Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
778
questions
-1
votes
2
answers
69
views
Do I have to include the server secret (used to encrypt passwords) in the backup?
I have been requested to create a backup of a server. The server is Linux Ubuntu 22.04.2 where the core application (nodejs) + management software (nodejs / bash scripts) + monitoring (nodejs / net-...
0
votes
1
answer
504
views
M365/OME - Encrypt emails not using TLS 1.2
I don't want to require the use of TLS 1.2 in Exchange online/O365 as it might result in some important business email not being sent/received.
So has anyone found a way to actually encrypt all in/out ...
0
votes
0
answers
22
views
MariaDB/MySQL TDE extract/recover key from running server, when keyfile is lost?
If I have a MariaDB Server encrypted with the File Key Management Encryption Plugin (TDE / Transparent Data Encryption), is it somehow possible to extract the key from the running server?
To my ...
1
vote
2
answers
1k
views
Is it possible to encrypt 'data in use' in Windows Server?
Data can have 3 states (in transit, in use and at rest). I know that for Windows Server, common methods of encryption are:
In Transit = IPSEC
In Use = ???
At Rest = BitLocker
Is it possible to ...
0
votes
1
answer
5k
views
Associate SSL certificate for SQL Server which does not use the FQDN
We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
9
votes
2
answers
1k
views
AWS Graviton Processors: which encryption specs are hardware accelerated?
In testing Graviton instances there seems to be significantly more CPU overhead from AES/SHA functions compared to the same on cheaper/smaller Intel/AMD instances. Do these procs supports hardware ...
8
votes
1
answer
5k
views
Outlook 2010 cannot reply to encrypted email
A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, replying,...
0
votes
0
answers
60
views
GPG not decrypting PGP file in cmd line / script
Using Kleopatra / GPG4win
Have keys / secrets installed. Key trust is set to ultimate, validity is full, not expired. See it listed when doing gpg --list-secret-key and gpg --list-keys, everything ...
0
votes
2
answers
705
views
Updating Expiring Keys - Azure OS Disk Encryption
Whilst day dreaming at my desk this morning, something occurred to me and I have not been able to find an answer of yet. So I am hoping someone may shine some light for me or just have a good ...
0
votes
2
answers
452
views
mail_crypt dovecot plugin requires you to store private key on the server
Why does mail_crypt require generated private key to be stored on the server? I thought that the purpose of encryption at rest is to prevent attacker from reading the contents of user's mailbox. Once ...
8
votes
5
answers
28k
views
Samba SMB Encryption - How safe is it?
I recently set up a Samba server on Linux that allows me to access files on this server on Win10 PCs in my local network. But I wondered if I could access this shared drive over the internet since I ...
3
votes
0
answers
101
views
why does GPG ignore the trust level I had set for recepient key?
I encountered the following puzzling behavior with GPG: after I set trust for a recipient's key, gpg still complains it doesn't know if it should use the encryption subkey and prompts for input.
Here ...
6
votes
2
answers
3k
views
AWS Root volume Encryption
In my scenario, I have some old EBS volumes that are not encrypted. To satisfy new corporate security measures, all data needs to be encrypted so I need to compile a plan to encrypt the unencrypted ...
0
votes
0
answers
28
views
How Can I Update Encryption and Deffie Hellman Groups for VPN in GCP?
So, I've got a VPN set up at the moment that's connected to the client's VPN and it's all good. Now, the client wants to tweak the encryption method to AES256 and Deffie Hellman groups to 19.
Is it ...
2
votes
1
answer
598
views
MS365: Sending encrypted to remote tenants occasionally fails with "user not in tenant"
We are attempting to replace a secure email gateway solution with MS365's inbuilt email message encryption.
We have a mail flow rule set up to force encryption from a specific sending address to any ...
0
votes
1
answer
228
views
TrueNas Encryption method changed - Is the data safe?
just a quick question of understanding. I have a TrueNas Scale server and I just changed the Encryption method from key to passphrase. Now I wonder if I need to rewrite the whole dataset for this to ...
32
votes
2
answers
53k
views
Is MySQL port 3306 encrypted, and if no, how can I encrypt it?
I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
0
votes
1
answer
4k
views
What ciphers do I need to disable in tomcat to match a specific apache conf?
I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf.
I am actually running tomcat, and in my ...
0
votes
3
answers
717
views
Do i need to encrypt the OS drive with Bitlocker if i store data only on a second different drive in the same PC?
I have a PC with two drives in it. One is used for OS and programs only and the other one is used to store data. I want to encrypt my data to prevent the PC to be stolen and for the thieves to ...
1
vote
1
answer
863
views
What is the difference between Mandatory and Strict modes in SQL Server 2022 encryption
It is possible to configure SQL Server encryption mode as Strict, rather than Mandatory.
Unlike other versions of SQL Server and ODBC drivers where you could only specify whether you want the ...
0
votes
0
answers
64
views
Which is the correct capability in Courier SMTP config to get user's password (encryption type)
MySql: 8.0.34-0ubuntu0.22.04.1
I have followed this guide: Postfix With Courier IMAP Mail Server Installation (unfortunately they do not answer questions).
I had to change the encryption method for ...
0
votes
1
answer
4k
views
Generate PFX file using P7B file with private key data in text format
I have the certificate in P7B format and along with I have private key data in text file format as below. Can anyone please help how can I generate the PFX certificate using this data?
-----BEGIN ...
0
votes
0
answers
74
views
How to change keyformat of existing encrypted dataset
I had an unencrytped dataset that for which I used zfs send / receive to create an encrypted dataset with the data. The destination encrypted dataset used key-based creds. I would like to change this ...
8
votes
4
answers
51k
views
'Certificate types are not available' When creating computer certificate?
Environment
Windows Server 2008 sp1
Xeon CPU E5430 @ 2.66 GHz
16.0 GB Ram
64-bit Operating System
1TB Disk Space
Server Role: SQL Server
Other Information: Joint to domain, Logged in user domain ...
3
votes
2
answers
837
views
Why AWS encryption for EBS and S3 is disabled by default? [closed]
For EBS and S3 encryption (even via the default key from KMS) is disabled by default, as I understood from the documentation, there is no difference to the user if volume/objects is/are encrypted ...
0
votes
0
answers
227
views
Decrypt remote file securely with local private key
I've created a alldots.tar file mainly with dot config files from my local server. I then transferred it to my other (remote) server and there it is, cryptographed.
It didn't occur at the time of ...
0
votes
1
answer
166
views
What's the use of AES 256 for Zip files
Will it help if I compress Data files using AES 256 Encryption method as all a programmer has to do is try all sorts of combinations (brute force) to check if the Zip File gets Extracted. Each ...
1
vote
1
answer
240
views
ZFS: can per-user encrypted filesystems be deduplicated on block-level?
Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted?
What ...
1
vote
1
answer
680
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
102
votes
2
answers
118k
views
I have a keypair. How do I determine the key length?
Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
-1
votes
2
answers
431
views
Disabling SHA in IIS
My company has a web server running IIS 6, and was asked to help disable SHA on it.
Specifically this cipher: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
I found these instructions https://www.namecheap.com/...
1
vote
0
answers
422
views
Decrypting Kubernetes secret using the encryption key
I have a toy Kubernetes cluster with Encryption at rest enabled using the abs-256-cbc provider; I have not used any vault here for kms simulating the problem. This means the encryption key is in a ...
0
votes
1
answer
46
views
How to protect Jenkins from super users?
Any super user who has access to the Jenkins running on a Linux server can easily disable security authentication from config.xml file; then log in and can also decrypt sensitive passwords from ...
0
votes
0
answers
361
views
Prereqs for "Require NTLMv2 session security"?
I have a requirement to set this up for servers on my Domain environment (both the client and server version). Workstations are Windows 10 and all Servers are Server 2019.
I know how to do it through ...
1
vote
1
answer
358
views
Multiple files encrypted with multiple GPG keys - how to easily add/remove/manage keys, automate key change tasks?
We have a bunch of files that contain sensitive information, that need to be accessed by several teams, but need to be unreadable to everyone else. Currently, each team member needs to generate their ...
44
votes
2
answers
28k
views
GPG - why am I encrypting with subkey instead of primary key?
When encrypting a file to send to a collaborator, I see this message:
gpg: using subkey XXXX instead of primary key YYYY
Why would that be? I've noticed that when they send me an encrypted file, it ...
1
vote
1
answer
553
views
OpenConnect force clients to use special cipher
I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server
I need to force clients to use special cipher like AES-256-GCM
because it seems that VPN blocks on some 4G net ...
0
votes
1
answer
1k
views
Can Bitlocker be applied to a shared volume of the Windows 2022 server? + SMB Encryption?
Our school has a remote file server (Windows 2022 virtual server on a colo) that provides network shared drives. We have both Windows and MacOS clients accessing it through SMB.
Recently our IT Sub-...
4
votes
1
answer
3k
views
Does CloudFront support S3 signature version 4 for KMS encrypted objects?
I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket.
Requests specifying Server ...
-2
votes
1
answer
2k
views
Generating public/private credentials for MS Outlook email encryption
An app running on a CentOS 7 web server needs to receive encrypted emails sent from users of MS Outlook.
Can someone please provide explicit instructions as to how I can generate or procure all of ...
0
votes
2
answers
1k
views
Debian encrypted home directory setup fails
Here's the problem:
# ecryptfs-migrate-home -u <user>
INFO: Checking disk space, this may take a few moments. Please be patient.
INFO: Checking for open files in /home/<user>
Enter ...
7
votes
1
answer
4k
views
win10 how to encrypt single file, right click folder encrypt invalid recovery certificate
In window 10 enterprise, corporate environment (if it matters). I have a single file with info I want to protect, and I want to encrypt just this single file. And I only want to do this in Windows, ...
2
votes
1
answer
3k
views
Password mismatch in dovecot with postafixadmin
After many hours trying to set up a new mail server, I just can't figure out why the passwords which postfixadmin store are a mismatch with what dovecot passes for authentication.
In postfixadmin, ...
0
votes
1
answer
276
views
nginx append query parameter with encrypted value to a react application
I want to send the DN field from the client certificate ($ssl_client_s_dn), but I want to send it encrypted.
In the question nginx append query parameter to a react application it is explained how to ...
1
vote
1
answer
2k
views
How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services
I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning:
...
2
votes
1
answer
2k
views
EFS Recovery Agent not working
I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
4
votes
1
answer
1k
views
Encrypt disks using SED and store keys in TPM?
I'm buying servers lately and all of them have disks that support TCG Opal full-disk encryption (aka SED). What I'd like to do is:
Store data encrypted-at-rest on the disks (NVMe & SAS).
Not be ...
1
vote
1
answer
1k
views
IIS7 & ASP.NET Encryption System Differences
I've got a application I've recently ported From IIS6 (Windows 2003) (7 Classic Pipeline) to IIS7 (Windows 2008) Integrated Pipeline.
The problem I've noticed is password hashes built on the IIS6 ...
1
vote
1
answer
222
views
How to generate kerberos traffic?
I'm trying to verify the encryption types allowed for kerberos by viewing packet captures in order to prepare to remove support for RC4 with kerberos. Does anyone know what I can do on Windows Server ...
37
votes
8
answers
6k
views
Is enforcing encryption for SMTP a good idea (yet)?
I am running an email server which is currently set up to use TLS if possible, when sending and receiving emails.
When you read in the documentation about this, there is also the option to enforce ...