Re: Why does EFS uses two ways of encryption?

From: Felix Tiede (tiede_at_pc-tiede.de)
Date: 08/31/04


Date: Tue, 31 Aug 2004 15:30:11 +0200


Pamela wrote:
> Hi,
>
>
> EFS uses an asymetric encryption but it also uses an FEK which is symetric
> encryption.
> In fact the FEK is encrypted by the asymetric encryption.
>
> Wouldn't it be possible that the asymetric method is directly used to
> encrypt the file?
>
> thx
>
>
> Pamela
>
>
AFAIK asymmetric encryption/decryption is slower than the symmetric method.
Because of that many encryption systems use a temporary session key to
symmetrically encrypt data and then use the asymmetric key to encrypt the
session key.

So it *would* be possible to encrypt a file with an asymmetric method, but
it would cost more CPU time.

Greetings,
Felix






Relevant Pages

  • Why does EFS uses two ways of encryption?
    ... EFS uses an asymetric encryption but it also uses an FEK which is symetric ... In fact the FEK is encrypted by the asymetric encryption. ...
    (alt.computer.security)
  • Re: Encrypt and Decrypt with a password
    ... want to use asymetric encryption (two "passwords": ... one for decryption) or symetric encryption (one password to encryption and ... you can use the TripleDES or the RijndaelManaged class for symetric ... RSA Class for asymetric encryption. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: EFS and DRA. Admin unable to decrypt
    ... >encryption key to encrypt and decrypt data. ... The FEK is encrypted with the user's ... >public key, and the encrypted FEK is then stored with the ... >So corect me if im wrong, being symmetric Encryption the ...
    (microsoft.public.windowsxp.security_admin)
  • [PATCH] eCryptfs: Dont encrypt file key with filename key
    ... eCryptfs has file encryption keys, ... and filename encryption keys (FNEK). ... The per-file FEK is ...
    (Linux-Kernel)
  • Re: EFS and DRA. Admin unable to decrypt
    ... encryption key to encrypt and decrypt data. ... The FEK is encrypted with the user's ... then decrypts the data by using the FEK ... So corect me if im wrong, being symmetric Encryption the ...
    (microsoft.public.windowsxp.security_admin)