Menu

#84 Need to split data for high security items.

open
nobody
Security (5)
6
2008-06-05
2008-06-05
No

There needs to be the capability of splitting the data for high security objects (bank account numbers) across multiple data stores so that even if a cracker got access to say a backup file, and was able to decrypt it somehow he could not access the information.

Discussion

  • J. Scott Edwards

    Logged In: YES
    user_id=113600
    Originator: YES

    Here's an idea: for higher security data, instead of using a sequence table generated by an algorithm, generate the table completely with random data and store it on the external USB key. That way without the key there is no way to recreate the sequence table and there for the data should be almost impossible to decrypt.

    Will need to create a program that runs on the computer and gathers the random data over a period of time, perhaps reading the clock and using the microseconds. Use the generated values to fill in each block in the sequence table, if a value has already been used in one sequence table, try it in the next. Or better yet put it in a random block.

    How about taking the random microseconds, and then run it through the md5, sha1, sha256, sha512 in a random order?

     
  • J. Scott Edwards

    Logged In: YES
    user_id=113600
    Originator: YES

    Need to talk to James at the Software Freedom Law center, http://www.softwarefreedom.org/ when this is implemented to verify that no cryptographic software papers need to be filed with the government. See Feature Request #1994380 (which I closed).

     
  • J. Scott Edwards

    I believe that I have notified the government about this project and it is okay to proceed with the implementation of this feature. I have added a text file in the root directory of the project called TSU_NOTIFICATION that describes the process of notifying them.

     

Log in to post a comment.