Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

2
votes
3answers
491 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
-3
votes
1answer
72 views

Is there a way to prevent users from transfer svn checkout files to another computer or data storage?

I have a SVN server under CentOS 6.0 and I would like to know if is there a way to prevent users from transfer svn checkout files to another computer or data storage? Or just similar a encryption ...
2
votes
2answers
65 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
0
votes
1answer
389 views

How to setup Samba4 to enable NTFS encryption?

I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
2
votes
2answers
532 views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
1
vote
0answers
245 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
1answer
434 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
2
votes
1answer
671 views

How to mount a SAMBA shared folder from linux client machine using encrypted password?

I am trying to setup an auto-mounting network drive. The network drive requires a user/pass. In the man page for "mount.cifs" there are two ways to provide the user/pass. 1-[not recommended] put the ...
1
vote
1answer
54 views

How can I remotely verify that a file is encrypted?

Is there any way to remotely verify that a file is encrypted? I have a very complex problem, but here's a simplified scenario that illustrates the point: I have a server that generates very large ...
-5
votes
1answer
339 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
1
vote
2answers
2k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
1answer
83 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
0
votes
1answer
97 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
1
vote
3answers
794 views

Exchange: encrypted mail database?

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails? In other words, the admin would be responsible for all aspects of running ...
0
votes
1answer
2k views

NAS4Free disk encryption and ZFS error

I have installed a NAS4Free on a VM, and as recommended, I installed it on a 1GB virtual disk, and assigned another disk 500GB to this VM for file storage. I have created the disk, encrypted it, ...
2
votes
2answers
1k views

SQL Server 2012 - Transparent Data Encryption not available in this edition

Let me start by saying that the instance of SQL Server 2012 I am attempting to set up TDE (Transparent Data Encryption) on, is the Enterprise edition. However, when following the MSDN tutorial ...
1
vote
1answer
343 views

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
2
votes
1answer
109 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email ...
1
vote
1answer
99 views

When using Transparent Data Encryption for SQL Server 2012, can you use different encryption keys for each database?

I am new to using TDE for SQL Server and one of the requirements that a client has is that their database be encrypted using a different key that is unique to only their database. I was wondering if ...
1
vote
2answers
537 views

Store password AES encrypted in MySQL after creating a bcrypt hash

I am building an application and storing user passwords in a table in MySQL. I am already using bcrypt but wondering, does it make any senses to AES_ENCRYT() the hashed password before storing into ...
3
votes
1answer
164 views

running arbitrary, encrypted shell commands via http(s)?

I'd like to be able to encode maintenance scripts to run on-demand remotely. edit: Good use-case: webhooks. e.g. trigger CI + staging deployment whenever someone pushes code to github. If I was to ...
0
votes
3answers
418 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
2
votes
2answers
999 views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
4
votes
2answers
368 views

Encrypted storage for clustered MySQL

I have a requirement to provide a highly available MySQL database with encryption-at-rest on a 2.6.32 linux kernel. The 'highly available' part isn't that hard, but the 'with encryption-at-rest' is ...
-2
votes
2answers
773 views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
3
votes
2answers
163 views

Encrypt content of disk without entering password at boot time

I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I ...
1
vote
1answer
437 views

Encrypting iSCSI Volume attached to Windows Server using Truecrypt

I'm using a QNAP-439 Pro II SAN. Full disk encryption is currently enabled. But since you take a 80% performance hit by enabling encryption I'm thinking about disabling encryption on the SAN and ...
0
votes
1answer
146 views

How do I detect and possibly change the encryption algorithm used by Vim's “encrypt” mode? [closed]

I'd like to start using "vim -X" to store encrypted text files. This is a nice introduction on how to do it: ...
1
vote
2answers
2k views

RC4_128 to avoid BEAST?

I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config. This results in a 256 bit encrypted connection. However, since it's a CBC method, ...
0
votes
2answers
939 views

Should I encrypt my VPS' harddrive? [closed]

Is it feasible to remotely encrypt the hard drive of a virtual server (VPS, cloud server like EC2)? This would help to protect the contents of the hard drive from snooping by the host or as a result ...
3
votes
1answer
577 views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. After this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 ...
8
votes
4answers
994 views

Encrypt temporary password using public ssh key

I manage a virtual office and our staff uses both SSH keys and passwords for authentication. If one of our staff forgets his password, is there a way to encrypt a temporary password using his public ...
3
votes
1answer
602 views

Changed encfs password, but filenames didn't change

I thought changing the password with 'encfsctl passwd path/to/encrypted' would change all filenames. But it didn't work. Any ideas why? I got this, so the password was changed correctly: Enter ...
3
votes
1answer
650 views

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
3
votes
2answers
726 views

Why does Microsoft.com have a TXT record with only a hash code? [closed]

What is the purpose of the TXT record in the root Microsoft.com zone? I don't see any reasonable tie into SPF, SenderID, DomainKeys, or even TLS-OBC or DANE for TLS. microsoft.com text = ...
3
votes
1answer
341 views

Reboot Encrypted System Remotely Without Password Query

Are there any standard solutions to rebooting an encrypted system remotely without requiring a password on the next boot? The system in question is an Ubuntu encrypted with LUKS root partition and an ...
0
votes
2answers
196 views

Best Practice: Implementing a Full Disk Encryption on laptops

We are thinking about using TruEncrypt full disk encryption to protect the data on our laptops (roughly 15-20 in the healthcare field - XP & Win7). And I was wonder about backups, and not per say ...
10
votes
2answers
3k views

GPG - why am I encrypting with subkey instead of primary key?

When encrypting a file to send to a collaborator, I see this message: gpg: using subkey XXXX instead of primary key YYYY Why would that be? I've noticed that when they send me an encrypted file, ...
2
votes
2answers
1k views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
2
votes
2answers
313 views

Can root become user and access encrypted home?

The home is mounted unencrypted on login. I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess. I also tried changing the user's password, ...
0
votes
1answer
180 views

Access via sftp/scp an encrypted disk

I would like to do something really paranoid but I am not sure it could be done at least easily... Let's see if I can explain properly: I have a server running debian (could be changed to any other ...
0
votes
2answers
89 views

Encrypted off-site data storage

My business has a rather unique problem. We work in China and we want to implement a file server paradigm which does not store any files locally, but rather in a server overseas. Applications would be ...
1
vote
1answer
295 views

Decommissioning PKI - How do I set a CRL Next update to null?

I am planning on deploying two Windows 2008R2 PKIs: One for legacy devices that don't support SHA-2 / ECP and another one that does support it. When the time comes to decommission the SHA1 ...
4
votes
3answers
936 views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
5
votes
1answer
2k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? ...
2
votes
3answers
905 views

How to encrypt a small folder and copy that to Google Drive or DropBox?

Right now I use the following to back up a small project folder to a USB Flash drive: alias a='alias' a dateseq='date "+%Y-%m-%d %H:%M:%S"' a backup_proj='cp -a ~/code/MyProj ...
1
vote
1answer
188 views

Does double encryption occur when Outlook Anywhere automatically encrypts MAPI data?

Does this checkbox mean that MAPI-based RPC data will be encrypted and then encapsulated over HTTPS, resulting in double encryption? I'm asking this question based on this understanding of terms.
-3
votes
4answers
1k views

How long should a password be, for filesystem encryption? [closed]

I want to encrypt my filesystem with encfs, but I don't know how long my password should be. I'm gonna be using AES 256, with blocks of 4096 bits. How many guesses per second can I expect an ...
1
vote
0answers
563 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
8
votes
2answers
2k views

Encrypt git repository on server (safe against theft of physical hardware)

I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...