Question

Encryption Homework Exercise

• For each technology identify the following:

• What type/form of encryption is used?

• What algorithms are used?

• What impact does encryption have on the end user/ on the system?

ipad
iphone
Android
Windows
Instant Messages
Azure SQL Database
SAP
Your favorite hardware
Your favorite software/app

• Identify form(s) of encryption that are not considered secure and indicate why they are not considered secure.

Answer 1

ENCRYPTION FORM IN DIFFERENT TECHNOLOGIES

ipad-iphone

iOS and iPadOS devices use a file encryption method which is called as Data Protection. In the macOS computers the data is protected with a volume encryption technology called FileVault. The algorithm is Advanced Encryption Standard(AES). Both the models root their key management hierarchies in the Silicon of the Secure Enclave, and both models leverage a dedicated Advanced Encryption Standard(AES) engine to support line-speed encryption and to ensure long-lived encryption keys never need to be supplied to the kernel OS or Central Processing Unit.

Android

The encryption mechanisms used are File-based encryption and Full-disk encryption. Android full-disk encryption is based on dm-crypt, which is a kernel feature that works at the block device layer. The encryption algorithm is 128 Advanced Encryption Standard (AES) with cipher-block chaining (CBC) and ESSIV:SHA256.

Windows

The encryption mechanism used in Microsoft Windows is FileSystem-level-Encryption using Encrypting File System(EFS) of NTFS 3.0. This technology enables the files to encrypted transparently in order to protect confidential data from attackers with physical access to the computer. Windows uses a ix of algorithms in order to overcome the defects in usung a single algorithm. The algorithms used are AES, SHA, ECC, DES.

Azure

The encryption mechanism used in Azure is Encryption at Rest. It uses symmetric encryption to encrypt and decrypt large amounts of data quickly. The algorithm used is AES256. In this mechanism, symmetric encryption key is used to encrypt data as it is written to the storage medium. The same key is used for the decryption. The data may be partitioned and different keys are used for different partitions. Keys are stored in a secure location. There will be server side encryption and client side encryption.

SAP

In SAP the data is protected by hashing and encryption. The hashing algorithms used are SSHA, SHA256, SHA 384, SHA512, PBKDF2_SHA1. The encryption algorithms used are DES3/CBC, AES128/CBC, AES192/CBC, AES256/CBC

Instant Messaging

The messages send through are chats are encrypted and decrypted. The algorithms used are AES, RSA, CAST.

Not secured encryption methods

• MD5

• SHA1

• DES/3DES

Favourite Hardware – Apple

Favourite Software - iOS