Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
2answers
77 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
1
vote
1answer
565 views

How to setup Samba4 to enable NTFS encryption? [closed]

I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
2
votes
2answers
1k views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
1
vote
0answers
270 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
1answer
847 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
3
votes
1answer
2k views

How to mount a SAMBA shared folder from linux client machine using encrypted password?

I am trying to setup an auto-mounting network drive. The network drive requires a user/pass. In the man page for "mount.cifs" there are two ways to provide the user/pass. 1-[not recommended] put the ...
1
vote
1answer
55 views

How can I remotely verify that a file is encrypted?

Is there any way to remotely verify that a file is encrypted? I have a very complex problem, but here's a simplified scenario that illustrates the point: I have a server that generates very large ...
-5
votes
1answer
589 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
2
votes
3answers
5k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
1answer
92 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
0
votes
1answer
151 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
1
vote
3answers
2k views

Exchange: encrypted mail database?

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails? In other words, the admin would be responsible for all aspects of running ...
0
votes
1answer
2k views

NAS4Free disk encryption and ZFS error

I have installed a NAS4Free on a VM, and as recommended, I installed it on a 1GB virtual disk, and assigned another disk 500GB to this VM for file storage. I have created the disk, encrypted it, ...
3
votes
2answers
3k views

SQL Server 2012 - Transparent Data Encryption not available in this edition

Let me start by saying that the instance of SQL Server 2012 I am attempting to set up TDE (Transparent Data Encryption) on, is the Enterprise edition. However, when following the MSDN tutorial ...
1
vote
1answer
814 views

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
4
votes
2answers
126 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email ...
1
vote
1answer
118 views

When using Transparent Data Encryption for SQL Server 2012, can you use different encryption keys for each database?

I am new to using TDE for SQL Server and one of the requirements that a client has is that their database be encrypted using a different key that is unique to only their database. I was wondering if ...
1
vote
2answers
835 views

Store password AES encrypted in MySQL after creating a bcrypt hash

I am building an application and storing user passwords in a table in MySQL. I am already using bcrypt but wondering, does it make any senses to AES_ENCRYT() the hashed password before storing into ...
3
votes
1answer
219 views

running arbitrary, encrypted shell commands via http(s)?

I'd like to be able to encode maintenance scripts to run on-demand remotely. edit: Good use-case: webhooks. e.g. trigger CI + staging deployment whenever someone pushes code to github. If I was to ...
1
vote
3answers
527 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
2
votes
2answers
2k views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
4
votes
2answers
748 views

Encrypted storage for clustered MySQL

I have a requirement to provide a highly available MySQL database with encryption-at-rest on a 2.6.32 linux kernel. The 'highly available' part isn't that hard, but the 'with encryption-at-rest' is ...
-2
votes
3answers
1k views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
3
votes
2answers
205 views

Encrypt content of disk without entering password at boot time

I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I ...
1
vote
1answer
624 views

Encrypting iSCSI Volume attached to Windows Server using Truecrypt

I'm using a QNAP-439 Pro II SAN. Full disk encryption is currently enabled. But since you take a 80% performance hit by enabling encryption I'm thinking about disabling encryption on the SAN and ...
0
votes
1answer
276 views

How do I detect and possibly change the encryption algorithm used by Vim's “encrypt” mode? [closed]

I'd like to start using "vim -X" to store encrypted text files. This is a nice introduction on how to do it: ...
1
vote
2answers
2k views

RC4_128 to avoid BEAST?

I'm using a Verisign Extended SSL cert which is piped downstream by nginx running the default cipher suite config. This results in a 256 bit encrypted connection. However, since it's a CBC method, ...
0
votes
2answers
2k views

Should I encrypt my VPS' harddrive? [closed]

Is it feasible to remotely encrypt the hard drive of a virtual server (VPS, cloud server like EC2)? This would help to protect the contents of the hard drive from snooping by the host or as a result ...
3
votes
1answer
1k views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. For this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 Here's ...
8
votes
4answers
2k views

Encrypt temporary password using public ssh key

I manage a virtual office and our staff uses both SSH keys and passwords for authentication. If one of our staff forgets his password, is there a way to encrypt a temporary password using his public ...
3
votes
2answers
994 views

Changed encfs password, but filenames didn't change

I thought changing the password with 'encfsctl passwd path/to/encrypted' would change all filenames. But it didn't work. Any ideas why? I got this, so the password was changed correctly: Enter ...
3
votes
1answer
947 views

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
3
votes
1answer
847 views

Reboot Encrypted System Remotely Without Password Query

Are there any standard solutions to rebooting an encrypted system remotely without requiring a password on the next boot? The system in question is an Ubuntu encrypted with LUKS root partition and an ...
0
votes
2answers
227 views

Best Practice: Implementing a Full Disk Encryption on laptops

We are thinking about using TruEncrypt full disk encryption to protect the data on our laptops (roughly 15-20 in the healthcare field - XP & Win7). And I was wonder about backups, and not per say ...
12
votes
2answers
5k views

GPG - why am I encrypting with subkey instead of primary key?

When encrypting a file to send to a collaborator, I see this message: gpg: using subkey XXXX instead of primary key YYYY Why would that be? I've noticed that when they send me an encrypted file, ...
2
votes
2answers
2k views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
2
votes
2answers
470 views

Can root become user and access encrypted home?

The home is mounted unencrypted on login. I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess. I also tried changing the user's password, ...
0
votes
1answer
293 views

Access via sftp/scp an encrypted disk

I would like to do something really paranoid but I am not sure it could be done at least easily... Let's see if I can explain properly: I have a server running debian (could be changed to any other ...
0
votes
2answers
101 views

Encrypted off-site data storage

My business has a rather unique problem. We work in China and we want to implement a file server paradigm which does not store any files locally, but rather in a server overseas. Applications would be ...
1
vote
1answer
384 views

Decommissioning PKI - How do I set a CRL Next update to null?

I am planning on deploying two Windows 2008R2 PKIs: One for legacy devices that don't support SHA-2 / ECP and another one that does support it. When the time comes to decommission the SHA1 ...
5
votes
3answers
2k views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
6
votes
1answer
5k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? ...
2
votes
3answers
1k views

How to encrypt a small folder and copy that to Google Drive or DropBox?

Right now I use the following to back up a small project folder to a USB Flash drive: alias a='alias' a dateseq='date "+%Y-%m-%d %H:%M:%S"' a backup_proj='cp -a ~/code/MyProj ...
1
vote
1answer
256 views

Reliable PGP / GnuPG decryption for Mac OSX Mail

I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office. I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
1
vote
1answer
250 views

Does double encryption occur when Outlook Anywhere automatically encrypts MAPI data?

Does this checkbox mean that MAPI-based RPC data will be encrypted and then encapsulated over HTTPS, resulting in double encryption? I'm asking this question based on this understanding of terms.
-3
votes
4answers
2k views

How long should a password be, for filesystem encryption? [closed]

I want to encrypt my filesystem with encfs, but I don't know how long my password should be. I'm gonna be using AES 256, with blocks of 4096 bits. How many guesses per second can I expect an ...
1
vote
0answers
719 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
9
votes
2answers
2k views

Encrypt git repository on server (safe against theft of physical hardware)

I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
2
votes
0answers
111 views

Exchange 2007 and Droid Rezound SD CARD Encryption

We have an Exchange 2007 server that supports many DROIDX phones. The configurations are setup to only enforce a pin code. However on the DROID REZOUND, it forces you to encrypt the SDCARD. This ...
2
votes
3answers
500 views

Possible to per file encrypt cloud storage? [closed]

With the many cloud storage providers that there now exist, would it be possible to add a layer of encryption before the files are saved? It would be possible to make an encrypted partition in a ...