Encryption is the process of taking some information (the plain text), and transforming it (usually with a cypher and a key) so that it is secure. Assuming a sufficiently strong cypher and key have been chosen, this cyphertext can be shared widely, without the information being compromised. The ...
3
votes
2answers
70 views
Are there huge drawbacks to using an excel 2010 document for password management?
At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
-1
votes
0answers
33 views
What's recommended cell-phone communication encryption software? [closed]
I'm looking for software that will provide secure cell phone communication. It should target mostly iPhone devices, but Android/Blackberry support is a plus.
It's a must that there are no 3rd party ...
-3
votes
0answers
40 views
TLS_RSA_WITH_AES_128_CBC_SHA hotfix 192447 for Server 2003 (kb 948963) - MIA [closed]
TLS_RSA_WITH_AES_128_CBC_SHA hotfix 192447 for Server 2003 (kb 948963) - MIA
I want to add TLS_RSA_WITH_AES_128_CBC_SHA cipher suite to Windows server 2003 x86 (actually XP x86)
That Article ...
2
votes
1answer
46 views
Do I need to back up the SQL Server Encryption Password and Symmetric Key?
I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN:
Create the Master Key with a strong password.
Create a ...
0
votes
1answer
58 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
1
vote
0answers
26 views
Linux LTO-4/5 Drive Encryption
For a number of reasons I have been trying to find a way to encrypt my backup tapes. I'm currently running Bacula for my backups and it's support for Drive based encryption is I have to call a script ...
6
votes
1answer
108 views
Approaches for Linux server disk encryption
What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
2
votes
1answer
30 views
practical document encryption in shared environment
I can't seem to find a good, practical way to encrypt documents on a shared drive...
This is a samba share on centos using ADS auth. The primary doc format will be PDF.
Is there a good on-thy-fly ...
1
vote
1answer
45 views
Configure Apache2.2 as http to https encrypter/converter
I am using Apache 2.2 on SUSE 10 with mod_ssl.
My problem:
I want to connect a client(supporting only http) to a Server(supporting only HTTPS).
So I thought of deploying Apache as a proxy to convert ...
1
vote
1answer
32 views
fully encrypted MediaWiki base
Is it possible to completely encrypt a MediaWiki installation?
I'm not looking for a way to finely control access rights or have some encrypted articles or even just parts of articles encrypted.
...
1
vote
3answers
95 views
Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?
Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
0
votes
0answers
61 views
Cryptsetup device /dev/md0 is not a valid luks device
After reinstallation of my OS, I decide to manually assemble a RAID6 array.
# mdadm --assemble --auto=yes --scan=auto /dev/md0
I don't exactly remember a message but program mdadm return a resizing ...
0
votes
3answers
108 views
HTTPS Proxy which answers CONNECT with own certificate
I'm configuring a DMZ which has the following Scheme:
Internet - Server A - Security Appliance - Server B - Intranet
In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
0
votes
0answers
38 views
How to encrypt a section within web.config using aspnet_regiis -pe or -pef
I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...).
Having repeated failures with all types of syntax changes, so perhaps better to post ...
-1
votes
1answer
44 views
Filesystem encryption settings during install?
I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID.
Should I encrypt the drive partition, the software RAID device, or
both?
Should I ...
1
vote
1answer
48 views
ZFS: can per-user encrypted filesystems be deduplicated on block-level?
Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted?
What ...
0
votes
2answers
70 views
Encrypt each users home Centos 6 and access from windows?
I'm trying to set up a shared drive for my team using Centos. The team might have root privileges through sudo on this system.
The over all goal is under /home/ have each member dir be encrypted so ...
0
votes
3answers
100 views
Does this hard disk drive support hardware-based full disk encryption? What are some effective interrogation tactics?
I am trying to determine if a particular hard disk drive supports hardware-based full disk encryption. I know I can use the model number and check the manufacturer's website, but that is only feasible ...
0
votes
1answer
37 views
EncFS and automated back-up
When using EncFS to encrypt a file on a VPS, will the file be stored encrypted or unencrypted in the automated back-ups taken by the host? (Assuming that the file is unlocked when the back-up is ...
1
vote
0answers
46 views
DB encryption for Django web app without storing key on server
We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
1
vote
4answers
124 views
Encryption between a LAN switch and an end device
What standards/protocols/products exist that support encryption of all data sent between a device (e.g. a workstation) and a LAN switch? Something like WPA for WLAN.
0
votes
1answer
75 views
Variable size encrypted container
Is there an application similar to TrueCrypt, but the one that can make variable size containers opposed to fixed-size or only-growing-to-certain-amount containers which can be made by TrueCrypt?
I ...
0
votes
0answers
31 views
Detect corrupted LV/partition encryption type and fix and mount
Due to several recent power outages and a failed UPS, an encrypted logical volume is no longer accessible. It has been a while but I'm sure the encryption was done by using Ubuntu's installer, so it ...
-1
votes
4answers
60 views
File and Database encryption
Just curious what do you guys use for file or database encryption? Any good programs out there or techniques employed for securing IT personal information? Main reason is the company I work for has ...
2
votes
3answers
424 views
How to create an SHA-512 hashed password for shadow?
The previous SF questions I've seen have lead to answers that produce MD5 hashed password.
Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
7
votes
1answer
103 views
State of hardware-assisted disk encryption in Linux
I use dm-crypt to encrypt partitions. I am building a small office server from consumer (or pro-sumer) category hardware. It made me wonder, hardware-assisted encryption is a notion in the air for ...
1
vote
1answer
20 views
How to provide encryption across file, folder, and email for small company
I'm the 1/2 time IT person for a small company. We run a MS environment using a Server 2003 Domain Controller, MS Storage Server 2003, and Exchange 2003.
It finally occurred to them that I as an ...
1
vote
1answer
33 views
Adding column-level encryption after-the-fact in SQL Server 2008?
I am writing a web-app that will, at some point in the future, need to perform column-level encryption of a portion of the data it stores to our database running on SQL Server 2008 Express.
It would ...
4
votes
2answers
109 views
I have a keypair. How do I determine the key length?
Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
1
vote
1answer
96 views
Encryption on Solaris (using Keystore)
I am trying do draft up a secure way to encrypt (on the fly, invoking it from an app) and decrypt sensible information (credit cards) using AES-256.
The target platform is:
cat /etc/release
...
0
votes
1answer
43 views
Authenticate user(group) and encrypt port 8078 on a server using SSH2 keys?
I want to encrypt and authenticate port 8078 on a server running Jenkins using SSH keys (I'll pass our the public or private key as needed), and keep 8078 from being accessed by anything but SSH. I ...
1
vote
1answer
88 views
RHEL package containing JCE (Java) Unlimited Strength Jurisdiction Policy Files to support higher level encryption?
Are there packages for RHEL and distros based on it (CentOS, Scientific Linux, etc.) that contain the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files so that higher ...
0
votes
1answer
24 views
EFS encrypted files cannot be opened, even with the right key
I created a folder on my Win7 Pro machine, set it to encrypt contents to protect data. Then I opened MMC, added the Certificates snap-in for "my user account", expanded Certificates - Currrent User > ...
1
vote
1answer
89 views
Can I encrypt a single folder in Windows Server 2008 R2 with BitLocker?
Using Windows Server 2008 R2, is there a way to encrypt a folder, not the whole disk using Bitlocker?
1
vote
1answer
60 views
GELI / ELI at FreeBSD - changing passphrase
How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way?
I've looked in the man ...
0
votes
0answers
71 views
Encrypting/Decrypting MPEG-2 Transport Stream in realtime
I have to send unicast mpeg2ts stream from one datacenter to another (dc1 to dc2). The output I get from encoder bank in dc1 is not encrypted and I need to encrypt it before sending it to dc2. At dc2 ...
2
votes
3answers
156 views
How do I configure an SSL only site, in a way that doesn't affect browser connection limits
The Yahoo Developer Best Practices recommend using multiple hosts (host1.company.com, host2.company.com, etc..) as a way of overcoming a webbrowsers built in limitation of only issuing two concurrent ...
3
votes
1answer
45 views
verify integrity of encrypted tar
I'm using tar along with openssl to create encrypted tar archives of some large directories (about 30GB). What is the possibility of corruption in this process, and how would I verify that the ...
1
vote
1answer
102 views
Apache serving files from an encrypted drive returns a 403 forbidden error
I create a sparsebundle and mount it as a virtual drive for each development project I work on. This works great until I needed to add encryption to one of the projects for added security of my ...
0
votes
1answer
42 views
Encrypting files within a container on a virtual linux system without kernel modules
I have a virtualized linux system (vserver) that gives me all root privileges except manipulation of kernel modules. Now I wish to have a solution similar to TrueCrypt where I can create an encrypted ...
0
votes
2answers
132 views
md-RAID5 - How fast should it be or where is the bottleneck?
I set up a new server with a LUKS encrypted RAID5. On the former server, the bottleneck was definitely the CPU, as it was a 7y old single core and the load went up to 100%.
Now it is different. I ...
7
votes
2answers
303 views
How to create a randomly keyed, encrypted swap partition, referring to it “by-uuid”, on Debian?
It is sensible that if you have any sort of block device encryption implemented on your GNU/Linux system, to encrypt your swap partition too, as any decrypted data may be written in cleartext at any ...
1
vote
2answers
148 views
How much performance cost for hdd encryption on NAS?
I recently purchased a NAS and it offers encryption. It is a QNAP TS459 Pro II.
How much will performance be impacted if I choose to encrypt the data on the device?
2
votes
1answer
72 views
How to prevent users from copying or printing files?
The head of my company is concerned about data leak. In order to strengthen the protection of sensitive data I have to limit ability to copy and print certain files from the employess notebooks.
I ...
-2
votes
1answer
49 views
Simplest Secure Proxy Package For Deployment Without Root Access [closed]
I've been looking for a proxy server package to run on a shared hosting account with a dedicated IP that supports socks, http. The data sent between client and proxy needs to be completely encrypted, ...
0
votes
2answers
60 views
Encrypting an ODBC connection
Situation:
We have a SQL Server 2008 R2 database sitting in a data centre
We would like to allow analysts to connect to the database and query the data using desktop based tools (e.g. Tableau) via ...
2
votes
2answers
49 views
Decrypting a Linux/Ubuntu encryptedfs?
I have an image of a linux machine with an encryptedfs (/home/.private, etc). Is it possible to export the file structure and mount it from a different linux box/VM?
1
vote
4answers
94 views
Encrypting a link between two data outlets on the same LAN
I have two systems in a rack that are directly linked together with a 0.25m Cat 5e cable so they can exchange data via NFS. As you may know, plain NFS does not inherently support encryption or user ...
0
votes
1answer
47 views
Using Encrypting File System on SQL Server data files
I have SQL Server 2008 standard edition running on Windows Server 2003.
I need to encrypt the databases.
One obvious option is to upgrade to enterprise edition and use TDE.
However, this might not ...
2
votes
1answer
84 views
How can I cache a Subversion password on a server, without storing it in unencrypted form?
My Subversion server only provides access via HTTPS; support for svn+ssh has been dropped because we wanted to avoid creating system users on that machine just for SVN access. Now I'm trying to ...
