LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-28-2019, 07:27 PM   #1
halfpower
Member
 
Registered: Jul 2005
Distribution: Slackware
Posts: 241

Rep: Reputation: 31
Post Best practices for file encryption


I don't want to get bogged down managing long crypto keys. However, things like rainbow tables seem to make eight letter passwords really quite vulnerable.

Can eight letter passwords securely encrypt data (with GPG)? If it can, what algorithm do I need to use? Do I use a slow inefficient algorithm? Is the file size relevant?

Should I just do something like this to generate a passphrase:

Code:
cmd_output=`echo "$MyVeryLongSalt$MyPassword" | sha256sum`
key=${cmd_output:0:64}
 
Old 01-28-2019, 08:40 PM   #2
mralk3
Slackware Contributor
 
Registered: May 2015
Distribution: Slackware
Posts: 1,904

Rep: Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053
Best practices for file encryption

A common way to maintain passwords is to use a phrase you can remember or a sentence of words with punctuation. This is a great strategy to use in place of typical password practices that actually results in a much stronger password.

Most popular password managers for Linux will support storing these type of passwords and will allow access by use of one master password. When you unlock a password keyring, typically any password access will be copied to your clipboard where you can just copy and paste a passwords into the appropriate field. After so many seconds the clipboard contents get cleared.

Here is an example of a password manager that has all these features:

www.passwordstore.org
 
2 members found this post helpful.
Old 01-28-2019, 10:05 PM   #3
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,149

Rep: Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124Reputation: 4124
Cute - might have to move over to that.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
best security practices on file systems / directories sigint-ninja Linux - Newbie 2 07-08-2016 08:44 AM
[SOLVED] Non-system partition encryption versus container-file encryption of equal size Ulysses_ Linux - Security 13 07-17-2015 07:38 PM
Question about Samba and best practices for a Linux file server. Trimp Linux - Newbie 1 01-02-2010 03:08 AM
Dhcpd.conf file - Best practices? custangro Linux - Server 2 08-25-2008 01:58 PM
Best place to install applications / Best file practices Rustylinux Linux - General 2 03-26-2007 11:25 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration