typical approach for encryption using keys?

typical approach for encryption using keys?

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
typical approach for encryption using keys? lars.hansen 06-27-2007
Posted by on June 27, 2007, 6:20 am
If you were  Registered and logged in, you could reply and use other advanced thread options
you can create one key from one passphrase or several keys from one
passphrase or create several keys from some data and associate it with
one passphrase.
What is the typical approach used in encryption software?
One key for all files or data blocks or one key for each file/data
block?

with kind regards, Lars


Posted by Walter Roberson on June 27, 2007, 10:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
>you can create one key from one passphrase or several keys from one
>passphrase or create several keys from some data and associate it with
>one passphrase.
>What is the typical approach used in encryption software?
>One key for all files or data blocks or one key for each file/data
>block?

Any time you reuse information in a key, you weaken the security
of the key, if there is any chance that someone might discover
the reuse. An insider, a burgler, a cryptoanalyst doing
differential cryptoanalysis, a visitor who happens to notice the
big "What hath God wrought?" sign on your wall...

Posted by Ertugrul Soeylemez on June 27, 2007, 8:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
roberson@hushmail.com (Walter Roberson) (07-06-27 14:30:16):

> > you can create one key from one passphrase or several keys from one
> > passphrase or create several keys from some data and associate it
> > with one passphrase.
> > What is the typical approach used in encryption software?
> > One key for all files or data blocks or one key for each file/data
> > block?

Whatever you need. If you encrypt all your data with the same key, then
all data will be disclosed upon compromise. This is your decision.


> Any time you reuse information in a key, you weaken the security of
> the key, if there is any chance that someone might discover the
> reuse. An insider, a burgler, a cryptoanalyst doing differential
> cryptoanalysis, a visitor who happens to notice the big "What hath God
> wrought?" sign on your wall...

Differential cryptanalysis? Why specifically that? Is it terribly
useful against today's ciphers?


Regards,
Ertugrul S=C3=B6ylemez.


--=20
Security is the one concept, which makes things in your life stay as
they are. Otto is a man, who is afraid of changes in his life; so
naturally he does not employ security.

Posted by on June 28, 2007, 4:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:
>
> Whatever you need. If you encrypt all your data with the same key, then
> all data will be disclosed upon compromise. This is your decision.

On Jun 27, 4:30 pm, rober...@hushmail.com (Walter Roberson) wrote:
>
> Any time you reuse information in a key, you weaken the security
> of the key, if there is any chance that someone might discover
> the reuse.


thanks for your answers; I am more interested in how actual current
available software uses keys when encrypting folders for example, eg.
TrueCrypt; do they use one key for all of the files or several keys?

thanks, Lars


Similar ThreadsPosted
hiding encryption keys August 12, 2005, 3:32 pm
Newbie question on encryption keys July 10, 2007, 3:05 am
Request for comments - anti-phishing approach May 29, 2005, 9:55 am
why non exportable keys? March 11, 2006, 10:20 am
How keys should be distributed? May 8, 2007, 11:29 pm
How do I export only private keys in PGP? August 6, 2005, 7:45 am
registry keys for virus scanners February 3, 2005, 2:59 pm
what are 16- or 25-digit license keys and how to create? April 7, 2005, 10:56 am
how to send data using crypto keys? May 6, 2005, 7:15 pm
Are the (exported) keys of PGP and GnuPG compatible? July 17, 2005, 5:25 pm

The site map in XML format XML site map

Contact Us | Privacy Policy