encryption

Encryption: Whose keys are they, anyway?

September 15, 2015

Over the past year, encryption has been showing up in a number of unlikely places. It started when Google executive chairman Eric Schmidt proclaimed that encrypting everything …

Tor security improves as .onion becomes a special-use domain name

September 14, 2015

The .onion domain has been officially designated by the Internet Assigned Numbers Authority (IANA) as a special-use domain name. The move, initiated by the Internet …

63% in favor of encryption backdoors to respond to national security threats

September 11, 2015

Vormetric did a survey on how Americans view “backdoor” access by government entities to the encrypted data of private businesses. Ninety-one percent recognized …

Encryptr: Open source cloud based password manager

September 10, 2015

Encryptr is based on the Crypton JavaScript framework. The whole idea behind the Crypton concept is to enable developers to store data on the remote server in such way that …

End-to-end encryption is key for securing the Internet of Things

September 7, 2015

The Internet of Things (IoT) is one of the hottest buzzwords these days. It seems like almost everything is being connected, including cars, streetlights, oil rigs, wearables …

Major browser makers synchronize end of support for RC4

September 2, 2015

Mozilla, Google and Microsoft have come to an agreement: support for the increasingly vulnerable RC4 cryptographic cypher in the companies’ browsers will end in early …

How Linux Foundation sysadmins secure their workstations

August 31, 2015

Sysadmins around the world have been provided with another helpful guide on how to go about hardening their Linux workstations, as Konstantin Ryabitsev, Director of …

OpenSSH 7.0 deprecates weak, legacy and unsafe cryptography

August 12, 2015

OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks. Additionally, it provides secure tunneling …

Severe deserialization vulnerabilities found in Android and third-party Android SDKs

August 11, 2015

Closely behind the discoveries of the Stagefright flaw, the hole in Android’s mediaserver service that can put devices into a coma, and the Certifi-gate bug, comes that …

NIST releases SHA-3 cryptographic hash standard

August 6, 2015

The National Institute of Standards and Technology (NIST) has released the final version of its “Secure Hash Algorithm-3” standard, a next-generation tool for …

Open source tool for deploying SSL public key pinning in iOS, OS X apps

August 4, 2015

At Black Hat USA 2015, Data Theorem and Yahoo! will be unveiling TrustKit, a new, open source security toolkit that helps developers easily include complex mobile security …

Quantum-powered RNG supplies pure entropy to crypto systems