Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

3
votes
1answer
865 views

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
3
votes
2answers
1k views

Why does Microsoft.com have a TXT record with only a hash code? [closed]

What is the purpose of the TXT record in the root Microsoft.com zone? I don't see any reasonable tie into SPF, SenderID, DomainKeys, or even TLS-OBC or DANE for TLS. microsoft.com text = ...
3
votes
1answer
663 views

Reboot Encrypted System Remotely Without Password Query

Are there any standard solutions to rebooting an encrypted system remotely without requiring a password on the next boot? The system in question is an Ubuntu encrypted with LUKS root partition and an ...
0
votes
2answers
215 views

Best Practice: Implementing a Full Disk Encryption on laptops

We are thinking about using TruEncrypt full disk encryption to protect the data on our laptops (roughly 15-20 in the healthcare field - XP & Win7). And I was wonder about backups, and not per say ...
12
votes
2answers
5k views

GPG - why am I encrypting with subkey instead of primary key?

When encrypting a file to send to a collaborator, I see this message: gpg: using subkey XXXX instead of primary key YYYY Why would that be? I've noticed that when they send me an encrypted file, ...
2
votes
2answers
2k views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
2
votes
2answers
400 views

Can root become user and access encrypted home?

The home is mounted unencrypted on login. I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess. I also tried changing the user's password, ...
0
votes
1answer
252 views

Access via sftp/scp an encrypted disk

I would like to do something really paranoid but I am not sure it could be done at least easily... Let's see if I can explain properly: I have a server running debian (could be changed to any other ...
0
votes
2answers
99 views

Encrypted off-site data storage

My business has a rather unique problem. We work in China and we want to implement a file server paradigm which does not store any files locally, but rather in a server overseas. Applications would be ...
1
vote
1answer
355 views

Decommissioning PKI - How do I set a CRL Next update to null?

I am planning on deploying two Windows 2008R2 PKIs: One for legacy devices that don't support SHA-2 / ECP and another one that does support it. When the time comes to decommission the SHA1 ...
5
votes
3answers
1k views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
6
votes
1answer
4k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? ...
2
votes
3answers
1k views

How to encrypt a small folder and copy that to Google Drive or DropBox?

Right now I use the following to back up a small project folder to a USB Flash drive: alias a='alias' a dateseq='date "+%Y-%m-%d %H:%M:%S"' a backup_proj='cp -a ~/code/MyProj ...
1
vote
1answer
243 views

Reliable PGP / GnuPG decryption for Mac OSX Mail

I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office. I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
1
vote
1answer
230 views

Does double encryption occur when Outlook Anywhere automatically encrypts MAPI data?

Does this checkbox mean that MAPI-based RPC data will be encrypted and then encapsulated over HTTPS, resulting in double encryption? I'm asking this question based on this understanding of terms.
-3
votes
4answers
2k views

How long should a password be, for filesystem encryption? [closed]

I want to encrypt my filesystem with encfs, but I don't know how long my password should be. I'm gonna be using AES 256, with blocks of 4096 bits. How many guesses per second can I expect an ...
1
vote
0answers
671 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
9
votes
2answers
2k views

Encrypt git repository on server (safe against theft of physical hardware)

I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
2
votes
0answers
111 views

Exchange 2007 and Droid Rezound SD CARD Encryption

We have an Exchange 2007 server that supports many DROIDX phones. The configurations are setup to only enforce a pin code. However on the DROID REZOUND, it forces you to encrypt the SDCARD. This ...
2
votes
3answers
461 views

Possible to per file encrypt cloud storage? [closed]

With the many cloud storage providers that there now exist, would it be possible to add a layer of encryption before the files are saved? It would be possible to make an encrypted partition in a ...
2
votes
2answers
2k views

How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)

I'm trying to get pam_mount working on Ubuntu 12.04. I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it. Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or ...
2
votes
2answers
304 views

Does dm-crypt support journaling filesystem transactional guarantees?

I'm considering using ext4 on encrypted LVM (which uses LUKS and dm-crypt). Will the transactional guarantees in ext4's journaling be preserved? Bonus: where may I find authoritative information ...
2
votes
1answer
1k views

What are the options for storing encrypted data on FreeNAS?

I'm looking at implementing a mirrored pair of FreeNAS servers as file repositories. The only question still to be answered is the physical security. I typically encrypt the underlying drives on all ...
2
votes
1answer
3k views

VPN Encryption Domain

I'm trying to connect to a counterparty using VPN IPsec. I have a standard cable broadband connection with a single static IP address. The counterparty have asked me for my "Public IP Address Assigned ...
1
vote
2answers
761 views

Encrypt communication between mail servers

I'm using my own root server for my email accounts. All the traffic between my pc and my server is encrypted. Is there a possibility to force my email-server to communicate with other email-servers ...
0
votes
1answer
769 views

Wireshark/encryption and openvpn

I have a linux openvpn router and a home dsl modem. The dsl modem has port 1234 open and forwards it onto eth0 on the linux router. I can connect to the router from a remote location no problem. All ...
3
votes
1answer
580 views

Are there any Microsoft Exchange Clients for iOS and Android that store their local data in an encrypted manner?

I don't feel like this is a product recommendation question, more of a "does this tech even exist and is it feasible" question, but if I'm wrong, feel free to give this question the boot. Context: ...
2
votes
2answers
2k views

Xerox scan to email and Exchange

We have two Xerox devices, a 7120 and a 7556 that we are trying to get to scan-to-email through our exchange 2010 server. Currently they are able to do so to local recipients by not authenticating. ...
2
votes
3answers
1k views

decrypting AES files in an apache module?

I have a client with a security policy compliance requirement to encrypt certain files on disk. The obvious way to do this is with Device-mapper and an AES crypto module However the current system ...
1
vote
2answers
169 views

Encrypting traffic on remote end of SSH tunnel

Using an example of someone connecting to a VPS, an SSH tunnel will encrypt any traffic coming from the user to the VPS. Once it reaches the VPS network, the traffic is not encrypted and is easily ...
2
votes
2answers
1k views

Different results from GnuPG and OpenSSL when using AES256 encryption

Text: apple Pass: password openssl aes-256-cbc -e -a -in apple.txt Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ= gpg -c --cipher-algo AES256 apple.txt Output: ...
14
votes
3answers
10k views

SSL Certificate Class 2 vs Class 3 vs Class 4

I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
5
votes
2answers
429 views

Windows Server 2008 BitLocker

I would like to configure whole disk encryption on all of my Domain Controllers. Is BitLocker an acceptable method to do this? What are the potential problems with whole disk encryption on a Domain ...
-1
votes
2answers
360 views

Whole Disk Encryption and Dropbox [closed]

What is the best way to configure whole disk encryption on two laptops sharing a Dropbox? If I encrypt both drives, what will happen to the Dropbox files?
5
votes
2answers
3k views

How to detect Dell TPM from inside Windows?

I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
1
vote
1answer
285 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments?

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
2answers
1k views

Can't decrypt imaps traffic in Wireshark

I have currently problems to decrypt IMAPS Traffic in Wireshark. I set up the SSL Key with the correct IP Address, Port 993 and Protocol imap. The Key is the correct one. That is what I see in the ...
6
votes
2answers
4k views

Are there huge drawbacks to using an excel 2010 document for password management?

At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
3
votes
2answers
466 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
0
votes
1answer
648 views

Wildcard certificate with SAN

I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
3
votes
1answer
548 views

Linux LTO-4/5 Drive Encryption

For a number of reasons I have been trying to find a way to encrypt my backup tapes. I'm currently running Bacula for my backups and it's support for Drive based encryption is I have to call a script ...
7
votes
2answers
1k views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
2
votes
1answer
89 views

practical document encryption in shared environment

I can't seem to find a good, practical way to encrypt documents on a shared drive... This is a samba share on centos using ADS auth. The primary doc format will be PDF. Is there a good on-thy-fly ...
1
vote
1answer
548 views

Configure Apache2.2 as http to https encrypter/converter

I am using Apache 2.2 on SUSE 10 with mod_ssl. My problem: I want to connect a client(supporting only http) to a Server(supporting only HTTPS). So I thought of deploying Apache as a proxy to convert ...
1
vote
1answer
348 views

fully encrypted MediaWiki base

Is it possible to completely encrypt a MediaWiki installation? I'm not looking for a way to finely control access rights or have some encrypted articles or even just parts of articles encrypted. ...
1
vote
3answers
301 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
0
votes
2answers
1k views

HTTPS Proxy which answers CONNECT with own certificate

I'm configuring a DMZ which has the following Scheme: Internet - Server A - Security Appliance - Server B - Intranet In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
1
vote
0answers
701 views

How to encrypt a section within web.config using aspnet_regiis -pe or -pef

I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...). Having repeated failures with all types of syntax changes, so perhaps better to post ...
-1
votes
1answer
686 views

Filesystem encryption settings during install?

I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID. Should I encrypt the drive partition, the software RAID device, or both? Should I ...
1
vote
1answer
118 views

ZFS: can per-user encrypted filesystems be deduplicated on block-level?

Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted? What ...