encrypting data

how to encrypt stored data in full volume

full disk and partition/volume encryption can be with bitlocker, filevault

where can you store data at rest

ssd, hard drive, usb drive, cloud storage is where the data at rest can be stored

how to encrypt a file

encrypting file system (efs), third party utilities

how to encrypt databases

transparent encryption with a symmetric key

how to encrypt individual columns in a database

record level encryption that uses separate symmetric keys for each column

how to encrypt data traversing through the network

encrypt the application

browsers can communicate using https

how do vpns work

encrypts all data transmitted over the network regardless of the application

client-based vpn using ssl/tls

site to site vpn using ip sec

both sides must be using the same what to have a successful encryption and decryption

encryption formula that both sides decide on early on

are cryptographic processes well known

yes the algorithm is usually a known entity but we dont know the key and without that we cant decrypt

like how we know how a door lock works but without the key we cant open the door

the larger the key the more or less secure something is

more

prevents brute force attacks

what size symmetric keys are common

128 bits and can get igger

characteristics of asymmetric keys

complex calculations of prime numbers

larger keys than symmetric encryption

common to see key lengths of 3072 bits or larger