Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
0answers
31 views

Windows 8 GPT Encryption [closed]

I have to run encryption for HIPAA Compliance and ran into a snag. I have a Windows 8.1 Home with GPT Based drive. It does not have Bitlocker nor TPM, and VerCrypt doesn't support GPT Partitions. ...
0
votes
0answers
41 views

Can't setup mount of EncFS on user login

I've tried to setup EncFS to be mounted on user login as described in this guide excluding the Password Utility section, however it works with little success. The EncFS works properly ...
0
votes
1answer
373 views

Simple encryption for Samba shares

I have an Arch Linux machine acting as an SSH and file server, using vsftpd for FTP and samba for SMB. I would like to access this server via SMB over the Internet, and it is currently set up to ...
0
votes
1answer
55 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
2
votes
1answer
753 views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
0
votes
0answers
24 views

Encrypted network share for multiple users

I have the following scenario: 100GB of data 5 users should be mounted on two different servers the servers are all running Ubuntu users are accessing/writing to it at the same time (not the same ...
3
votes
1answer
48 views

Determining encryption container name corresponding to machine key in %ProgramData%\Microsoft\Crypto\RSA\MachineKeys

On Windows, encryption machine keys are stored in: %ProgramData%\Microsoft\Crypto\RSA\MachineKeys How do I determine the corresponding container name for each key? I'm guessing this vagueness is by ...
2
votes
2answers
177 views

Database backup encryption

I've been trying to work out an effective database backup encryption scheme lately. I have a Postgres 9.4 server, I have most of the backup scheme fleshed out I think. Backups will be stored in a ...
0
votes
1answer
186 views

McAfee Drive Encryption issues with HP Elitebook 755 G2

Hi all (Sorry if this isn't the right forum to post on), I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
0
votes
2answers
225 views

encrypt mariadb database files

I'm currently setting up an installation of mediawiki on arch linux using nginx and mariadb as a database. Since it will be a private wiki I would like to encrypt the database files using veracrypt. ...
0
votes
0answers
79 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
2
votes
1answer
152 views

Hyper-V Guest data encryption

I have a new requirement to encrypt the data inside an sql database while it is at rest. So far I've looked at Bitlocker (see below), and other commercial products (I won't name because I'm not ...
0
votes
0answers
9 views

TPM Drive Encryption / Network Profile

I have the following situation: I have an old application that cannot be rewritten for various reasons that I can't go into. Just noting that refactoring the source of the problem is a total no-go. ...
2
votes
1answer
101 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
0
votes
2answers
41 views

How to handle passwords in a script: in-memory VS on-file

I have a script that runs on a VPS in a cheap cloud provider. The scenario is: I trust my provider, but I prefer to make his life hard if he ever wants to steal my key. All the interested folders in ...
3
votes
0answers
63 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
0
votes
1answer
407 views

Root cannot access a directory - access denied

Under Linux (Ubuntu 14LTS), I'm trying to access an encrypted local directory created by a regular user (encfs) as root, but I get access denied: root@toad:/home/robert# cd inbox bash: cd: inbox: ...
0
votes
0answers
32 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
0answers
269 views

Password mismatch in dovecot with postafixadmin

After many hours trying to set up a new mail server, I just can't figure out why the passwords which postfixadmin store are a mismatch with what dovecot passes for authentication. In postfixadmin, ...
4
votes
1answer
163 views

Creating a grow-on-demand encrypted volume with LUKS

I am trying to create an encrypted, growing-as-needed file system in with Linux. I am familiar with LUKS and cryptsetup. I can create an empty file: fallocate -l 512M /root/image I can create a ...
0
votes
1answer
290 views

How to find mainboards that supports Self Encrypting Device (SED) in BIOS?

There should exist mainboards that support Self Encrypting Device (SED) in BIOS, so when connecting a SSD which have SED support, and SED have been enabled in the BIOS, it prompts on bootup for ...
0
votes
1answer
21 views

SNMP access with encryption

I'd like to configure my SNMP v3 (NET-SNMP) agent to limited user range with encryption. Could you give me a short hint how to setup encryption with NET-SNMP? Do you have any experiences in using ...
2
votes
1answer
1k views

How to send “ATA Secure Erase” command to SSD?

A very good way to erase a SSD which have SED support is to change the password/key. But what to do with those that doesn't have SED support? This article says Fortunately it is possible to erase ...
2
votes
1answer
427 views

Mounting encrypted Samba share (linux server/client)

I'm trying to set up encrypted samba access. In order to achieve that I've added 2 lines to [global] scope in smb.conf: server signing = mandatory smb encrypt = mandatory But unfortunately I can't ...
3
votes
2answers
185 views

Encrypting a file name in linux?

I'm trying to encrypt a file as well as its filename. Encrypting the file is fairly easy, I use gpg for that, but I can't figure out how to encrypt the filename as well. Would be great if the filename ...
1
vote
1answer
140 views

Ubuntu Encryption - Protect data in the case of Physical Server Access

Looking to Encrypt a system, such that if someone has physical access to the server they can not clone the hard drive or copy data off of it. I require the services to be running such that the ...
3
votes
1answer
369 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
3
votes
1answer
618 views

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to ...
0
votes
1answer
368 views

Debian encrypted home directory setup fails

Here's the problem: # ecryptfs-migrate-home -u <user> INFO: Checking disk space, this may take a few moments. Please be patient. INFO: Checking for open files in /home/<user> Enter ...
1
vote
1answer
111 views

ZFS, mdconfig, GELI and getting my head around

I want to create an encrypted virtual disk but I am struggling with understanding some basic concepts. Please correct me if any of these statements are wrong: I need a block device that geli can ...
-1
votes
1answer
48 views

Linux private file encryption

I need to store and secure clients files. I would like to encrypt files and not being able to open it. Only file owner can open his file. I think I’ll have to generate private key for each customer. ...
4
votes
1answer
789 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
0
votes
2answers
187 views

Decrypt a Header in Apache (HTTPD)

I've been asked to have a look at whether it's possible to decrypt a header during the processing of the request. The specific use case is to respond to the decrypted contents of the header by ...
0
votes
1answer
78 views

Recomendations for this mail server setup?

EMAIL SERVER SETUP Hey, its my first time using serverfault but I hope the community can help. I am trying to build a secure email system using Linux, Postfix, Dovecot and MySQL. I have read on ...
-2
votes
1answer
252 views

Generating public/private credentials for MS Outlook email encryption

An app running on a CentOS 7 web server needs to receive encrypted emails sent from users of MS Outlook. Can someone please provide explicit instructions as to how I can generate or procure all of ...
-2
votes
1answer
55 views

How to verify whether randomness was written to a device and what exactly has been written?

I am preparing a device with shred to use it later on encrypted with dm-crypt/cryptsetup/luks. How can I check the device before and after using shred or e.g openssl/dd with /dev/urandom to be sure ...
0
votes
1answer
156 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
-2
votes
1answer
1k views

mkpasswd on Centos 7 does not support -m flag [duplicate]

I cannot find how to install grub-crypt either. How can I generate SHA512 pass hashes on Centos 7? Edit: I was actually trying to look up how to generate hashes with an adjustable number of rounds. ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
1answer
549 views

Shibboleth SP - Signing and Encryption Key

I have a Shibboleth SP installed on Server 2012 R2. I tried to submit the metadata to be imported into the IDP and was told that without having the signing or encryption key, they won't be able to ...
1
vote
0answers
80 views

Decrypt All traffic by wireshark [closed]

Ok I can decrypt a specified client connected to wifi by deauthing it and getting the handshake using wireshark. In fact after wireshark captures the EAPOL messages it starts to decrypt the traffic. ...
3
votes
2answers
717 views

How can I encrypt my SSD but still boot unattended (linux)? [closed]

I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
1
vote
0answers
207 views

Remmina TLS, NLA works, but high encryption fails

Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working. Questions: 1. Why setting high encryption prevents connectivity? 2. What's ...
1
vote
1answer
169 views

After resizing an encrypted LVM device, the machine takes 4 hours to boot

I have a host, under Debian Wheezy. The virtualisation software is qemu/KVM, and uses LVM Volumes as disks for the guests. The guests all have been installed using debian wheezy, full-disk ...
1
vote
0answers
159 views

Debian KVM Host, Debian guests : where full-disk encryption should be done?

I have a host under Debian Wheezy, running qemu/KVM. I want to have all my guests fully-encrypted. I can see to possibilities : - Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
2
votes
2answers
6k views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
1
vote
1answer
198 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
9
votes
2answers
4k views

Should I encrypt OS disk with BitLocker for HIPAA compliance

I am looking into hosting a HIPAA compliant web application on Azure VM's. For the database, right now I am leaning towards using a VM with SQL 2014 Standard Edition. Since TDE is not available with ...
0
votes
1answer
438 views

How do I encrypt large (20Gb+) compressed files from a backup?

I want to encrypt regularly created and compressed backup files from OpenVZ containers, before they leave the server and get copied to the providers backup space via ftp. They vary in size, from 6 to ...
0
votes
1answer
142 views

Sun T2/Niagara Hardware Crypto Acceleration with Debian Linux?

I wanted to use an older T2 machine as a webserver for SSL heavy websites. With Solaris, there is the crypto acceleration available which would make sense for SSL. Now I am wondering if this crypto ...