But s?he won't be encrypting a piece of data: pieces will be encrypted and put in the file.
In The Codebreakers by David Kahn (ISBN 9780684831305), the author spends some time describing the Allied codebreaking effort during WW2. One way they decrypted a lot of messages was to guess at the content of the messages. For instance, an encrypted German message might contain "Mittwoch" if sent on Wednesday. This guessed content was known as a "crib".
By encrypting multiple pieces of information and storing them in a non-encrypted file, you're giving an attacker an awful lot of context for each piece. Which means coming up with cribs for those individual pieces will be a lot easier.
In practice, which of the following would be harder to break?
Dave's password for the fileserver is: <encrypted data>In the first instance, an attacker has a whole lot more to information to use, which improves their chances of a successful decryption.
In reply to Re^5: Storing credentials in a cross-platform binary file?
by missingthepoint
in thread Storing credentials in a cross-platform binary file?
by Anonymous Monk
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |