Securely encrypt and decrypt files via PBE in Java (Jasypt seems insecure)

This post has been MOVED to StackOverflow due to lack of answers on Info Security:

https://stackoverflow.com/questions/60960802/securely-encrypt-and-decrypt-files-via-pbe-in-java-jasypt-seems-insecure

Considered solutions were Jasypt a… Continue reading Securely encrypt and decrypt files via PBE in Java (Jasypt seems insecure)

PDF User Password always give access to the Owner Password, even when encrypted with AES-128

I’ve been messing around with qpdf, and noticed something that seems huge: that a document’s Owner Password is essentially useless, as it can be easily unset, and therefore that only the User Password offers any real security for a PDF.

F… Continue reading PDF User Password always give access to the Owner Password, even when encrypted with AES-128