple to do, but from what I have tried and read, the most secure is a program called loop-aes. Essentially you boot off a live linux-cd like knoppix and run the program from there. If you want to have the HD encrypted while booted into the OS, you have to recompile the kernel to add in some special options, and make a loopback device that essentially encrypts/decrypts data to/from the drive, which is no easy task to set up.

Encryption is not like what's in the movies. It's hard to setup, harder to break, and not very sexy.

March 10, 2006

Email Encryption

I am doing a paper on email encryption and I have two theories: The level of encryption depends on the information being encrypted. Much email is non-sensitive info so encryption is not used. At other times, like for medical records, email is encrypted to protect confidential info. Email encryption is not used because users don't know how much it is worth. Email encryption developers need funds to create privacy, but different users value privacy differently. Many users want free online privacy, expecting it to be "provided" by the Net. Others, like corportate users, will pay resonable fees to companies (like Verisign) because they need strong encryption. What I need are papers, books, or other documents that back up (or refute) the above claims. If anyone has user survey data (how users value email encryption) that would be ideal!