Validation of Forensic Tools and Software: A Quick Guide for the Digital Forensic Examiner. University of Huddersfield : EnCase computer forensics the official EnCE : EnCase certified examiner study guide, second edition / DFI News | Digital Forensic Investigator. Application. Security. Database Encryption KeePass database files are encrypted. KeePass encrypts the complete database, i.e. not only your passwords. The user names, notes, etc. are encrypted, too. Databases are encrypted using one of the following block ciphers: These algorithms are well-known, analyzed thoroughly and considered to be very secure (see [1] for comments by the NIST on AES for example). AES e.g. became effective as a U.S. Federal government standard and is approved by the National Security Agency (NSA) for top secret information. KeePass 2.x Only KeePass 2.x doesn't support Twofish, but additional encryption algorithms can be provided by plugins.
The block ciphers are used in the CBC (cipher-block chaining) block cipher mode. For both algorithms, a 128-bit initialization vector (IV) is generated randomly each time you save the database. Hashing and Key Derivation In order to generate the 256-bit key for the block ciphers, the Secure Hash Algorithm SHA-256 is used. Random Number Generation Self-Tests. Steganography Detection.