Computer scientists at the University of North Carolina have constructed (pdf) a system whereby a malicious virtual machine is used in a so-called access-driven side-channel attack for the first time.
Running on the Xen hypervisor, the attack succeeded in extracting an ElGamal decryption key from a victim virtual machine using the most recent version of the libgcrypt cryptographic library, the researchers wrote.
Full Disk Encryption (FDE) is one of the best ways you can ensure all of the private information on your laptop stays private in case it's lost, seized, stolen, or if you choose to sell or give away your computer in the future. This feature has been built-in to many GNU/Linux distributions, including Ubuntu, for many years. But until the recent release of Ubuntu 12.10, it was hidden away in the "alternate" text-mode installer of Ubuntu that many non-technical users don't even know exists.
Lately, Mike Janke has been getting what he calls the "hairy eyeball" from international government agencies. The 44-year-old former Navy SEAL commando, together with two of the world's most renowned cryptographers, was always bound to ruffle high-level feathers with his new project - a surveillance-resistant communications platform that makes complex encryption so simple your grandma can use it.
A technicolour art space in south Sydney on a Saturday night is an unlikely gathering point for internet denizens interested in remaining private.
Welcome to a Cryptoparty, where privacy becomes public.
The 30-strong crowd are young and old, tech-savvy to tech-naive, and are part of a growing movement of people who believe that data privacy is not secrecy. Not only do they want to protect their emails, files and browsing history from governments, but also from corporations and other internet users. They are not necessarily hackers and what they are doing is not illegal.
L33tdawg: Here we go again...
Wannabe code-crackers have a fresh challenge to rise to, if DeTron has its way. The encryption company ran a full page ad in the New York Times late last week challenging code breakers, hackers and cryptographers to crack a message encrypted by Quantum Direct Key (QDK) – a personal identification encryption technology aimed at eliminating multiple passwords for cloud services and web apps.