Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

-2
votes
0answers
23 views

Can DoxBox ( or FreeOTFE Encfs Truecrypt ) prompt and mount an encrypted file volume or encrypted disk partition before Windows boots to its GUI? [closed]

I would like to Encrypt a secondary drive (NOT the OS/boot drive) and have it mounted and drive letter mapped etc, before Windows 7 gui boots up. This is because I will have mapped some user data onto ...
2
votes
1answer
25 views

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to ...
0
votes
0answers
25 views

Debian encrypted home directory setup fails

Here's the problem: # ecryptfs-migrate-home -u <user> INFO: Checking disk space, this may take a few moments. Please be patient. INFO: Checking for open files in /home/<user> Enter ...
1
vote
1answer
22 views

ZFS, mdconfig, GELI and getting my head around

I want to create an encrypted virtual disk but I am struggling with understanding some basic concepts. Please correct me if any of these statements are wrong: I need a block device that geli can ...
-1
votes
1answer
31 views

Linux private file encryption

I need to store and secure clients files. I would like to encrypt files and not being able to open it. Only file owner can open his file. I think I’ll have to generate private key for each customer. ...
2
votes
0answers
49 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
0
votes
0answers
21 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
0answers
16 views

How do I edit a signed or encrypted SMIME message to include a footer?

Is there any way to edit a signed/encrypted SMIME message so that there is a legal disclaimer on the message? I'm thinking about the MIME multipart email directive may allow for this.
0
votes
2answers
58 views

Decrypt a Header in Apache (HTTPD)

I've been asked to have a look at whether it's possible to decrypt a header during the processing of the request. The specific use case is to respond to the decrypted contents of the header by ...
0
votes
1answer
55 views

Recomendations for this mail server setup?

EMAIL SERVER SETUP Hey, its my first time using serverfault but I hope the community can help. I am trying to build a secure email system using Linux, Postfix, Dovecot and MySQL. I have read on ...
-2
votes
1answer
78 views

Generating public/private credentials for MS Outlook email encryption

An app running on a CentOS 7 web server needs to receive encrypted emails sent from users of MS Outlook. Can someone please provide explicit instructions as to how I can generate or procure all of ...
-2
votes
1answer
32 views

How to verify whether randomness was written to a device and what exactly has been written?

I am preparing a device with shred to use it later on encrypted with dm-crypt/cryptsetup/luks. How can I check the device before and after using shred or e.g openssl/dd with /dev/urandom to be sure ...
0
votes
0answers
36 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
-2
votes
1answer
81 views

mkpasswd on Centos 7 does not support -m flag [duplicate]

I cannot find how to install grub-crypt either. How can I generate SHA512 pass hashes on Centos 7? Edit: I was actually trying to look up how to generate hashes with an adjustable number of rounds. ...
0
votes
0answers
18 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
1answer
73 views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
1answer
81 views

Shibboleth SP - Signing and Encryption Key

I have a Shibboleth SP installed on Server 2012 R2. I tried to submit the metadata to be imported into the IDP and was told that without having the signing or encryption key, they won't be able to ...
2
votes
0answers
53 views

Decrypt All traffic by wireshark [closed]

Ok I can decrypt a specified client connected to wifi by deauthing it and getting the handshake using wireshark. In fact after wireshark captures the EAPOL messages it starts to decrypt the traffic. ...
2
votes
2answers
106 views

How can I encrypt my SSD but still boot unattended (linux)? [closed]

I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
0
votes
0answers
30 views

Preseeding with RAID1 Encrypted LVM

I would like to preseed a debian wheezy system with Encrypted RAID1 LVM. I've done some google searching, seen others asking the same question, but have not found any answers. I have successful ...
1
vote
0answers
59 views

Remmina TLS, NLA works, but high encryption fails

Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working. Questions: 1. Why setting high encryption prevents connectivity? 2. What's ...
1
vote
1answer
78 views

After resizing an encrypted LVM device, the machine takes 4 hours to boot

I have a host, under Debian Wheezy. The virtualisation software is qemu/KVM, and uses LVM Volumes as disks for the guests. The guests all have been installed using debian wheezy, full-disk ...
1
vote
0answers
79 views

Debian KVM Host, Debian guests : where full-disk encryption should be done?

I have a host under Debian Wheezy, running qemu/KVM. I want to have all my guests fully-encrypted. I can see to possibilities : - Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
2
votes
2answers
660 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
0
votes
0answers
54 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
8
votes
2answers
1k views

Should I encrypt OS disk with BitLocker for HIPAA compliance

I am looking into hosting a HIPAA compliant web application on Azure VM's. For the database, right now I am leaning towards using a VM with SQL 2014 Standard Edition. Since TDE is not available with ...
0
votes
1answer
117 views

How do I encrypt large (20Gb+) compressed files from a backup?

I want to encrypt regularly created and compressed backup files from OpenVZ containers, before they leave the server and get copied to the providers backup space via ftp. They vary in size, from 6 to ...
0
votes
1answer
66 views

Sun T2/Niagara Hardware Crypto Acceleration with Debian Linux?

I wanted to use an older T2 machine as a webserver for SSL heavy websites. With Solaris, there is the crypto acceleration available which would make sense for SSL. Now I am wondering if this crypto ...
1
vote
2answers
65 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
1
vote
0answers
44 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
0
votes
1answer
21 views

Using samba password to encrypt partition

I have a local server with encrypted partition just for data, which I want to serve through samba server. I want to avoid re-entering password on each server start (e.g. on electricity failure) for ...
-4
votes
4answers
83 views

Blocking another Win 2008 R2 admin from accesing some important folders [closed]

I have sold half my dedicated server to somebody but I dont want them accessing my web hosted Plesk files for my Wordpress website. As some of them are custom and confidential. I gave them local ...
0
votes
0answers
86 views

Encrypting SVN Store with ecryptfs

I previously had TrueCrypt setup to automount my SVN repos on the Subversion server at boot with an automated network script that used a keyfile on a protected share to mount the volume. Now that ...
-1
votes
1answer
40 views

2008R2 Server to Server Encryption [closed]

What is the best way to encrypt data between internal servers? We have a few homegrown apps that run on 2008R2 servers that transmit sensitive data. Would an IPSec connection between the two servers ...
0
votes
0answers
136 views

Do I have to somehow enable AES-NI on Nginx?

I've got CPU With AES-NI, I would like to use this function with nginx. ssl_engine aesni; - this parameter was used before openssl 1.0.0, but now, openssl is bundled with aesni support. And this ...
1
vote
1answer
84 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
2
votes
1answer
174 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
-6
votes
1answer
46 views

encryption of fiber communications [closed]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
1
vote
1answer
44 views

encrypted (luks) partition had some damage - any chance?

I was trying to run Debian installer on top of an already luks-encrypted partition (I tried to do use cryptsetup in the console). I don't remember ever saying "yes, destroy" data, but what I see now, ...
0
votes
2answers
336 views

How to disable Null and Weak Ciphers on 389-Directory-Server

I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636. I tried to disable them by shutting down DS, ...
0
votes
1answer
27 views

How to re-create the symmetric key on Amazon RDS

We have some column encrypted by symmetric key. Now we want to upload our database to Amazon RDS (SQL Server). Can we do that? If yes, how?
0
votes
3answers
120 views

Encrypt communications on local network

I'm developing a web application that runs on a server local to the same network as the client- basically, instead of a central web server, each customer site will have its own server hosted on the ...
0
votes
1answer
196 views

Is OTR required for XMPP message encryption? [closed]

I use XMPP for sending instant messages from a bot in a server to a laptop client. I have full control of both the clients (bot and laptop client) and they are both connected to the same server which ...
1
vote
0answers
38 views

Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)

This question does not rely on time... so it's not about keeping data on tape or anything similar. I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
2
votes
1answer
308 views

How can I encrypt 2008 Server Running under esxi

I have a need to run multiple 2008 R2 VMs under the free esxi. Storage will be local to the host. As I understand it, BitLocker is not a supported option in a VM environment from either Microsoft or ...
-2
votes
1answer
215 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
1
vote
1answer
449 views

Encrypt Files Before Sending To Bittorrent Sync

Is there a way to encrypt files before being sent to Bittorrent sync, either via a plugin, or by encrypting the files first? Also do you trust Bittorrent Sync's encryption?
0
votes
1answer
253 views

Problems saving encrypted emails from Outlook into Document Management System

We use a commercially available Document Management System (DMS) which integrates with Microsoft Outlook 2010. This allows users to save important emails in the DMS so that their colleagues have ...
0
votes
2answers
88 views

How to recover key after using LuksRemovekey?

I have an encrypted partition on /dev/sda5, yesterday I use cryptsetup to remove the encryption using cryptsetup luksRemovekey /dev/sda5, but when I restart I have to provide a passphrase for ...
0
votes
0answers
141 views

SQL Server 2012 : recover lost symmetrical encryption key or just disable encryption

We currently face a huge problem and we hope you can help us. We have two systems (Dynamics CRM 2013) on two different servers, both use SQL Server 2012. One on our dev server the other on our live ...