cryptography - Revision history

Bs003025: /* Other Software, Cryptographic Libraries */

2012-10-26T15:47:13Z

‎Other Software, Cryptographic Libraries

93.58.106.114: /* Deniable cryptography */ old links are broken, new ones

2012-10-26T15:41:02Z

‎Deniable cryptography: old links are broken, new ones

93.58.106.114 at 20:41, 3 September 2011

2011-09-03T20:41:07Z

93.58.106.114: /* Attacks */

2011-08-29T04:02:30Z

‎Attacks

93.58.106.114: /* Other Software, Cryptographic Libraries */

2011-08-29T01:29:01Z

‎Other Software, Cryptographic Libraries

SecurityReview: Added Category:Encryption

2009-01-01T15:25:38Z

Added Category:Encryption

Rev 22: Reverted edits by 72.3.225.72 (Talk); changed back to last version by Beta M

2007-11-05T18:09:46Z

Reverted edits by 72.3.225.72 (Talk); changed back to last version by Beta M

72.3.225.72 at 09:52, 5 November 2007

2007-11-05T09:52:51Z

Beta M: anarchowikification

2007-09-09T06:43:47Z

anarchowikification

Rev 22: from infoAnarchy

2006-06-27T16:25:08Z

from infoAnarchy

Show changes

@@ Line 120: / Line 120: @@
 * [[OpenSSL]] | ([http://www.openssl.org homepage]) | very widespread library implementing [[SSL]]/[[TLS]] but it's libcrypto component is also used by many projects like [[OpenSSH]] and [[mixmaster]].
 * [http://botan.randombit.net/ Botan] | [http://www.gnu.org/directory/all/botan.html GNU Homepage] - ''Botan (formerly OpenCL) is a library of cryptographic algorithms. It includes a wide selection of block and stream ciphers, public key algorithms, hash functions, and message authentication codes, plus a high level filter-based interface. The home page has a list of supported algorithms.''
 * [http://ccrypt.sourceforge.net/ ccrypt] | [http://sourceforge.net/projects/ccrypt/ Sourceforge Page] | [http://www.gnu.org/directory/all/ccrypt.html GNU Page] - '''ccrypt''' is a utility for encrypting and decrypting files and streams. It was designed to replace the standard Unix 'crypt' utility, which is notorious for using a very weak encryption algorithm. use the [[AES]] algorithm.
 * [http://kremlinencrypt.com/crypto/algorithms.html Cryptographic Algorithms] - Listing of types

@@ Line 109: / Line 109: @@
 === Deniable cryptography ===
-Resisting also unpredictable attacks is possible, even when you will be enforced (by legal or physical coercion) to provide a valid password.<ref>[http://iq.org/~proff/rubberhose.org/current/src/doc/sergienko.html Greg S. Sergienko - Legal Coercion]</ref><ref>[http://iq.org/~proff/rubberhose.org/current/src/doc/beatings.txt Julian Assange - Physical Coercion]</ref> Deniable cryptography (a decoy based technique) allows to convincingly deny the fact that sensible data is being hidden. You only have to provide some expendable decoy data, that you would [[Plausible deniability|plausibly]] want to keep confidential, and reveal it to the attacker, claiming that this is all there is.<ref>[http://embeddedsw.net/MultiObfuscator_Cryptography_Home.html OpenPuff] Multilayered and deniable cryptography</ref>
+Resisting also unpredictable attacks is possible, even when you will be enforced (by legal or physical coercion) to provide a valid password.<ref>[http://embeddedsw.net/doc/legal_coercion.html Greg S. Sergienko - Legal Coercion]</ref><ref>[http://embeddedsw.net/doc/physical_coercion.txt Julian Assange - Physical Coercion]</ref> Deniable cryptography (a decoy based technique) allows to convincingly deny the fact that sensible data is being hidden. You only have to provide some expendable decoy data, that you would [[Plausible deniability|plausibly]] want to keep confidential, and reveal it to the attacker, claiming that this is all there is.
 ==== Cryptography and [[DRM]] ====

← Older revision		Revision as of 20:41, 3 September 2011
Line 145:		Line 145:

	* [http://www.computerworld.com ComputerWorld] - [http://www.computerworld.com/securitytopics/security/encryption/news/ Crypto News]		* [http://www.computerworld.com ComputerWorld] - [http://www.computerworld.com/securitytopics/security/encryption/news/ Crypto News]
		+
		+	==Article References==
		+	{{Reflist}}

	==See also==		==See also==

← Older revision		Revision as of 04:02, 29 August 2011
Line 106:		Line 106:

	A law protecting your encrypted material would seem like a good thing but it really is not, stifling security research and creating ridiculous content-protection laws ala the continuous extension of the [[Mickey Mouse Release Day]]. Most academic and consumer advocates are very against the [[DMCA]].		A law protecting your encrypted material would seem like a good thing but it really is not, stifling security research and creating ridiculous content-protection laws ala the continuous extension of the [[Mickey Mouse Release Day]]. Most academic and consumer advocates are very against the [[DMCA]].
		+
		+	=== Deniable cryptography ===
		+
		+	Resisting also unpredictable attacks is possible, even when you will be enforced (by legal or physical coercion) to provide a valid password.<ref>[http://iq.org/~proff/rubberhose.org/current/src/doc/sergienko.html Greg S. Sergienko - Legal Coercion]</ref><ref>[http://iq.org/~proff/rubberhose.org/current/src/doc/beatings.txt Julian Assange - Physical Coercion]</ref> Deniable cryptography (a decoy based technique) allows to convincingly deny the fact that sensible data is being hidden. You only have to provide some expendable decoy data, that you would [[Plausible deniability\|plausibly]] want to keep confidential, and reveal it to the attacker, claiming that this is all there is.<ref>[http://embeddedsw.net/MultiObfuscator_Cryptography_Home.html OpenPuff] Multilayered and deniable cryptography</ref>

	==== Cryptography and [[DRM]] ====		==== Cryptography and [[DRM]] ====

@@ Line 113: / Line 113: @@
 == Other Software, Cryptographic Libraries ==
 * [[OpenSSL]] | ([http://www.openssl.org homepage]) | very widespread library implementing [[SSL]]/[[TLS]] but it's libcrypto component is also used by many projects like [[OpenSSH]] and [[mixmaster]].
 * [http://botan.randombit.net/ Botan] | [http://www.gnu.org/directory/all/botan.html GNU Homepage] - ''Botan (formerly OpenCL) is a library of cryptographic algorithms. It includes a wide selection of block and stream ciphers, public key algorithms, hash functions, and message authentication codes, plus a high level filter-based interface. The home page has a list of supported algorithms.''

← Older revision		Revision as of 15:25, 1 January 2009
Line 155:		Line 155:

	{{infoanarchy\|Cryptography}}		{{infoanarchy\|Cryptography}}
		+	[[Category:Encryption]]

← Older revision		Revision as of 18:09, 5 November 2007
Line 1:		Line 1:
−	~~rocviv~~
	'''Cryptography''' is a way to encode the information, so that it can be decoded only by the intended person.		'''Cryptography''' is a way to encode the information, so that it can be decoded only by the intended person.

← Older revision		Revision as of 09:52, 5 November 2007
Line 1:		Line 1:
		+	rocviv
	'''Cryptography''' is a way to encode the information, so that it can be decoded only by the intended person.		'''Cryptography''' is a way to encode the information, so that it can be decoded only by the intended person.

@@ Line 1: / Line 1: @@
-See also: [[Security]] | [[Encrypting Your]]: [[Encrypting Your Mail|Mail]], [[Encrypting Your Files|Files]], [[Encrypting Your Network Links|Network Links]], [[Encrypting Your Chat|Chat]], [[Encrypting Your File Sharing|File Sharing]]
+'''Cryptography''' is a way to encode the information, so that it can be decoded only by the intended person.
-−
-[[AKA]]: Crypto
-−
-This is a [[Dangerous|dangerous]] topic.  It helps defeat [[surveillance]].
 The science of allowing a user to radically change [[information]] in order to conceal the content from third parties.  Like any system of security, this science includes the process of searching for its own weaknesses.  It is the substitution of [[Character Set|characters or symbols]] to create an [[Modify|altered]] message that can be reversed to its original form later.  Information which has been cryptographically processed is "encrypted".  Encryption is now very common, allowing [[user|users]] to [[trust]] their [[computer]] [[communication|communications]] that are, on the [[Internet]], very exposed.  There are [http://www.goingware.com/encryption/ many reasons] to use encryption.
@@ Line 15: / Line 11: @@
 * Encrypted signals may be detected but not understood.  Concealing the very existence of the cryptography is [[obscurity]].
-* Any attempt to discern the encrypted information is considered an [[Attack|attack]] (discussed below).
+* Any attempt to discern the encrypted information is considered an attack (discussed below).
 * The word, phrase, characters, or other authentication method that reverses the encryption is called the "[[key]]."  There can be multiple types of keys involved in this process.
-* [[Digital Signatures]] are not the same as cryptography but have similar applications (discussed below).
+* {{ll|Digital signatures}} are not the same as cryptography but have similar applications (discussed below).
 * Encryption is often combined with [[compression]].  Attacks on encryption often center upon searching for patterns in an encrypted documents and compression helps limit these.  Compression tries to make sure there is only one instance of a given type of data, thus reducing recognizable patterns.  Thus, finding possible clues about the key becomes much harder.
@@ Line 27: / Line 23: @@
 Strong cryptography often has legal restraints because of its history in military use.  For example, some places (like the USA) considered the export of cryptographic materials to be the same as the export of military weaponry (munitions), and laid heavy restriction on such activity.  In recent years, this has been relaxed due to foreign commercial competition.
-== [[Attacks]] ==
+== Attacks ==
-* '''[[Cryptography/Attacks|Available methods to reveal encrypted information]]'''
+* '''[[cryptography attacks|Available methods to reveal encrypted information]]'''
 === Computer methods to foil attacks ===
@@ Line 35: / Line 31: @@
 Here are three major computer-based methods used to foil attacks.  All have advantages and disadvantages.
-* [[Symmetric-Key Cryptosystem]]
+* [[symmetric-key cryptosystem|Symmetric-Key Cryptosystem]]
-* [[Public-Key Cryptosystem]]
+* [[public-key cryptosystem|Public-Key Cryptosystem]]
-* [[One-Time Pad Cryptosystem]]
+* [[one-time pad cryptosystem|One-Time Pad Cryptosystem]]
 === Libraries ===
@@ Line 63: / Line 59: @@
 One must weight his choice of algorithm based on his performance need and likely attack, however the strongest choices like AES have very fast implementations both in hardware and software.
-[[Public-Key Cryptosystem|Public-key]] [[algorithm|algorithms]] include:
+Public-key [[algorithm|algorithms]] include:
 * [[RSA]] Used for encryption and signature
@@ Line 70: / Line 66: @@
 * [[ECC]]
-[[Digital Signatures]] are used to prove [[authentication|authenticity]] (you get a strong certitude that the one who generated the message also have the secret key) and [[integrity]] (that nothing has been changed in transmission).
+{{ll|Digital signatures}} are used to prove [[authentication|authenticity]] (you get a strong certitude that the one who generated the message also have the secret key) and [[integrity]] (that nothing has been changed in transmission).
 === Key size ===
@@ Line 76: / Line 72: @@
 Different libraries allow for varying levels of [[complexity]], affecting speed and security.  A small bit size can make an algorithm faster but more easily broken.  A large [[bit]] size can make it slow but much more difficult to break.  Also, the higher the bit size, the larger the processed file size will be so a balance is often chosen between strength and convenience.
-Note that [[key]]s that are twice as large in number are not merely twice as difficult to crack.  128-bit keys, for instance, are literally one trillion, trillion (1^10^10) times harder to [[crack]] with [[Brute Force]] than 40-bit keys.
+Note that [[key (computing)|keys]] that are twice as large in number are not merely twice as difficult to crack.  128-bit keys, for instance, are literally one trillion, trillion (1^10^10) times harder to [[crack]] with [[Brute Force]] than 40-bit keys.
-==== [[Symmetric-Key Cryptosystem]] key size ====
+==== Symmetric-Key Cryptosystem key size ====
 : 128-bit keys are usually sufficient for RC4 and 3DES and are commonly used in Web transactions.  Despite 128 bit being very adequate, many Symmetric-Key Cryptosystems now use 256-bit keys by default, regardless of algorithm.
@@ Line 84: / Line 80: @@
 : Many 40-bit RC4 and 3DES keys must be avoided as they are not secure.  They can be broken by a dedicated [[Brute Force]] [[attack]] over the course of a few weeks with a desktop computer.
-==== [[Public-Key Cryptosystem]] key size ====
+==== Public-Key Cryptosystem key size ====
 : 1024-bit [[RSA]] keys approximately as difficult to crack as a symmetric 128-bit key. [[ECC]] keys can be as secure and considerably shorter than RSA keys. Some public-key programs are available that use exceedingly large key sizes as high as 8192 or 16384 but are, as mentioned above, inconvenient, making the encrypted transmission unnecessarily large.
@@ Line 131: / Line 127: @@
 == Related ==
-* [[Privacy]] | [[Identity]]
+* [[privacy]] | [[identity]]
-* [[Key Pair]] | [[Public key]] | [[Private key]] | [[Certificate]]
+* [[key pair]] | [[public key]] | [[private key]] | [[certificate]]
-* [[Signature]] | [[Fingerprint]]
+* [[signature (computing)]] | [[fingerprint (computing)]]
-* [[Password]]
+* [[password]]
-* [[Obscurity]] | [[Steganography]]
+* [[obscurity]] | [[steganography]]
-* [[Algorithm]] | [[Programming]]
+* [[file wipe]]
-* [[File Wipe]]
-* [[Cypherpunk]]
+* [[cypherpunk]]
-−
-----
 == News ==
 * [http://www.computerworld.com ComputerWorld] - [http://www.computerworld.com/securitytopics/security/encryption/news/ Crypto News]
 == Links ==