Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
778
questions
1
vote
2
answers
405
views
Hardware token/UUID for authentication of software
Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software?
I am working on writing a proprietary software for a ...
- 113
0
votes
1
answer
97
views
Is fscrypt encryption FIPS compliant?
I am considering to use https://www.kernel.org/doc/html/v4.19/filesystems/fscrypt.html to encrypt directory files and just wondered if the encryption with fscrypt is complaint with FIPS. If so, would ...
0
votes
1
answer
501
views
How can I check & configure Exchange 2013 for sending Encrypted messages to external Email address using Outlook?
One of my user wants to send encrypted messages to external vendor so he requested IT department that how he can do this? I have configured my Outlook from Files-> Options -> Trust Center ...
- 1,072
0
votes
1
answer
675
views
What is the optimal way to protect my data from my VPS provider? [closed]
What is the optimal way to protect my data (db and source code) from my hosting provider?
Would using an encrypted volume, such as truecrypt, suffice? However - for my program to access data on the ...
- 35
7
votes
1
answer
1k
views
Data missing after ZFS replication on FreeNAS/TrueNAS
In order to use the new encryption method in TrueNAS 12 I copied all data from a legacy encrypted FreeNAS pool to a newly formatted pool via a replication task.
After replication there seems to be ...
- 50.7k
1
vote
1
answer
1k
views
How to set up a secure system to allow only specific clients to access specific services on a server?
Preface
Please bear with me if I use incorrect terminology or don't express the problem too well since I'm not an expert on system administration/server maintenance. Let me know/correct me if I do so ...
- 5,373
13
votes
4
answers
5k
views
Encrypt git repository on server (safe against theft of physical hardware)
I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
- 449
4
votes
2
answers
2k
views
Encrypt at rest existing AWS EFS instances - is it possible?
Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
- 259
2
votes
2
answers
10k
views
How do I change encryption from RC4 to AES in order to allow RDP to my remote servers?
I have multiple physical and virtual servers on a company domain. The physical and virtual servers are all still Windows 2008 R2. The clients have all been updated to Windows 10 from Windows 7 in ...
CommunityBot
- 1
1
vote
0
answers
281
views
Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?
Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here.
I'm running a Web Service and currently support these 2 Ciphers:
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F)...
- 11
0
votes
1
answer
469
views
How do I setup ipsec VPN between APIs on different servers?
There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
- 321
0
votes
1
answer
4k
views
How can Jenkins on Linux do builds to Windows servers securely without A.D.?
I am running Jenkins 1.6 on CentOS 7.2. I have several Windows 2012 servers without A.D. I connect to the Windows machines with local credentials. I have configured a development environment with ...
CommunityBot
- 1
2
votes
2
answers
920
views
How to securely pass secrets to an application
I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
- 386
0
votes
2
answers
554
views
Lets encrypt with lighttpd and wordpress
I am trying to implement let's encrypt with certbot and I am using lighttpd on CentOS 6
So this is my full conf file for my host
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = ...
- 2,766
5
votes
3
answers
11k
views
Synology Cloud Sync : How to read encrypted files in the cloud?
I own a Synology NAS which i synchronised with Google Drive using the 'Cloud Sync' feature. For security reasons, i used the Synology built-in feature to encrypt the files on the NAS before sending ...
CommunityBot
- 1
1
vote
2
answers
889
views
Is all web traffic sent over http/https protocol?
I was wondering what were the differences (security-wise) between VPN encryption and HTTPS encryption, and I found this article: https://surfshark.com/blog/vpn-vs-https According to this blog, HTTPS ...
- 35.5k
1
vote
2
answers
178
views
Possibilities to protect network traffic in datacenter without adding much latency
I am looking for possibilities (and their pros and cons) for protecting network traffic of the components of a a time-critical application in a data center. The aim is minimizing the damage an ...
- 1,222
1
vote
1
answer
2k
views
nginx server that only proxies to my game servers
I have clients connecting to my WebSockets game server for an online browser game. Game servers are created and destroyed when players start games, and so each server can have a different IP address ...
- 113
1
vote
4
answers
5k
views
Storing files encrypted and sharing them over NFS or other
I have a tricky question for you, well at least seems tricky to me.
Here is the setup. I have a linux file server and another linux server. I am looking to use the disk space from the filer server ...
0
votes
1
answer
36
views
What would basic encryption key management do's and don'ts look like for an organization that has a low amount of keys?
The company I work at, just had a need for encryption to be utilized. What would be the best practice for taking care of this key, during its lifecycle? Where should I keep it?
- 6,003
0
votes
1
answer
210
views
Decrypt file for specific session in CentOS 7
I am looking for a way to encrypt my file that can be decrypted for the current terminal session. The moment we exit the session, it gets encrypted again.
A use case for this scenario would be: Let's ...
CommunityBot
- 1
1
vote
2
answers
93
views
Digital Signatures Using Entreprise PKI
We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally.
We sign contrats with our ...
1
vote
1
answer
3k
views
Root cannot access a directory - access denied
Under Linux (Ubuntu 14LTS), I'm trying to access an encrypted local directory created by a regular user (encfs) as root, but I get access denied:
root@toad:/home/robert# cd inbox
bash: cd: inbox: ...
- 1,548
6
votes
1
answer
16k
views
VPN Encryption Domain
I'm trying to connect to a counterparty using VPN IPsec. I have a standard cable broadband connection with a single static IP address.
The counterparty have asked me for my "Public IP Address Assigned ...
0
votes
1
answer
341
views
win10 bitlocker enrypts partition after update
one of my clients has an laptop with Win 10.
After the client run the latest Updates apparently BitLocker started to encrypt the files/Partition WITHOUT CONSENT and WITHOUT PROVIDING ANY RECOVERY KEYS....
0
votes
1
answer
2k
views
NextCloud encryption key backup
I’m looking into setting up a self-hosted NextCloud, and back it up to an external storage (Dropbox, S3...). I want this backup to be encrypted.
Fortunately, that is supported natively by NextCloud. ...
- 111
0
votes
1
answer
1k
views
Might "Require TLS Encryption" in Exchange mail-flow rules cause compatibility issues for e-mail?
Picture of how I'm forcing TLS.
This is essentially forced TLS.
Should "Require TLS Encryption" be required for microsoft exchange mailflow rules?
I'm worried about compatibility issues, e-...
- 1,072
2
votes
1
answer
120
views
Activate Tape Encryption on Windows Server
We use windows to make tape (LTO 8) backups with ltfs and now I want to use the hardware encryption. My problem is I can not find a way to activate it. For Linux I found "stenc" but is there something ...
1
vote
0
answers
174
views
in pfsense, its possible to secure the conf.cf (primary configuration file)
I want to give someone a solution based on embedded pfSense. That solution has modifications in pfSense, which I don't want anyone to steal and use it for their own business. its proprietary solution ...
- 3,576
0
votes
0
answers
87
views
Read files from an encrypted disk?
Is it possible to read from an LUKS-encrypted disk via the terminal, e.g. by booting from a live Linux system on a USB flash drive and accessing the encrypted host computer's hard drive?
- 101
1
vote
1
answer
3k
views
OpenVPN faster with encryption than without it
I would've expected OpenVPN to achieve higher speeds when encryption is disabled, but the opposite is true.
When setting the cipher to AES-128-GCM, the speed between two of my computers is 580 to 613 ...
- 325
0
votes
0
answers
299
views
How to create a local email relay for encrypt mails
We have a Ubuntu 20.04 server with redmine installed. Redmine send automated mails through an external smtp provider. We have also other services that do the same thing (teamcity etc)
Everything works ...
- 111
0
votes
0
answers
148
views
How to set up IPsec between two instances within the same VPC assuming that the traffic between them isn't secure?
I want to set up a secure transit of data between services running is different instances.
First , I thought about setting up an EFS but I don't really like that an instance could have an access to ...
- 3,206
0
votes
1
answer
116
views
Is it possible to umount a drive from where a program is running?
I want to run some confidential program on a cloud server. In order to protect it from being copied, I can encrypt it into a drive and mount the decrypted drive to run it. However I want to umount the ...
- 1,240
3
votes
1
answer
401
views
What filesystem and RAID for a server syncing linux windows macOS android and iOS machines
I plan to have one master server including several HDDs (for RAID5, probably all homogeneous with 4TB each), and one remote slave server containing only one big capacity HDD, or a bunch of disks not ...
- 31
10
votes
9
answers
16k
views
How secure are passwords with under 20 characters length?
I recently received a recommandation for setting my password to above 20 characters. The algorithm used for encryption is AES with a 256 bit primary key. How secure is a, let's say, 8 char password ...
- 107
9
votes
4
answers
15k
views
Is it ok to use self-signed certificates for smtp transport?
By "by ok to use" I mean:
are MTA agents receiving emails from my server going to reject my
email
if not, are they going to make other kind of bad treatment for my
emails (marking as spam, unsafe and ...
CommunityBot
- 1
0
votes
1
answer
429
views
RDP Connection closes due to Encryption error
My azure windows VM has been working fine for 3 months since it was set up. I tried to reconnect today via RDP and it came up with Remote Desktop Application - because of an error in data encrption ...
2
votes
2
answers
940
views
Set default data encryption policy in exchange online
I have recently enabled the customer key on my o365 tennant.
I have been able to set my mailboxes DEP with the following :
Get-Mailbox | Set-Mailbox -DataEncryptionPolicy "MyDEPPolicyNmae"
Now I'm ...
- 1,102
2
votes
2
answers
2k
views
Bitlocker - "Recovery information was successfully backed up to Active Directory", but not really?
I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory.
I found that the device only had a TPM ...
- 1
0
votes
1
answer
1k
views
How can I encrypt the passwords of all datasets in my mysql table?
I am running an ProFTPD Server with a MySQL backend for user authentication.
The passwords for the users are currently in plaintext. And my goal is, that all the users have encrypted passwords ...
- 3,206
0
votes
0
answers
65
views
Modify OpenLDAP hashing algorithm [duplicate]
I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512.
I've been having trouble ...
-1
votes
1
answer
233
views
When was LUKS first released?
When was Linux Unified Key Setup (LUKS) first released--both as an open standard and later made available as an implementation with cryptsetup?
- 801
4
votes
2
answers
533
views
Are LTO Hardware compression and encryption standardized?
I'm about to setup a backup using an LTO-4 Drive. I know that drives are meant to be compatible to any tape within the past 3 generations (so I should be able to read an LTO-4 tape using an LTO-4, 5 ...
- 50.7k
4
votes
4
answers
1k
views
What could cause a 'sense error' when setting LTO encryption?
I'm trying to set an encryption key on an LTO-4 drive under Linux. I successfully did this once, power cycled the drive, and now I cannot get the drive to accept the key again.
The command I am ...
- 242
0
votes
1
answer
648
views
Openldap re-hashes already hashed password
I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine.
My problem appears, once already hashed password is send e.g ...
- 1
0
votes
1
answer
36
views
Can MS AD Certificate Services maintain both public and private keys in active directory?
Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
- 152
29
votes
2
answers
17k
views
ZFS RAID and LUKS encryption in Linux
I'm planning to setup a set of 3x 2TB 7200rpm drives as a LUKS-encrypted Z-RAID pool in Linux (for a NAS solution).
My understanding of the problem at hand is that the only way to achieve this is to ...
- 1
2
votes
2
answers
612
views
Is it possible to secure a VPS from its seller/provider?
I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
- 1
3
votes
1
answer
2k
views
How to change GELI passphrase on FreeBSD 11 Root-On-ZFS system with mirror RAID?
How to change GELI passphrase on FreeBSD 11 Root-On-ZFS system with mirror RAID?
Swap devices are also mirrored and ancrypted.
I have /dev/ada0p5.eli /dev/ada1p5.eli and /dev/mirror/swap.eli devices....
- 111