Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

0
votes
1answer
146 views

dmcrypt container on nfs

I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
1
vote
1answer
468 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
1
vote
1answer
138 views

Remotely unlock Hardware disk encryption

I am setting up a remote server at a collocation for a client and their primary request is that the data be encrypted beyond the boot partition. The main system will be in a dm-crypt LUKS container on ...
0
votes
1answer
1k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
-2
votes
1answer
88 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
11
votes
2answers
844 views

Encryption over gigabit carrier ethernet

I would like to encrypt traffic between two data centres. Communication between the sites is provided as a standard provider bridge (s-vlan/802.1ad), so that our local vlan tags (c-vlan/802.1q) are ...
4
votes
1answer
300 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
13
votes
2answers
613 views

Why do my two ssh public keys have the same beginning?

I was updating the authorized_keys file on my server with the public key for the new laptop I got and I was surprised to discover that the two public keys began the same: # key 1 ssh-rsa ...
1
vote
1answer
233 views

File content is being modified sent over ftp

I am using openssl to encrypt my backups before send it to an ftp server where I store them. At first, when I tried to decrypt the files I was getting this error: openssl rsautl -decrypt -inkey ...
-1
votes
1answer
550 views

MACSec encryption over PBN?

This came up in a more generic link layer encryption question: Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 ...
2
votes
4answers
316 views

Easyest way to setup encrypted volume

What is the easyest way to set encrypted volume under linux? Basically, what I want is to have fixed size file in my home folder. When I mount it and type password, it should appear as regular ...
2
votes
2answers
2k views

How secure/private is full disk encryption on a VPS? [duplicate]

Security principles say that if someone else has physical access to a machine, then there is no security/privacy. I'm wondering about some examples of this in the case where I want to have a hosted ...
-2
votes
2answers
357 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
2
votes
1answer
273 views

Encrypting peer-to-peer application with iptables and stunnel

I'm running legacy applications in which I do not have access to the source code. These components talk to each other using plaintext on a particular port. I would like to be able to secure the ...
1
vote
1answer
179 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
6
votes
3answers
3k views

Is it possible to hardware accelerate LUKS encryption?

My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
-3
votes
1answer
41 views

The search for low traffic backup software [closed]

I'm an IT manager and i'm looking for an backup software that will stand some requirements: Minimum traffic between the server and the client. Encrypted the data while it transfer it. Automated. ...
1
vote
4answers
3k views

How to direct Apache Basic authentication over SSL?

Our intranet use mod_ldap to authenticate users to our internal Active Directory server as follows: <Location /***/> AuthType Basic AuthName "***" AuthBasicProvider ldap ...
1
vote
2answers
166 views

Cisco IOS Setting up a password/secret

I'm figuring out the basics to CISCO Ios commands and I am struggling to find out the answer to the following question: What would provide a better protection when you set up a password to allow ...
2
votes
2answers
1k views

Xerox scan to email and Exchange

We have two Xerox devices, a 7120 and a 7556 that we are trying to get to scan-to-email through our exchange 2010 server. Currently they are able to do so to local recipients by not authenticating. ...
4
votes
3answers
4k views

How would you manage keys with TrueCrypt in a business enviroment?

What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
5
votes
1answer
169 views

Determine if LUKS/dmcrypt key is present

I am writing a Chef LWRP to add a key to a LUKS container and I'm having difficulty coming up with a way to determine whether or not my key already exists. cryptsetup luksAddKey will happily add the ...
-1
votes
2answers
652 views

Installing linux on a McAfee Endpoint Encryption encrypted hard disk [closed]

Work have issued us all laptops - which is great but it has Windows 7 installed on it with McAfee hard disk encryption for security/insurance reasons. I use Ubuntu on my workstation although the IT ...
4
votes
2answers
6k views

File encryption solution for network share

We have recently received a few client contracts where all client files must be encrypted at all times. The challenge we are having is sharing encrypted files and simultaneous access on network ...
1
vote
0answers
132 views

udev rule for disconnection and hibernate/suspend

I have an external hard drive which contains different GPT partitions. One of them is a LVM partition. This partition is contained in a LVM volume group (called "volga"), which in turns splits into ...
10
votes
3answers
2k views

Mysql Encryption and Key managment

I am developing a local intranet system in PHP/MySQL to manage our client data. It seems that the best practice would be to encrypt the sensitive data on the MYSQL server as it is being entered. I ...
7
votes
6answers
20k views

How should someone create an encrypted password for /etc/shadow?

I am setting up a new account on a Linux box for Subversion repository access, and can send the password to the new user. However, I think there was a command line utility for this new user to encrypt ...
1
vote
3answers
2k views

Get cryptsetup working without typing a password

I have used cryptsetup to encrypt an external hard drive. I have no problem at using the encrypted hard drive in this way: /sbin/cryptsetup luksOpen /dev/sdc1 backup // typing password // ...
3
votes
3answers
304 views

openssl blowfish key limited to 256 bits?

I get the following error if I give a key that is greater than 64 hex caracters (64*4=256 bits). According to this official document, blowfish is able to support key from 32 to 448 bits. ...
1
vote
2answers
293 views

Secure a VMWare Image without Manual Password Entry

I stand before the following task: A VMWare "template" (based on SLES11) with custom software, that is to be distributed to some clients. They will receive a client specific copy of the template and ...
1
vote
0answers
84 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
1
vote
1answer
229 views

MariaDB + PAM: Is Remote Auth Secure?

I have a MariaDB instance which is using PAM to auth against Active Directory. Is remote authentication with this service secure? I ran a Wireshark trace during the auth process, and passwords are not ...
-3
votes
2answers
2k views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
-2
votes
1answer
118 views

On the fly encryption of data ( not your average type) [closed]

I'm looking to build my first nas. And i intend to connect over the internet to it. Because i will have some work documents too on it i want to make it as secure as possible. I have no ...
0
votes
1answer
172 views

Can encfs be compromised if attacker knows a file name on the encrypted file system?

Good morning, I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
2
votes
1answer
221 views

Does enigmail for thunderbird encrypt title of message

From what I've read, encrypting an email with pgp/mime with thunderbird+enigmail will encrypt the entire message including attachments. Does this also include the message subject title? If not, is ...
0
votes
1answer
236 views

Automate HP ProtectTools using MDT

Our company is currently using HP ProtectTools to perform Drive Encryption on our HP laptops. I recently built an MDT 2012 Deployment Share to automate our imaging process and would like to find a way ...
7
votes
3answers
5k views

Encrypted Remote Backups via Rsync?

I run a small modest CentOS server at my house for misc backups, etc. My friend on the other side of town also runs a small modest server at his house for similar purposes. We have been toying with ...
1
vote
1answer
545 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
6
votes
2answers
1k views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
0
votes
2answers
1k views

HTTPS Proxy which answers CONNECT with own certificate

I'm configuring a DMZ which has the following Scheme: Internet - Server A - Security Appliance - Server B - Intranet In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
7
votes
2answers
1k views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
0
votes
1answer
248 views

Aside from tools like 7-Zip, AxCrypt, and Kryptel, what is available that has multicore functionality and does AES-256? [closed]

I have a PowerEdge 1950 with 2 x E5405 2.00Ghz CPUs and 4GB of RAM sitting around. It's currently not doing anything at all so it's a perfect fit for this task. I have traditionally used 7-zip's ...
1
vote
1answer
261 views

Configuring encrypted e-mail in Outlook 2010

So we're setting up encrypted e-mail for our client running SBS with Exchange 2010 and Outlook 2010 on about a dozen machines (one running Outlook 2003, we're trying to talk them into upgrading it). ...
2
votes
1answer
901 views

How to decrypt files on a Windows domain, without user account password?

I have a Server 2008 file server, and and while here an employee encrypted several files, and has now since left to seek greener pastures. I want to decrypt the files, so others can access them. Can ...
2
votes
2answers
852 views

PGP decryption fails with error for one file

We store database backups encrypted with PGP Command Line 9.7.0. Files look like 2009.bak.pgp Here's command line used to backup these files: pgp --encrypt F:\2009.bak --recipient admin@company.mail ...
1
vote
1answer
435 views

Linux LTO-4/5 Drive Encryption

For a number of reasons I have been trying to find a way to encrypt my backup tapes. I'm currently running Bacula for my backups and it's support for Drive based encryption is I have to call a script ...
0
votes
1answer
854 views

PPTPd - configuration error?

an 5 01:09:12 vpn pptpd[1832]: GRE: read(fd=6,buffer=611860,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax ...
1
vote
3answers
1k views

Exchange: encrypted mail database?

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails? In other words, the admin would be responsible for all aspects of running ...
8
votes
1answer
5k views

How does the ssh-keygen .pub format work with .pem files?

The ssh-keygen command generates .pub files which it describes as "public key files", but they are a totally different format to most "public key files" I've usually seen, which are in PEM format. ...