RE: Recognizing Encryption Type

["Adrian Floarea" <adrian.floarea () uti ro>]

Hi Majed,

In fact yours problem is very complex. Normally, if the encryption software
is made in a secure manner it will be very hard to find out what kind of
encryption is used (algorithm, size of encryption key i.e.). But in some
circumstances, let say for interoperability reasons, the type of algorithm
used in encryption process is very easy to find. For example, some PKI
implementation (PKCS#x standard or S/MIME). But, that is useless without the
encryption key. 

Regards,

Security Product Team Leader
Adrian Floarea, CISA
Information Security Department
IT&C Division, UTI Systems SA
Email: adrian.floarea () uti ro





-----Original Message-----
From: majed al marri [mailto:majed () nis etisalat ae] 
Sent: Tuesday, January 31, 2006 5:59 AM
To: security basics
Subject: Recognizing Encryption Type

Greetings everyone,

I was just wondering if there was a feasible way in order to obtain the
encryption type of a specific file. Could this be done using a third party
program that would inspect the running process of the encryptor as it is
working on the input file and after that examining the resulting output? If
not using this procedure, would the attacker be able to identify the
encryption type by reverse engineering the encryptor program?

Thank you and regards

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and the
case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------