Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

0
votes
1answer
301 views

Aside from tools like 7-Zip, AxCrypt, and Kryptel, what is available that has multicore functionality and does AES-256? [closed]

I have a PowerEdge 1950 with 2 x E5405 2.00Ghz CPUs and 4GB of RAM sitting around. It's currently not doing anything at all so it's a perfect fit for this task. I have traditionally used 7-zip's ...
1
vote
1answer
353 views

Configuring encrypted e-mail in Outlook 2010

So we're setting up encrypted e-mail for our client running SBS with Exchange 2010 and Outlook 2010 on about a dozen machines (one running Outlook 2003, we're trying to talk them into upgrading it). ...
2
votes
1answer
2k views

How to decrypt files on a Windows domain, without user account password?

I have a Server 2008 file server, and and while here an employee encrypted several files, and has now since left to seek greener pastures. I want to decrypt the files, so others can access them. Can ...
15
votes
5answers
2k views

Encrypted offsite backups - where to store the encryption key?

In addition to regular onsite backups (kept in a fire resistant safe), we also send tapes offsite once a month, encrypted with AES. So if our site is one day vaporised by an alien heat ray, we should ...
2
votes
2answers
2k views

PGP decryption fails with error for one file

We store database backups encrypted with PGP Command Line 9.7.0. Files look like 2009.bak.pgp Here's command line used to backup these files: pgp --encrypt F:\2009.bak --recipient admin@company.mail ...
2
votes
3answers
4k views

Mount EncFS at boot

am trying to get an EncFS encrypted home to mount at boot without user input (directly, not via ssh). Have tried various solutions (adding a volume entry in pam_mount.conf.xml, various tweaks to ...
2
votes
1answer
383 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine ...
1
vote
1answer
411 views

MariaDB + PAM: Is Remote Auth Secure?

I have a MariaDB instance which is using PAM to auth against Active Directory. Is remote authentication with this service secure? I ran a Wireshark trace during the auth process, and passwords are not ...
0
votes
1answer
2k views

PPTPd - configuration error?

an 5 01:09:12 vpn pptpd[1832]: GRE: read(fd=6,buffer=611860,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax ...
12
votes
1answer
9k views

How does the ssh-keygen .pub format work with .pem files?

The ssh-keygen command generates .pub files which it describes as "public key files", but they are a totally different format to most "public key files" I've usually seen, which are in PEM format. ...
16
votes
3answers
10k views

How to disable swap files in ESXi?

We are running a few Solaris / Linux VMs on ESXi that contain very sensitive encrypted data that eventually get decrypted as required in memory. Everything is fine, except for the ESXi swap files ...
3
votes
3answers
474 views

openssl blowfish key limited to 256 bits?

I get the following error if I give a key that is greater than 64 hex caracters (64*4=256 bits). According to this official document, blowfish is able to support key from 32 to 448 bits. ...
2
votes
1answer
111 views

How to use an encrypted disk without needing an unencrypted boot partition

I would like to know if there is a way to encrypt a linux system which does not require a small unencrypted /boot partition. In addition I would like to know if encryption can be implemented on an ...
1
vote
1answer
786 views

Why are these dmsetup commands there?

On this page are there examples of LUKS encryptions. Example below. Why are the dmsetup commands there? What do they do? dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1 losetup ...
4
votes
1answer
426 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
-3
votes
1answer
76 views

How to view a GPG encrypted file securely? [closed]

When I decrypt / view a gpg file it is: decrypted in the terminal / console and thus gets into history the decryption goes into video memory and into normal memory and into the swap (if not ...
8
votes
3answers
6k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
2
votes
1answer
55 views

create log for an encrypted tar

I want to create an encrypted tar but also I want to have a log of what tar has compressed, I'm using the following command: tar -cvvf - --files-from=/root/backup.cfg | openssl des3 -salt -k ...
2
votes
3answers
545 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
-3
votes
1answer
76 views

Is there a way to prevent users from transfer svn checkout files to another computer or data storage?

I have a SVN server under CentOS 6.0 and I would like to know if is there a way to prevent users from transfer svn checkout files to another computer or data storage? Or just similar a encryption ...
2
votes
2answers
78 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
1
vote
1answer
592 views

How to setup Samba4 to enable NTFS encryption? [closed]

I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
2
votes
2answers
1k views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
1
vote
0answers
273 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
1answer
912 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
3
votes
1answer
2k views

How to mount a SAMBA shared folder from linux client machine using encrypted password?

I am trying to setup an auto-mounting network drive. The network drive requires a user/pass. In the man page for "mount.cifs" there are two ways to provide the user/pass. 1-[not recommended] put the ...
1
vote
1answer
55 views

How can I remotely verify that a file is encrypted?

Is there any way to remotely verify that a file is encrypted? I have a very complex problem, but here's a simplified scenario that illustrates the point: I have a server that generates very large ...
-5
votes
1answer
609 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
2
votes
3answers
5k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
1answer
95 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
0
votes
1answer
166 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
1
vote
3answers
2k views

Exchange: encrypted mail database?

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails? In other words, the admin would be responsible for all aspects of running ...
0
votes
1answer
2k views

NAS4Free disk encryption and ZFS error

I have installed a NAS4Free on a VM, and as recommended, I installed it on a 1GB virtual disk, and assigned another disk 500GB to this VM for file storage. I have created the disk, encrypted it, ...
3
votes
2answers
3k views

SQL Server 2012 - Transparent Data Encryption not available in this edition

Let me start by saying that the instance of SQL Server 2012 I am attempting to set up TDE (Transparent Data Encryption) on, is the Enterprise edition. However, when following the MSDN tutorial ...
1
vote
1answer
995 views

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
4
votes
2answers
127 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email ...
1
vote
1answer
118 views

When using Transparent Data Encryption for SQL Server 2012, can you use different encryption keys for each database?

I am new to using TDE for SQL Server and one of the requirements that a client has is that their database be encrypted using a different key that is unique to only their database. I was wondering if ...
1
vote
2answers
895 views

Store password AES encrypted in MySQL after creating a bcrypt hash

I am building an application and storing user passwords in a table in MySQL. I am already using bcrypt but wondering, does it make any senses to AES_ENCRYT() the hashed password before storing into ...
3
votes
1answer
230 views

running arbitrary, encrypted shell commands via http(s)?

I'd like to be able to encode maintenance scripts to run on-demand remotely. edit: Good use-case: webhooks. e.g. trigger CI + staging deployment whenever someone pushes code to github. If I was to ...
1
vote
3answers
538 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
2
votes
2answers
2k views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
5
votes
2answers
819 views

Encrypted storage for clustered MySQL

I have a requirement to provide a highly available MySQL database with encryption-at-rest on a 2.6.32 linux kernel. The 'highly available' part isn't that hard, but the 'with encryption-at-rest' is ...
-2
votes
3answers
2k views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
4
votes
2answers
213 views

Encrypt content of disk without entering password at boot time

I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I ...
1
vote
1answer
648 views

Encrypting iSCSI Volume attached to Windows Server using Truecrypt

I'm using a QNAP-439 Pro II SAN. Full disk encryption is currently enabled. But since you take a 80% performance hit by enabling encryption I'm thinking about disabling encryption on the SAN and ...
0
votes
1answer
296 views

How do I detect and possibly change the encryption algorithm used by Vim's “encrypt” mode? [closed]

I'd like to start using "vim -X" to store encrypted text files. This is a nice introduction on how to do it: ...
1
vote
2answers
2k views

RC4_128 to avoid BEAST?

I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config. This results in a 256 bit encrypted connection. However, since it's a CBC method, ...
0
votes
2answers
2k views

Should I encrypt my VPS' harddrive? [closed]

Is it feasible to remotely encrypt the hard drive of a virtual server (VPS, cloud server like EC2)? This would help to protect the contents of the hard drive from snooping by the host or as a result ...
3
votes
1answer
2k views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. For this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 Here's ...
8
votes
4answers
2k views

Encrypt temporary password using public ssh key

I manage a virtual office and our staff uses both SSH keys and passwords for authentication. If one of our staff forgets his password, is there a way to encrypt a temporary password using his public ...