Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

4
votes
3answers
429 views

How can I cache a Subversion password on a server, without storing it in unencrypted form?

My Subversion server only provides access via HTTPS; support for svn+ssh has been dropped because we wanted to avoid creating system users on that machine just for SVN access. Now I'm trying to ...
6
votes
3answers
2k views

Is it possible to hardware accelerate LUKS encryption?

My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
1
vote
1answer
1k views

ESXi encypted VMFS?

Does anyone know a (free?) way to have a fully encrypted local-disk (no NFS,iSCSI,FC) VMFS inside the hypervisor itself? I am using ESXi 4.1 U2.
19
votes
4answers
1k views

Are encrypted backups a good idea?

I'm in charge of a small set of laptops and wanted to get some sort of automated remote (over WAN) backups going; the backups would be going to a RAID drive. Because we don't really have a secure ...
0
votes
1answer
302 views

How to encrypt document root of Apache and all MySQL databases?

I need it encrypted and be decrypted just only when apache started, so this is the plan: Boot computer. Decrypt /var/www and mysql databases files. Start apache. So maybe its the path not to use ...
2
votes
1answer
156 views

Recover encrypted file

I am running SBS Server 2011. I encrypted a text file file1 and placed it under the documents folder in the user profile of user1. Now I accidentally removed user1's account when I was ...
2
votes
2answers
197 views

Looking for centrally managed full-disk encryption product for Windows 7

Let me start this off by saying I've already evaluated and have planned to purchase SecureDoc Enterprise from WinMagic. However, due to billing issues (not price) I'm afraid I may not be able to make ...
4
votes
1answer
862 views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE ...
3
votes
2answers
201 views

How common are encrypted connections between email servers?

alice@a.com --> smtp.a.com --?--> Internet --?--> pop.b.com --> bob@b.com On the route from sender to server, and server to receiver, encrypted connections (STARTTLS, etc) seem to get ...
5
votes
3answers
286 views

how to prevent a user using private key after leaving organization?

In the enterprise environment, each user was issue a key pair for using to encrypting/signing. Since they have the private key, that mean they can decrypt any file that encrypt for them, even after ...
0
votes
2answers
115 views

Fast, reliable, open source encryption for large logs

I intend to use cloud storage for some of my application logs. These logs might contain confidential business data, so I would like to encrypt them prior to upload. For security reasons, I prefer ...
1
vote
1answer
713 views

Cisco 877 VPN: PPTP encryption not working

A followup to this question. I have a Cisco 877 ADSL router configured (at last!) to act as a VPN server; it supports both PPTP and L2TP VPNs, and I can successfully connect to it from Windows ...
1
vote
1answer
88 views

Does MS SQL 2005 encryption protect data in the case of physical server access?

I am looking into MS SQL 2005 encryption (not 2008, so TDE is out), and I believe I understand the concept of how a column is encrypted. The OS uses the service credentials to encrypt the service ...
0
votes
1answer
171 views

How to sign and encrypt all sended mail via sendmail\postfix

I have certificates x.509 for signing and enrypting outgoing emails. I want to create plain emails in some app (Ruby on Rails app in my case) and send it via sendmail with autosign and autocrypt ...
1
vote
1answer
103 views

Client certificate based encryption

I have a question about security of a file on a webserver. I have a file on my webserver which is used by my webapplication. It's a bitcoin wallet. Essentially it's a file with a private key in it ...
1
vote
1answer
125 views

Shared encrypted network volume accessible from for both Macs and PCs

Due to financial regulations, I need to set up a shared encrypted network volume with the following properties: Shared encrypted network volume with read/write access for specific users. ...
2
votes
2answers
86 views

Disk encryption without cooperation from system

I have a small embedded system that supports fat32. It does not have any encryption options for the files that it saves to a external usb connected disk. Modifying the source to support encryption is ...
1
vote
1answer
267 views

PGP Encryption Proxy for Mail Server [closed]

I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for ...
6
votes
3answers
220 views

Sending HIPAA compliant e-mails

At a small office, my clients' HR department needs to communicate with some vendors regarding HIPAA-covered material. How do most companies deal with securely sending e-mails regarding HIPAA. I ...
2
votes
2answers
206 views

Is it safe to alter the underlying encrypted files for a live mounted ecryptfs volume?

I want to do live synchronization of an encrypted directory with a server, such that the server only sees encrypted data. Suppose I put the underlying ecryptfs data in: /home/user/.Private And I ...
2
votes
1answer
353 views

Setup ecryptfs for Ubuntu 10.04 web server user directories or not? Will Apache still have access with eCryptfs?

When setting up an apache2 server on ubuntu 10.04 Server should the home directories be encrypted? Or, should the complete disc be encrypted? If the user home directories are encrypted will apache ...
0
votes
2answers
71 views

Mail “proxy” to add encrypted authentication support for legacy programs

There are some programs that my company use that do not support encrypted smtp authentication and using unencrypted auth is not possible (hosted on the internet by another provider, they will not ...
1
vote
1answer
219 views

Asymmetric ciphers for protecting IMAP server-side mail folder

I'm looking for a guide, or just a list of tools with some advice. I want to protect the emails stored on the server-side (in a Courier-IMAP server). A basic flowchart to illustrate the idea. ...
4
votes
1answer
1k views

What kind of algorithm does .htpasswd uses?

I am trying to generate this kind of hashes programmatically: axF3s9cdEnsNP But I can't identify what kind of hash it is. The hash comes from a .htpasswd file. All the online htpasswd generators I ...
1
vote
1answer
622 views

Problem with setting up partitions - encrypted swap partition won't mount

Here's the layout I have; I'm using Software RAID10, LVM, and Encryption: LVM VG vg0, LV main - 2.0 TB Linux device-mapper (linear) #1 2.0 TB K crypto (vg0-main_crypt) ...
2
votes
2answers
86 views

ssl communication handshake question

During SSL communication, the server sends its certificate to the client for authentication. Optionally, the client could send its certificate too, for client authentication. My question is, does the ...
1
vote
2answers
990 views

Software RAID, LVM, and Encryption Setup Questions

I have 4 hard drives, each with two partitions on them 10.1GB for swap and 990.1GB for the rest. I took this and set up two MD devices with RAID10, one for the set of 4 swap partitions and one for ...
0
votes
1answer
376 views

Looking for a solution to organization's Emails using Encryption certificates, details on requirements inside

We are interested in rising the security level of the corporate emails for a few reasons: 1) Protect internal information from leaks. 2) Mails to customers would be Signed. 3) A way to mark that a ...
-1
votes
2answers
244 views

How does a certificate make a server HTTPS?

I've read plenty but i'm still very confused about the server certificate concept. At what stage does it turn a glassfish server from HTTP to HTTPS and how? I know how to create a certificate with ...
3
votes
4answers
693 views

Looking for an email encryption solution [closed]

I'm looking for an email encryption solution for a client. They are currently using Exchange 2007 but are willing to go to a hosted solution if necessary. They are looking for a solution that will ...
2
votes
1answer
1k views

SQL Server encryption - rotate keys for PCI compliance

PCI compliance requires annual rotation of keys. The definition of "rotation of keys" that I keep coming across is decrypting your data, then re-encrypting with a new key. Really? Everyone out there ...
5
votes
2answers
7k views

Is MySQL port 3306 encrypted, and if no, how can I encrypt it?

I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
5
votes
1answer
926 views

Encrypted LVM on RAID1 - Failure testing, manual mount

We have an Ubuntu 10.04 LTS server set up with LVM running on top of disk encryption, which runs on top of a RAID1 volume comprised of two physical SATA disks. The configuration looks like this: ...
20
votes
4answers
5k views

Is data always encrypted in IPv6 communications?

I can't seem to get a straight answer to this quesion. Wikipedia says "IPsec is an integral part of the base protocol suite in IPv6," but does that mean that ALL communications are always encrypted, ...
1
vote
0answers
59 views

Suggestion for encrypting database files in SQL 2008 Standard Cluster

I have an SQL 2008 Server configured as a fail-over cluster an have a requirement to have the database files (mdf/ldf) encrypted. We have tried to use EFS for this but there are a lot of issues doing ...
0
votes
1answer
85 views

Encrypted file server

What I want is about this: Files are encrypted on the server, apache can decrypt it with certificates the client has to have installed and then send it encrypted to the client via SSL. So the files ...
0
votes
2answers
519 views

Apache SSL unencrypted RSA private key readable by php scripts?

For reference, this question is related to the following ones; but they do not provide the answer: Storing RSA Private Key un-encrypted ...
1
vote
1answer
3k views

Cannot open encrypted email in Outlook 2007. Error: “Cannot open this item. Your Digital ID name cannot be found by the underlying security system.”

This problem occurred after a user's computer was replaced. He reapplied for a new personal certificate from the CA, which is our SBS2003 server. Ever since, he cannot decrypt emails we send him. ...
1
vote
1answer
548 views

Should I encrypt my home directory (Ubuntu Server)? Case scenarios: Dev Server, Production Server, Desktop, etc

I did some searching and found that the biggest downfall is performance. How big is the difference between encrypted vs non-encrypted? What types of setups would you use it for and which wouldn't? ...
2
votes
3answers
109 views

Encrypted traffic analysis

I am trying to decrypt a https conversation with a hardware device I can't seen to change or download the private key. Is this even possible?
1
vote
1answer
606 views

IIS7 & ASP.NET Encryption System Differences

I've got a application I've recently ported From IIS6 (Windows 2003) (7 Classic Pipeline) to IIS7 (Windows 2008) Integrated Pipeline. The problem I've noticed is password hashes built on the IIS6 ...
5
votes
3answers
832 views

At rest encryption with a SAN?

I would like to make sure at-rest encryption is done in one place and correctly. If there's shared storage, that seems like the right place rather than DAS. Mainly I'd like to cover the case of ...
0
votes
1answer
87 views

Landing onto a non-https login page but the Login form Post action is https

If a user lands onto a non-https login page. When a user signs in, the action is pointed to a https url. My question is - is the users information encrypted? Is there a way to sniff and grab the users ...
0
votes
1answer
290 views

Does MySQL support Intel's AES-NI instructions?

I know that MySQL has the AES_ENCRYPT and AES_DECRYPT instructions; do they use Intel's AES-NI instructions? Are there other encryption options in MySQL and do they support AES-NI? Secondly, if MySQL ...
1
vote
2answers
184 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...
2
votes
1answer
442 views

Encrypting data over http without SSL

There is a web service that I am accessing, unfortunately, I can't paste the uri here because it is inside of an internal network and wouldn't do us any good here. The web service works great but the ...
1
vote
1answer
831 views

How can I enable encryption for SQLite3 in PHP5.3? [closed]

The php manual for SQLite3::open has this information: public bool SQLite3::open ( string $filename [, int $flags = SQLITE3_OPEN_READWRITE | SQLITE3_OPEN_CREATE [, string $encryption_key ...
0
votes
2answers
199 views

TrueCrypt to protect Windows server and web application

As an additional layer of security on a windows server (stored on-site) I am considering to use TrueCrypt. However my concern is if my webapp will still work as expected? I dont want anyone to ...
5
votes
3answers
3k views

When to use Truecrypt, and when not to?

I have about 30 (this number will most likely grow over the next few years to 50 or more) unencrypted laptops that I have been tasked to encrypt (entire drive). These machines will be used off site ...
3
votes
2answers
409 views

SQL Server Column Level Encryption - Rotating Keys

We are thinking about using SQL Server Column (cell) Level Encryption for sensitive data. There should be no problem when we initially encryption the column, but we have requirements that every year ...