Encryption
13 items tagged with "encryption"
Anti-Patterns2
Rolling Your Own Crypto
Designing or implementing custom cryptographic algorithms or protocols instead of using vetted, standard libraries and primitives.
Disabled TLS Certificate Verification
Turning off certificate validation in HTTPS clients to silence errors, removing the protection TLS provides against man-in-the-middle attacks.
Regulations4
Payment Card Industry Data Security Standard
Information security standard for organizations that handle branded credit cards
Payment Card Industry Data Security Standard v4.0
Global security standard for organizations that store, process, or transmit payment card data, mandated by the major card brands.
EU GDPR International Data Transfer Rules (Chapter V)
GDPR rules restricting transfers of personal data outside the EU/EEA unless an adequate safeguard such as SCCs or adequacy applies.
FTC Safeguards Rule (Gramm-Leach-Bliley Act)
U.S. FTC rule requiring financial institutions to implement a documented information security program to protect customer data.
FAQs3
What is TLS and how does it secure connections?
Transport Layer Security (TLS) is the protocol that encrypts data in transit, providing confidentiality, integrity, and server authentication for HTTP...
What is the difference between symmetric and asymmetric encryption?
Symmetric encryption uses a single shared secret key to both encrypt and decrypt data; it is fast and ideal for bulk data, with AES being the common s...
What is encryption at rest versus encryption in transit?
Encryption at rest protects stored data on disks, databases, and backups so that someone who obtains the physical media or storage volume cannot read ...
Glossaries3
Encryption at Rest
Encryption at rest is the protection of stored data by encrypting it on disk or in a database, so that the data is unreadable without the correct decryption keys.
Encryption in Transit
Encryption in transit protects data as it travels across a network by encrypting the communication channel, preventing eavesdropping and tampering.
Asymmetric Encryption
Asymmetric encryption is a cryptographic method that uses a mathematically linked pair of keys, a public key and a private key, where data encrypted with one key can only be decrypted with the other.