• Breaking News

    Saturday, October 6, 2018

    Cryptography Perfect forward secrecy for static data?

    Cryptography Perfect forward secrecy for static data?


    Perfect forward secrecy for static data?

    Posted: 05 Oct 2018 01:25 PM PDT

    Hello,

    First, I am not an expert with encryption. At all. But I do want to design my project to be secure, so I ask here.

    Assume you have a directory of public keys. I can lookup your key, you can lookup mine without us talking to each other. This directory can store multiple, mostly permanent keys. (So you could have up to 5 or so public keys stored here) they keys could be any type of algorithm (I have flexibility with that, at this point)

    From what I gather, if the private key is cracked, all communication going backward and forward is compromised. So, I'd like to use "one time" encryption keys.

    However, this is not (always) over the internet. I want to use openssl, but with static data. There is no session. It's just encrypting a static file that I give someone.

    If the thumb drive were stolen, and the thief had access to immense computing power AND all the keys in the directory, and some how managed to steal other thumb drives they could read all of the messages. I'd like to prevent that.

    Is there a way to use perfect forward secrecy when there isn't a network? Anything I should look at?

    Also, is openssl and more or less secure than PGP? I prefer to use openssl, but could actually use both (if need be)

    Thanks in advance!

    submitted by /u/geezerblab
    [link] [comments]

    No comments:

    Post a Comment