What are the main differences between a covert timing channel and a covert storage channel?

I am trying to find the differences between a covert timing channel and a covert storage channel in terms of detectability, performance, features, and any other advantages and disadvantages.

Is there any resource that directly compares t… Continue reading What are the main differences between a covert timing channel and a covert storage channel?

openssl vs gpg for file based encryption? Pros vs cons for security?

I want to encrypt a tar archive and optionally a block file system (akin to DMG image). Does anyone know the pros vs cons of encrypting each with OpenSSL vs GPG?

I ask because some have stated that the OpenSSL command line is malleable a… Continue reading openssl vs gpg for file based encryption? Pros vs cons for security?

OCSP, CRLs, crlset – Revocation Delivery and Attacks

OCSP responses have a ‘nextUpdate’ field, which is the expected time for the new revocation update and that the current revocation can be considered valid. The revocations can be cached by the intermediate cert servers, which I have seen … Continue reading OCSP, CRLs, crlset – Revocation Delivery and Attacks