Encryption is the process of taking some information (the plain text), and transforming it (usually with a cypher and a key) so that it is secure. Assuming a sufficiently strong cypher and key have been chosen, this cyphertext can be shared widely, without the information being compromised. The ...
2
votes
3answers
81 views
How to encrypt a small folder and copy that to Google Drive or DropBox?
Right now I use the following to back up a small project folder to a USB Flash drive:
alias a='alias'
a dateseq='date "+%Y-%m-%d %H:%M:%S"'
a backup_proj='cp -a ~/code/MyProj ...
1
vote
1answer
26 views
Does double encryption occur when Outlook Anywhere automatically encrypts MAPI data?
Does this checkbox mean that MAPI-based RPC data will be encrypted and then encapsulated over HTTPS, resulting in double encryption?
I'm asking this question based on this understanding of terms.
-3
votes
4answers
95 views
How long should a password be, for filesystem encryption? [closed]
I want to encrypt my filesystem with encfs, but I don't know how long my password should be.
I'm gonna be using AES 256, with blocks of 4096 bits.
How many guesses per second can I expect an ...
1
vote
0answers
18 views
MAC OS X VPN client / Certificates / Cisco ASA series
I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover.
Here's the task:
1. I need to establish VPN connection ...
2
votes
1answer
69 views
Encrypt git repository on server (safe against theft of physical hardware)
I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
2
votes
0answers
27 views
Exchange 2007 and Droid Rezound SD CARD Encryption
We have an Exchange 2007 server that supports many DROIDX phones. The configurations are setup to only enforce a pin code. However on the DROID REZOUND, it forces you to encrypt the SDCARD. This ...
2
votes
0answers
61 views
Can I encrypt user input in a way I can't decrypt it for a certain period of time? [migrated]
I run a baseball league and would like to do silent auctions for free agents. This would require teams to enter their highest bid and the highest bidder at the end of the auction period would win. ...
2
votes
3answers
85 views
Possible to per file encrypt cloud storage?
With the many cloud storage providers that there now exist, would it be possible to add a layer of encryption before the files are saved?
It would be possible to make an encrypted partition in a ...
0
votes
2answers
357 views
How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)
I'm trying to get pam_mount working on Ubuntu 12.04.
I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it.
Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or ...
1
vote
2answers
33 views
Does dm-crypt support journaling filesystem transactional guarantees?
I'm considering using ext4 on encrypted LVM (which uses LUKS and dm-crypt). Will the transactional guarantees in ext4's journaling be preserved? Bonus: where may I find authoritative information on ...
1
vote
1answer
48 views
What are the options for storing encrypted data on FreeNAS?
I'm looking at implementing a mirrored pair of FreeNAS servers as file repositories. The only question still to be answered is the physical security. I typically encrypt the underlying drives on all ...
0
votes
1answer
38 views
VPN Encryption Domain
I'm trying to connect to a counterparty using VPN IPsec. I have a standard cable broadband connection with a single static IP address.
The counterparty have asked me for my "Public IP Address Assigned ...
1
vote
2answers
69 views
Encrypt communication between mail servers
I'm using my own root server for my email accounts. All the traffic between my pc and my server is encrypted. Is there a possibility to force my email-server to communicate with other email-servers ...
0
votes
1answer
74 views
Wireshark/encryption and openvpn
I have a linux openvpn router and a home dsl modem. The dsl modem has port 1234 open and forwards it onto eth0 on the linux router.
I can connect to the router from a remote location no problem. All ...
0
votes
1answer
138 views
Are there any Microsoft Exchange Clients for iOS and Android that store their local data in an encrypted manner?
I don't feel like this is a product recommendation question, more of a "does this tech even exist and is it feasible" question, but if I'm wrong, feel free to give this question the boot.
Context:
...
2
votes
1answer
72 views
Xerox scan to email and Exchange
We have two Xerox devices, a 7120 and a 7556 that we are trying to get to scan-to-email through our exchange 2010 server.
Currently they are able to do so to local recipients by not authenticating. ...
1
vote
2answers
74 views
Encrypting traffic on remote end of SSH tunnel
Using an example of someone connecting to a VPS, an SSH tunnel will encrypt any traffic coming from the user to the VPS. Once it reaches the VPS network, the traffic is not encrypted and is easily ...
2
votes
2answers
96 views
Different results from GnuPG and OpenSSL when using AES256 encryption
Text: apple
Pass: password
openssl aes-256-cbc -e -a -in apple.txt
Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ=
gpg -c --cipher-algo AES256 apple.txt
Output: ...
4
votes
2answers
229 views
SSL Certificate Class 2 vs Class 3 vs Class 4
I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
5
votes
2answers
67 views
Windows Server 2008 BitLocker
I would like to configure whole disk encryption on all of my Domain Controllers. Is BitLocker an acceptable method to do this? What are the potential problems with whole disk encryption on a Domain ...
-1
votes
2answers
81 views
Whole Disk Encryption and Dropbox [closed]
What is the best way to configure whole disk encryption on two laptops sharing a Dropbox? If I encrypt both drives, what will happen to the Dropbox files?
2
votes
2answers
97 views
How to detect Dell TPM from inside Windows?
I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
1
vote
1answer
54 views
Is Intel AESNI supported by Xen in VPS/Cloud hosting environments?
I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
0answers
33 views
Replication failing when SSL encryption is used
I am trying to set up Replication slave in Amazon EC2. I was able to do this without SSL encryption but once I enable SSL, the slave is failing to connect to Master (outside Amazon).
From slave, I ...
5
votes
2answers
232 views
Are there huge drawbacks to using an excel 2010 document for password management?
At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
2
votes
2answers
82 views
Do I need to back up the SQL Server Encryption Password and Symmetric Key?
I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN:
Create the Master Key with a strong password.
Create a ...
0
votes
1answer
115 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
1
vote
0answers
73 views
Linux LTO-4/5 Drive Encryption
For a number of reasons I have been trying to find a way to encrypt my backup tapes. I'm currently running Bacula for my backups and it's support for Drive based encryption is I have to call a script ...
6
votes
1answer
161 views
Approaches for Linux server disk encryption
What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
2
votes
1answer
55 views
practical document encryption in shared environment
I can't seem to find a good, practical way to encrypt documents on a shared drive...
This is a samba share on centos using ADS auth. The primary doc format will be PDF.
Is there a good on-thy-fly ...
1
vote
1answer
66 views
Configure Apache2.2 as http to https encrypter/converter
I am using Apache 2.2 on SUSE 10 with mod_ssl.
My problem:
I want to connect a client(supporting only http) to a Server(supporting only HTTPS).
So I thought of deploying Apache as a proxy to convert ...
1
vote
1answer
49 views
fully encrypted MediaWiki base
Is it possible to completely encrypt a MediaWiki installation?
I'm not looking for a way to finely control access rights or have some encrypted articles or even just parts of articles encrypted.
...
1
vote
3answers
119 views
Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?
Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
0
votes
1answer
186 views
Cryptsetup device /dev/md0 is not a valid luks device
After reinstallation of my OS, I decide to manually assemble a RAID6 array.
# mdadm --assemble --auto=yes --scan=auto /dev/md0
I don't exactly remember a message but programmdadm return a resizing ...
0
votes
3answers
226 views
HTTPS Proxy which answers CONNECT with own certificate
I'm configuring a DMZ which has the following Scheme:
Internet - Server A - Security Appliance - Server B - Intranet
In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
0
votes
0answers
95 views
How to encrypt a section within web.config using aspnet_regiis -pe or -pef
I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...).
Having repeated failures with all types of syntax changes, so perhaps better to post ...
-1
votes
1answer
76 views
Filesystem encryption settings during install?
I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID.
Should I encrypt the drive partition, the software RAID device, or
both?
Should I ...
1
vote
1answer
59 views
ZFS: can per-user encrypted filesystems be deduplicated on block-level?
Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted?
What ...
0
votes
2answers
169 views
Encrypt each users home Centos 6 and access from windows?
I'm trying to set up a shared drive for my team using Centos. The team might have root privileges through sudo on this system.
The over all goal is under /home/ have each member dir be encrypted so ...
0
votes
3answers
108 views
Does this hard disk drive support hardware-based full disk encryption? What are some effective interrogation tactics?
I am trying to determine if a particular hard disk drive supports hardware-based full disk encryption. I know I can use the model number and check the manufacturer's website, but that is only feasible ...
0
votes
1answer
67 views
EncFS and automated back-up
When using EncFS to encrypt a file on a VPS, will the file be stored encrypted or unencrypted in the automated back-ups taken by the host? (Assuming that the file is unlocked when the back-up is ...
1
vote
0answers
73 views
DB encryption for Django web app without storing key on server
We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
1
vote
4answers
187 views
Encryption between a LAN switch and an end device
What standards/protocols/products exist that support encryption of all data sent between a device (e.g. a workstation) and a LAN switch? Something like WPA for WLAN.
0
votes
1answer
119 views
Variable size encrypted container
Is there an application similar to TrueCrypt, but the one that can make variable size containers opposed to fixed-size or only-growing-to-certain-amount containers which can be made by TrueCrypt?
I ...
0
votes
0answers
55 views
Detect corrupted LV/partition encryption type and fix and mount
Due to several recent power outages and a failed UPS, an encrypted logical volume is no longer accessible. It has been a while but I'm sure the encryption was done by using Ubuntu's installer, so it ...
-1
votes
4answers
67 views
File and Database encryption
Just curious what do you guys use for file or database encryption? Any good programs out there or techniques employed for securing IT personal information? Main reason is the company I work for has ...
2
votes
3answers
1k views
How to create an SHA-512 hashed password for shadow?
The previous SF questions I've seen have lead to answers that produce MD5 hashed password.
Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
7
votes
1answer
146 views
State of hardware-assisted disk encryption in Linux
I use dm-crypt to encrypt partitions. I am building a small office server from consumer (or pro-sumer) category hardware. It made me wonder, hardware-assisted encryption is a notion in the air for ...
1
vote
1answer
22 views
How to provide encryption across file, folder, and email for small company
I'm the 1/2 time IT person for a small company. We run a MS environment using a Server 2003 Domain Controller, MS Storage Server 2003, and Exchange 2003.
It finally occurred to them that I as an ...
1
vote
1answer
54 views
Adding column-level encryption after-the-fact in SQL Server 2008?
I am writing a web-app that will, at some point in the future, need to perform column-level encryption of a portion of the data it stores to our database running on SQL Server 2008 Express.
It would ...
