Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

-2
votes
3answers
1k views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
0
votes
0answers
172 views

Do I have to somehow enable AES-NI on Nginx?

I've got CPU With AES-NI, I would like to use this function with nginx. ssl_engine aesni; - this parameter was used before openssl 1.0.0, but now, openssl is bundled with aesni support. And this ...
2
votes
1answer
290 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
1answer
378 views

DB encryption for Django web app without storing key on server

We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
-6
votes
1answer
52 views

encryption of fiber communications [closed]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
1
vote
1answer
52 views

encrypted (luks) partition had some damage - any chance?

I was trying to run Debian installer on top of an already luks-encrypted partition (I tried to do use cryptsetup in the console). I don't remember ever saying "yes, destroy" data, but what I see now, ...
11
votes
3answers
4k views

ZFS RAID and LUKS encryption in Linux

I'm planning to setup a set of 3x 2TB 7200rpm drives as a LUKS-encrypted Z-RAID pool in Linux (for a NAS solution). My understanding of the problem at hand is that the only way to achieve this is to ...
2
votes
1answer
365 views

EFS Recovery Agent not working

I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
2
votes
5answers
12k views

Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?

I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer. Is ...
0
votes
2answers
535 views

How to disable Null and Weak Ciphers on 389-Directory-Server

I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636. I tried to disable them by shutting down DS, ...
3
votes
2answers
868 views

Changed encfs password, but filenames didn't change

I thought changing the password with 'encfsctl passwd path/to/encrypted' would change all filenames. But it didn't work. Any ideas why? I got this, so the password was changed correctly: Enter ...
0
votes
1answer
37 views

How to re-create the symmetric key on Amazon RDS

We have some column encrypted by symmetric key. Now we want to upload our database to Amazon RDS (SQL Server). Can we do that? If yes, how?
4
votes
8answers
1k views

protecting my files from root

In a remote box, my files are 700-chmoded, but I'm worried that root may be reading them. Is there a way to add another layer of protection to avoid that, perhaps by encrypting them, but allowing ...
0
votes
3answers
155 views

Encrypt communications on local network

I'm developing a web application that runs on a server local to the same network as the client- basically, instead of a central web server, each customer site will have its own server hosted on the ...
2
votes
2answers
4k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
0
votes
1answer
263 views

Is OTR required for XMPP message encryption? [closed]

I use XMPP for sending instant messages from a bot in a server to a laptop client. I have full control of both the clients (bot and laptop client) and they are both connected to the same server which ...
0
votes
1answer
39 views

Moving data across countries securely [closed]

Currently I am planning on moving data from a number of remote sites across to our head quarters in Germany. The data is too large to replicate/copy over site to site VPN so I'm going to have to do ...
1
vote
0answers
45 views

Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)

This question does not rely on time... so it's not about keeping data on tape or anything similar. I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
14
votes
3answers
11k views

SSL Certificate Class 2 vs Class 3 vs Class 4

I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
2
votes
2answers
2k views

How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)

I'm trying to get pam_mount working on Ubuntu 12.04. I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it. Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or ...
2
votes
1answer
576 views

How can I encrypt 2008 Server Running under esxi

I have a need to run multiple 2008 R2 VMs under the free esxi. Storage will be local to the host. As I understand it, BitLocker is not a supported option in a VM environment from either Microsoft or ...
1
vote
0answers
715 views

How to encrypt a section within web.config using aspnet_regiis -pe or -pef

I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...). Having repeated failures with all types of syntax changes, so perhaps better to post ...
-2
votes
1answer
283 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
0
votes
1answer
332 views

Problems saving encrypted emails from Outlook into Document Management System

We use a commercially available Document Management System (DMS) which integrates with Microsoft Outlook 2010. This allows users to save important emails in the DMS so that their colleagues have ...
0
votes
2answers
115 views

How to recover key after using LuksRemovekey?

I have an encrypted partition on /dev/sda5, yesterday I use cryptsetup to remove the encryption using cryptsetup luksRemovekey /dev/sda5, but when I restart I have to provide a passphrase for ...
1
vote
2answers
84 views

Encrypted partition and hardware failure

I have a kind of philosophical question. I'm about to set a new backup server and as time is passing encryption of data seems more and more reasonable. However what if the harddrive goes bad. I know ...
1
vote
2answers
669 views

Migrate user and passwords to new linux box

I am trying to migrate old Centos 4.3 box to Centos 7. I have followed the migration steps from an article published way long back on ...
40
votes
7answers
30k views

What is a good solution to encrypt some files in unix?

I am looking for a utility to encrypt certain directories in Linux. I am not looking for any full disk encryption services, but simply to encrypt a few directories for the purposes of storing files in ...
6
votes
2answers
2k views

Encryption with ZFS on linux

Does ZFS on Linux already support Encryption? If not, is it planned? I found tons of info for ZFS+LUKS but that's absolutely uninteresting: I want ZFS encryption so that I can do replication using ...
1
vote
2answers
815 views

GELI / ELI at FreeBSD - changing passphrase

How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way? I've looked in the man ...
2
votes
1answer
485 views

How can I transfer a certificate from an account to another on Windows

Long story short, I have some configuration file for a tool containing sensitive information and the client want them encrypted. I want to use EFS for this, but there is a problem : the account doing ...
3
votes
2answers
472 views

Should Carrier Ethernet traffic be encrypted?

I'm looking for a best practice answer. We have a 100Mb point to point Carrier Ethernet circuit between a corporate office and an offsite data center. Basically we have SQL traffic replicating to ...
2
votes
1answer
182 views

Encrypted User Directory on FreeBSD?

I'm running FreeBSD and I'd like to have user's files stored encrypted using his/her password, and have seamless SSH access to those files as well (provided that the user always uses password-based ...
1
vote
2answers
6k views

Ubuntu 13.10 - How to disable LVM and cryptsetup? cryptsetup: evms_activate is not available

I am trying to remove whole drive encryption from my Ubuntu installation. I've run Ubuntu from Live CD, mounted crypt partition and copied it to another partition /dev/sda3. sudo cryptsetup luksOpen ...
2
votes
3answers
3k views

Mount EncFS at boot

am trying to get an EncFS encrypted home to mount at boot without user input (directly, not via ssh). Have tried various solutions (adding a volume entry in pam_mount.conf.xml, various tweaks to ...
4
votes
5answers
52k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
1
vote
2answers
193 views

Office 365 E3 with Exchange Hosted Encryption (EHE)

I have a client who wants to move to Office 365. They are currently running on a trial of Office 365 E3 plan. My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
2
votes
2answers
1k views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
2
votes
1answer
321 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine ...
1
vote
1answer
183 views

Storing Postfix's passwords in MySQL without encryption

I've been struggling with Postfix for past few days. Finally I managed to set it up with virtual mailboxes listed in MySQL and passwords encrypted with PAM. It was just then that I realized I need the ...
1
vote
2answers
126 views

EFS on MySql Data Folder Prevents MySql Service from Starting

I'm trying to encrypt my MySql database at rest. I have been looking at Truecrypt and EFS - I ultimately went with EFS because I can simply encrypt an existing folder without having to create a ...
2
votes
3answers
2k views

Mac OSX Server: svn via ssh command line and encrypted passwords

When I log into our mac mini server running OSX 10.6 via ssh and use svn I get the message: ATTENTION! Your password for authentication realm: can only be stored to disk unencrypted! You are ...
1
vote
2answers
2k views

Which Layer of the OSI model is responsible for encryption in WLANS?

Since WEP and WPA/WPA2 encrypt the payload of 802.11 MAC frames and we know that MAC goes under the Data Link Layer (Layer 2), can we also assume that encryption occurs in Layer 2 as well? At least ...
0
votes
0answers
98 views

How to solve problematic cpu load due to encryption when using SFTP on a VM

my company is trying offer a sftp service for a big amount of customers. The serving machine will be on a VM and tests have shown that, with an increasing amount of simultaneous users, the cpu becomes ...
14
votes
5answers
1k views

Encrypted offsite backups - where to store the encryption key?

In addition to regular onsite backups (kept in a fire resistant safe), we also send tapes offsite once a month, encrypted with AES. So if our site is one day vaporised by an alien heat ray, we should ...
0
votes
2answers
100 views

Encrypted off-site data storage

My business has a rather unique problem. We work in China and we want to implement a file server paradigm which does not store any files locally, but rather in a server overseas. Applications would be ...
2
votes
1answer
2k views

How can I enable encryption for SQLite3 in PHP5.3? [closed]

The php manual for SQLite3::open has this information: public bool SQLite3::open ( string $filename [, int $flags = SQLITE3_OPEN_READWRITE | SQLITE3_OPEN_CREATE [, string $encryption_key ...
4
votes
2answers
3k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
1
vote
1answer
96 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
1
vote
1answer
83 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...