Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

1
vote
0answers
13 views

Can't read old UFS1 superblock using GELI (Blowfish-CBC) on FreeBSD

Trying to add encrypted partition on FreeBSD10.3 GELI/Blowfish-CBC. AES on / and /swap works fine, but I can't add an additional encrypted partition using Blowfish. Here is the way I did it: # mount -...
0
votes
0answers
11 views

Ipsec with public encryption domain?

my partner require a public encryption domain for an ipsec tunnel. With this configuration: IP address: A.B.C.7/32 Encryption domain: A.B.C.128/25 My question is: if all my traffic is tunneled ...
0
votes
0answers
17 views

Secure Storage Requirements in the Cloud [closed]

I'm trying to understand some low-level security requirements for a cloud based secure storage solution. Specifically, I'm interested in the following: What mode of encryption (and integrity ...
0
votes
1answer
18 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
1
vote
2answers
27 views

Securing Mail From Admins - Office 365

I'm trying to determine the best solution that allows me to assure our CEO that his Office 365 mailbox cannot be read by anyone, including myself, an admin. Obviously the mailbox is already locked ...
6
votes
1answer
59 views

Can I recover a bitlocker encrypted drive offline?

Windows 10, server 2012 R2 domain I'm confused about the options for recovering a bitlocker encrypted drive offline. Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
1
vote
0answers
11 views

What is the correct way to secure a user directory with EFS not in a domain network?

Logged in as an administrator on a Windows 10 machine. cipher /E /A /S:C:\Users\MYUSER or cipher /E C:\Users\MYUSER I've read and been told that the bottom one is the correct way. End result: ...
0
votes
0answers
49 views

ldaps on Debian Jessie with let's encrypt certificate

I'm already struggling for a while to set up an LDAP-Server on debian Jessie with enabled TLS. I'm new to the topic, so please show me my mistakes. I started by installing an reconfiguring slapd apt-...
0
votes
1answer
29 views

Bitlocker decryption trouble

today I started the procedure to access a bitlocker encypted data storage hard disk. At first I unlocked it and then I turned off bitlocker. The turning off took some time, but it ended without any ...
0
votes
1answer
44 views

xcopy & robocopy - Encrypted during transfer?

I need to transfer some files on some windows hosts, as i come from the unix side, i searched for a tool similar to scp or rsync. I came across xcopy and robocopy and searched the manuals for a hint ...
0
votes
0answers
13 views

Archiving files to an encrypted destination

I am setting up a new SPLUNK installation (fairly small scale, Windows), and it has been requested that I "encrypt the data". Further questioning got my requirement to be that: 30 - 60 days ...
0
votes
0answers
39 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
0
votes
0answers
23 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
0
votes
0answers
17 views

OwnCloud user: enable password recovery by default

I have an ownCloud server with server side encryption enabled. My test showed that creating a new user disables the password recovery. Is there a way to enable password recovery by default? If not, ...
0
votes
1answer
44 views

Does encyption key contain passphrase?

I created an encrypted pool in Freenas 9.10 using the provided Wizard. Afterwards i input a passphrase for the volume. The Handbook advises me to download and store the Recovery Key: Download Key:...
0
votes
0answers
10 views

EFS and Always Encrypting new files

I have an issue where files are not always being encrypted. I did a right click and set to encrypt all and subfiles and when files were dropped they kept being encrypted. As of right now, new files ...
6
votes
2answers
247 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
0
votes
1answer
23 views

Gmail marking self-signed certs as unencrypted

Just a quick question/answer pair to share what I've learned this morning. Gmail marks self-signed certs for TLS as unencrypted in their interface now. This is obviously wrong. How has anyone else ...
0
votes
2answers
51 views

How to convert a unencrypted EBS to be encrypted

I have a number of older EBS volumes that are not encrypted. In satisfying new corporate security measures, all data needs to be "encrypted at rest" so I need to convert all of the volumes to be ...
1
vote
1answer
65 views

Digital signature with openssl

I am trying to sign and verify a signature using an RSA key-pair. Here is how I generate the key pair (which work fine for encryption / decryption): ssh-keygen -t rsa -f mykey -N '' -b 2048 mv ...
4
votes
1answer
106 views

Samba TLS Setup

I'm reading this Samba Manpage and according to this, you can setup TLS. I've got 2 questions. On the Server-side, TLS options requires the path of the certificate and keys? How would that work on ...
0
votes
0answers
29 views

Does CloudFront support S3 signature version 4 for KMS encrypted objects?

I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket. Requests specifying Server ...
1
vote
2answers
128 views

How do I configure an e-mail service to provide (close to) zero-knowledge?

DISCLAIMER – I'm fishing for ideas, so I can see that some people will start downvoting and flagging this as unsuitable for SF, but hey, if you know of a better place to ask this question, there is a ...
0
votes
2answers
86 views

Installing blowfish2 for use in VIM on CentOS 7

I'm moving from a Debian-based distro to CentOS 7. I have files encrypted with blowfish that I edit transparently in VIM with this setting in ~/.vimrc: :set cryptmethod=blowfish2 This is the error ...
1
vote
0answers
66 views

Use postfix through a proxy. How should it be configured?

Postfix by default uses ports 25, 465 and 587. In my configuration, I enabled TLS encryption using the option smtpd_use_tls=yes in postfix's main.cf. This makes all smtp communications encrypted as ...
2
votes
2answers
43 views

Is it possible to encrypt a virtual machine or container so the host is not able to read any of its data? [duplicate]

I'm wondering whether it would be theoretically possible for a cloud hosting provider to run an application for a customer where the customer doesn't trust the hosting provider with the data in the ...
-1
votes
1answer
73 views

How to encrypt boot partition in CentOS 7 kickstart?

I have a kickstart file for CentOS 7 Minimal. I would like to add encryption only to my /boot partition. but when I added the following line in the kickstart file, the complete installation fails. The ...
1
vote
1answer
9 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
0
votes
0answers
12 views

Secure an external linux distro

I have a fairly complex situation, I have researched all the parts required before asking this question. I am trying to make a bootable linux distro on which I have an app that is located on an ...
0
votes
1answer
133 views

How to disable 112 bits cipher suite in ssl of a java server

How to disable 112 bit cipher suite on java application server. Specifically these one. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA ...
0
votes
0answers
34 views

Rsync backup to veracrypt-encrypted USB memory stick results in errors

I have created encrypted USB memory stick using Veracrypt for backup. First sync went ok, now trying to update it results in error. I'm using this command after mounting the volume: sudo rsync -...
0
votes
3answers
341 views

Encrypting all internal communication on an ESXi box

Lets say I have a large system made up of many VMs running on one bare metal esxi box. Each of these VMs are running application(s) that are necessary for the system. I do not have the ability to ...
1
vote
0answers
37 views

OpenVPN with CryptoAPI on Linux

I have an OpenVPN config file that uses Microsoft CryptoAPI. Meaning, it contains these lines: cryptoapicert "SUBJ:..." ca ca_file.crt tls-auth tls.key It works fine on a Windows system. However, ...
-4
votes
3answers
62 views

How to quickly encrypt a 200GB file? [closed]

I need to encrypt a 200gb file. Using 7z, on a pretty fast win2012 server, it is going to take 12 hours (using the fastest option). Is there a faster way?
3
votes
0answers
123 views

gmail this message was not encrypted [closed]

I just moved my site to another hosting provider. I use SSL/TLS for connection security and port 995. It sends my messages but the problem is that gmail shows This message was not encrypted red flag. ...
6
votes
5answers
1k views

Windows Server - any way to prevent file encryption?

I'm not talking about EFS or Bitlocker here. I'm asking if there's a way to prevent files from being encrypted. I'm referring to some extent to ransomware, but specifically I want the following ...
0
votes
2answers
23 views

Securing a forward proxy connection

I have a huge network with around 1000 users. We use squid(3.1.x) as forward caching proxy server, and we also authenticate our users to allow them access to the internet (helps us log what a ...
0
votes
1answer
44 views

Automatically encrypt application files on Linux

I get requests from customers where they have an application dump files into the FS on linux and want those files to be automatically encrypted. Not in the sense of an enrypted FS, but in a way that ...
1
vote
0answers
12 views

Fetchmail and Procmail set up with TLS

I'll start by saying I'm pretty uninformed when it comes to mail protocols, encryption, and basically everything else relevant to this question. My goal is to set up fetchmail/procmail on a machine ...
3
votes
3answers
272 views

Gmail flagging Dovecot email as insecure

I thought I successfully secured my Postfix/Dovecot email server. I have a signed certificate from LetsEncrypt, which is valid for my domain. Sending & receiving works fine, but since Gmail ...
0
votes
1answer
73 views

How to handle a private key SSL certificate with Ansible

I'd like to deploy my webserver config with copy. Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started? The reason is that I want to to use ...
0
votes
0answers
7 views

What could be causing traffic with URL parameters rotated by a caesar cipher? [duplicate]

Customers coming into our website from our newsletter go through an email tracker through a url like: https://www.domain.com/email/tracking?u=https%3N%2S%2Swww.domain.com&e=aA-bB_cC Where url ...
3
votes
1answer
449 views

Cryptsetup luks - Check that kernel supports aes-xts-plain64 cipher

I encrypted a bunch of hard drives with cryptsetup luks encryption on CentOS 5. Everything was fine, until I upgraded my system to CentOS 6. Now I cannot mount the disks anymore. To mount with my ...
0
votes
1answer
50 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
0
votes
1answer
40 views

Can a remote connetion from outside a LAN be invisible to protocol analyzers such as Wireshark, Process Hacker, Nbtstat? [closed]

When studying the behavior of trojans and (RAT) Remote Access Trojans this question came up. Can an attacker create a trojan that could trick the OS or the NIC into hiding a remote connection to a ...
0
votes
0answers
90 views

How to decrypt owncloud backups manually without a working installation?

I recently had a data lack and miss some very important files. Encrypted backups I had an owncloud 8.x instance running on my server last year for keeping backups and already located the wanted ...
-1
votes
1answer
18 views

Amazon S3: encryption speed and keys

I have couple theoretical questions about Amazon S3 I need to encrypt all my files. What encryption speed Amazon provide for S3? After encryption Amazon gives my key for file (or files package), it ...
1
vote
1answer
155 views

Dovecot: increase ssl_dh_parameters_length

I'm using Dovecot 2.2.21 I set ssl_dh_parameters_length = 4096. Before that, I had set 2048. After the change I reloaded Dovecot. Since then, SSL doesn't work any more and I get these logs in/var/...
4
votes
1answer
1k views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
3
votes
2answers
47 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...