Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

0
votes
0answers
28 views

EFS can decrypt a file but not re-encrypt after modification

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
0
votes
1answer
107 views

tinc - TCP Cipher method

In tinc 1.0.x there is Cipher param which allows to set encryption for UDP packets. For TCP packets encryption method is not allowed to be changed http://www.tinc-vpn.org/pipermail/tinc-devel/2005-...
0
votes
0answers
320 views

Openshift: SSH key denied, even though they match

I am attempting to use the OpenShift RHC tool on a Windows machine to ssh into one of my applications. The public key associated with my OpenShift account matches my .\.ssh\id_rsa.pub and I've even ...
-2
votes
2answers
82 views

Copy Files from one Linux server to another with Encryption [closed]

I want that when i copy files from one Linux server to another it should be encrypted. Also, there should be a log maintained as which files are uploaded from which IP just like ftp logs. The ...
0
votes
1answer
55 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this office....
1
vote
3answers
10k views

Ubuntu: How to decrypt home directory, swap (basically everything) without reinstalling?

I just faced a problem with encrypted home directory in Ubuntu Server 10.04. While I know a workaround, I want to just to completely remove encryption from everything. Any hints how to do that ...
8
votes
4answers
7k views

Encrypted Remote Backups via Rsync?

I run a small modest CentOS server at my house for misc backups, etc. My friend on the other side of town also runs a small modest server at his house for similar purposes. We have been toying with ...
2
votes
0answers
31 views

Windows 8 GPT Encryption [closed]

I have to run encryption for HIPAA Compliance and ran into a snag. I have a Windows 8.1 Home with GPT Based drive. It does not have Bitlocker nor TPM, and VerCrypt doesn't support GPT Partitions. ...
0
votes
1answer
448 views

Simple encryption for Samba shares

I have an Arch Linux machine acting as an SSH and file server, using vsftpd for FTP and samba for SMB. I would like to access this server via SMB over the Internet, and it is currently set up to ...
2
votes
1answer
1k views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
0
votes
0answers
26 views

Encrypted network share for multiple users

I have the following scenario: 100GB of data 5 users should be mounted on two different servers the servers are all running Ubuntu users are accessing/writing to it at the same time (not the same ...
0
votes
1answer
138 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
3
votes
1answer
66 views

Determining encryption container name corresponding to machine key in %ProgramData%\Microsoft\Crypto\RSA\MachineKeys

On Windows, encryption machine keys are stored in: %ProgramData%\Microsoft\Crypto\RSA\MachineKeys How do I determine the corresponding container name for each key? I'm guessing this vagueness is by ...
4
votes
2answers
127 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email normally,...
2
votes
2answers
179 views

Database backup encryption

I've been trying to work out an effective database backup encryption scheme lately. I have a Postgres 9.4 server, I have most of the backup scheme fleshed out I think. Backups will be stored in a ...
4
votes
1answer
1k views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
1
vote
3answers
4k views

What are the steps to TDE encrypt a SQL Server 2008 database?

We have been trying the steps here: http://msdn.microsoft.com/en-us/library/cc278098.aspx but keep getting this error: Msg 15151, Level 16, State 1, Line 1 Cannot find the certificate 'tdeCert', ...
12
votes
2answers
2k views

Encryption over gigabit carrier ethernet

My conclusion to this was to pipe VLAN trunks through EoIP tunnels and encapsulate those in hardware assisted IPSec. Two pairs of fairly inexpensive Mikrotik RB1100AHx2 routers proved capable of ...
0
votes
2answers
258 views

encrypt mariadb database files

I'm currently setting up an installation of mediawiki on arch linux using nginx and mariadb as a database. Since it will be a private wiki I would like to encrypt the database files using veracrypt. ...
2
votes
1answer
185 views

Hyper-V Guest data encryption

I have a new requirement to encrypt the data inside an sql database while it is at rest. So far I've looked at Bitlocker (see below), and other commercial products (I won't name because I'm not ...
2
votes
2answers
503 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
3
votes
1answer
3k views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. However,...
0
votes
2answers
48 views

How to handle passwords in a script: in-memory VS on-file

I have a script that runs on a VPS in a cheap cloud provider. The scenario is: I trust my provider, but I prefer to make his life hard if he ever wants to steal my key. All the interested folders in ...
3
votes
0answers
70 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
2
votes
1answer
1k views

SQl server 2008 permission and encryption

i have made columns in some of the tables encrypted in sql server 2008. Now as i am a db owner i have the access to encode and decode the data using the symmetric key and certificate. But some other ...
2
votes
1answer
532 views

Mounting encrypted Samba share (linux server/client)

I'm trying to set up encrypted samba access. In order to achieve that I've added 2 lines to [global] scope in smb.conf: server signing = mandatory smb encrypt = mandatory But unfortunately I can't ...
0
votes
1answer
485 views

Root cannot access a directory - access denied

Under Linux (Ubuntu 14LTS), I'm trying to access an encrypted local directory created by a regular user (encfs) as root, but I get access denied: root@toad:/home/robert# cd inbox bash: cd: inbox: ...
0
votes
0answers
32 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
0answers
309 views

Password mismatch in dovecot with postafixadmin

After many hours trying to set up a new mail server, I just can't figure out why the passwords which postfixadmin store are a mismatch with what dovecot passes for authentication. In postfixadmin, ...
0
votes
1answer
360 views

How to find mainboards that supports Self Encrypting Device (SED) in BIOS?

There should exist mainboards that support Self Encrypting Device (SED) in BIOS, so when connecting a SSD which have SED support, and SED have been enabled in the BIOS, it prompts on bootup for ...
0
votes
1answer
23 views

SNMP access with encryption

I'd like to configure my SNMP v3 (NET-SNMP) agent to limited user range with encryption. Could you give me a short hint how to setup encryption with NET-SNMP? Do you have any experiences in using AES/...
3
votes
1answer
494 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
2
votes
1answer
1k views

How to send “ATA Secure Erase” command to SSD?

A very good way to erase a SSD which have SED support is to change the password/key. But what to do with those that doesn't have SED support? This article says Fortunately it is possible to erase ...
0
votes
1answer
449 views

Debian encrypted home directory setup fails

Here's the problem: # ecryptfs-migrate-home -u <user> INFO: Checking disk space, this may take a few moments. Please be patient. INFO: Checking for open files in /home/<user> Enter ...
1
vote
1answer
187 views

Ubuntu Encryption - Protect data in the case of Physical Server Access

Looking to Encrypt a system, such that if someone has physical access to the server they can not clone the hard drive or copy data off of it. I require the services to be running such that the ...
2
votes
1answer
115 views

How to use an encrypted disk without needing an unencrypted boot partition

I would like to know if there is a way to encrypt a linux system which does not require a small unencrypted /boot partition. In addition I would like to know if encryption can be implemented on an ...
8
votes
4answers
5k views

How to create a randomly keyed, encrypted swap partition, referring to it “by-uuid”, on Debian?

It is sensible that if you have any sort of block device encryption implemented on your GNU/Linux system, to encrypt your swap partition too, as any decrypted data may be written in cleartext at any ...
3
votes
1answer
685 views

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to ...
3
votes
7answers
1k views

Why do https connections take longer to establish than straight http connections?

Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)? Just interested in knowing only. Thanks.
2
votes
2answers
8k views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
1
vote
3answers
540 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
18
votes
7answers
30k views

How can I disable encryption on openssh?

I'm having performance problems using openshh(server) and putty(client) combination to use a remote webproxy. I'd like to disable encryption and test the results to see if it makes a difference. How ...
1
vote
1answer
120 views

ZFS, mdconfig, GELI and getting my head around

I want to create an encrypted virtual disk but I am struggling with understanding some basic concepts. Please correct me if any of these statements are wrong: I need a block device that geli can ...
-1
votes
1answer
48 views

Linux private file encryption

I need to store and secure clients files. I would like to encrypt files and not being able to open it. Only file owner can open his file. I think I’ll have to generate private key for each customer. ...
1
vote
1answer
694 views

Encrypt Files Before Sending To Bittorrent Sync

Is there a way to encrypt files before being sent to Bittorrent sync, either via a plugin, or by encrypting the files first? Also do you trust Bittorrent Sync's encryption?
5
votes
4answers
6k views

Are there any FIPS-140-2 certified solutions for Linux? [closed]

I'm not even 100% certain what this involves, but my current understanding is this: use of only approved cryptographic algorithms for network traffic (easy, we use SSL and lock down the algorithms ...
24
votes
4answers
24k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
0
votes
1answer
632 views

Shibboleth SP - Signing and Encryption Key

I have a Shibboleth SP installed on Server 2012 R2. I tried to submit the metadata to be imported into the IDP and was told that without having the signing or encryption key, they won't be able to ...
11
votes
3answers
21k views

Can I create my own S/MIME certificate for email encryption?

I'm having a bit of an issue here. Bear with me as this may be a case of "not asking the right question". Background: Using Apple Mail. Want to encrypt/decrypt email but GPGMail (and apparently ...
1
vote
2answers
433 views

Recovering files without .encfs6.xml

I've lost my .encfs6.xml file for a encfs volume. I still know my passphrase. Is there anyway to regenerate the .encfs6.xml based on similar volumes and the passphrase? Any chance of brute-forcing?