Skip to main content

Encryption

No encryption on Defence’s lost and found memory stick

posted onMarch 23, 2011
by hitbsecnews

A misplaced thumb drive that was returned to the Department of Defence last week was a commercial product with no encryption enabled.

The department’s investigation revealed that the drive belonged to a Defence contractor, and had 61.3 megabytes of data that included Defence material. No encryption was enabled on the memory stick, which was “a commercial product purchased by the owner”, a spokesman told iTnews last night.

Physicists Develop Quantum Version of Public Key Encryption

posted onMarch 17, 2011
by hitbsecnews

The fundamental problem of private communication is ensuring its security.

That's always been a tricky task but in recent years, cryptographers have added a powerful new weapon to their armoury: quantum key distribution. With this tool, it is possible to use the bizarre properties of the quantum world to send a message in such a way that guarantees its security. The security of this system is a fact of nature. In the language of cryptography, quantum key distribution it is information-theoretically secure.

Android Gets Full-Disk Encryption

posted onMarch 17, 2011
by hitbsecnews

Whisper Systems has released a public beta of its enterprise-grade encryption product for Android

Whisper Systems has released what it calls an enterprise-grade full-disk encryption system for Android handsets, intended to offer Android users a feature already available on BlackBerry and Symbian devices.

Is P2P Encryption Secure? That Depends...

posted onMarch 1, 2011
by hitbsecnews

In the wake of the highly publicized payment card security breaches of the past few years, point-to-point encryption (P2PE) has emerged as a frontrunner in the search for a stronger defense against data compromise. The technology is also being touted as a solution to limit the scope -- and therefore the expense -- of complying with the Payment Card Industry Data Security Standard (PCI DSS).

Open source encryption on Brazilian banker's hard drive baffles police

posted onMarch 1, 2011
by hitbsecnews

The FBI has admitted defeat in attempts to break the open source encryption used to secure hard drives seized by Brazilian police during a 2008 investigation.

The Bureau had been called in by the Brazilian authorities after the country's own National Institute of Criminology (INC) had been unable to crack the passphrases used to secure the drives by suspect banker, Daniel Dantas.

Facebook seeking encryption for apps, mobile

posted onFebruary 25, 2011
by hitbsecnews

In response to complaints that a recent announcement of secure connections doesn't go far enough, Facebook said today that it's planning to roll out additional changes that would shield mobile devices and all apps from eavesdropping.

Last month, Facebook began offering the ability for users to turn on HTTPS (Hypertext Transfer Protocol Secure) to encrypt all communications with the site. However, F-Secure and others have noticed that some apps require users to switch to a regular HTTP connection to use the app, but don't warn users that the switch then becomes permanent.

RSA: Cryptographers revisit DES

posted onFebruary 16, 2011
by hitbsecnews

A group of leading cryptography experts discussed one of the field's earliest conflicts Tuesday at the RSA conference.

The panel recalled the development of the Data Encryption Standard (DES) and the drama that surrounded its development in the 1970s.

Hackers Build Android Encryption Apps For Egypt

posted onFebruary 10, 2011
by hitbsecnews

Cellphones may be helping to connect and organize the pro-democracy protesters massing in the streets of Cairo and Alexandria. But they’re also offering a new method for authoritarians to track those protesters and monitor their communications.

Bad certificate, encryption key management plagues organizations

posted onFebruary 10, 2011
by hitbsecnews

A majority of organizations surveyed by Venafi said that they had lost or were unable to account for digital certificates and encryption keys on their systems.

Some companies have more than 10,000 digital certificates deployed, and they are managing them manually on spreadsheets, according to a survey of 471 managers and C-level executives conducted by Venafi. Fifty-nine percent of respondents worked at organizations with more than 5,000 employees.