Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

2
votes
2answers
29 views

Encryption with ZFS on linux

Does ZFS on Linux already support Encryption? If not, is it planned? I found tons of info for ZFS+LUKS but that's absolutely uninteresting: I want ZFS encryption so that I can do replication using ...
1
vote
2answers
397 views

GELI / ELI at FreeBSD - changing passphrase

How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way? I've looked in the man ...
0
votes
0answers
7 views

Converting PGP2.x UIDs on a GPG key [migrated]

I have a couple of keys which were created many years ago, before GPG came out. (But let's pretend there's only one key involved.) The key has a mix of GPG and PGP-2.x-style UIDs. I've made one of ...
2
votes
1answer
20 views

How can I transfer a certificate from an account to another on Windows

Long story short, I have some configuration file for a tool containing sensitive information and the client want them encrypted. I want to use EFS for this, but there is a problem : the account doing ...
3
votes
2answers
387 views

Should Carrier Ethernet traffic be encrypted?

I'm looking for a best practice answer. We have a 100Mb point to point Carrier Ethernet circuit between a corporate office and an offsite data center. Basically we have SQL traffic replicating to ...
2
votes
1answer
25 views

Encrypted User Directory on FreeBSD?

I'm running FreeBSD and I'd like to have user's files stored encrypted using his/her password, and have seamless SSH access to those files as well (provided that the user always uses password-based ...
1
vote
1answer
2k views

How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)

I'm trying to get pam_mount working on Ubuntu 12.04. I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it. Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or ...
1
vote
2answers
1k views

Ubuntu 13.10 - How to disable LVM and cryptsetup? cryptsetup: evms_activate is not available

I am trying to remove whole drive encryption from my Ubuntu installation. I've run Ubuntu from Live CD, mounted crypt partition and copied it to another partition /dev/sda3. sudo cryptsetup luksOpen ...
-1
votes
1answer
19 views

Moving data across countries securely [closed]

Currently planning on moving data from a number of remote sites across to our head quarters in Germany. The data is too large to replicate/copy over site to site VPN so I'm going to have to do this ...
0
votes
3answers
1k views

Mount EncFS at boot

am trying to get an EncFS encrypted home to mount at boot without user input (directly, not via ssh). Have tried various solutions (adding a volume entry in pam_mount.conf.xml, various tweaks to ...
0
votes
0answers
10 views

openSUSE encrypted root over RAID, given Yast doesn't support encrypted root?

This is for a fresh install of 13.1 I'll be making. Four drives in RAID10 need to be on the bottom. I'd rather the RAID be software, MD, rather than hardware, though I'd use hardware RAID if all else ...
11
votes
6answers
15k views

How can I disable encryption on openssh?

I'm having performance problems using openshh(server) and putty(client) combination to use a remote webproxy. I'd like to disable encryption and test the results to see if it makes a difference. How ...
21
votes
13answers
35k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
0
votes
0answers
18 views

Recovering files without .encfs6.xml

I've lost my .encfs6.xml file for a encfs volume. I still know my passphrase. Is there anyway to regenerate the .encfs6.xml based on similar volumes and the passphrase? Any chance of brute-forcing? ...
0
votes
0answers
17 views

Security of this account login system [migrated]

I have an idea to implement a account system using email and passwords for games. Im intending to have the account creation and forget password systems on a webpage. So if users will have to access ...
4
votes
5answers
32k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
1
vote
2answers
161 views

Office 365 E3 with Exchange Hosted Encryption (EHE)

I have a client who wants to move to Office 365. They are currently running on a trial of Office 365 E3 plan. My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
2
votes
2answers
926 views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
2
votes
1answer
168 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine ...
1
vote
1answer
51 views

Storing Postfix's passwords in MySQL without encryption

I've been struggling with Postfix for past few days. Finally I managed to set it up with virtual mailboxes listed in MySQL and passwords encrypted with PAM. It was just then that I realized I need the ...
1
vote
2answers
31 views

EFS on MySql Data Folder Prevents MySql Service from Starting

I'm trying to encrypt my MySql database at rest. I have been looking at Truecrypt and EFS - I ultimately went with EFS because I can simply encrypt an existing folder without having to create a ...
1
vote
1answer
403 views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
2
votes
3answers
2k views

Mac OSX Server: svn via ssh command line and encrypted passwords

When I log into our mac mini server running OSX 10.6 via ssh and use svn I get the message: ATTENTION! Your password for authentication realm: can only be stored to disk unencrypted! You are ...
7
votes
2answers
574 views

ZFS RAID and LUKS encryption in Linux

I'm planning to setup a set of 3x 2TB 7200rpm drives as a LUKS-encrypted Z-RAID pool in Linux (for a NAS solution). My understanding of the problem at hand is that the only way to achieve this is to ...
1
vote
2answers
153 views

Which Layer of the OSI model is responsible for encryption in WLANS?

Since WEP and WPA/WPA2 encrypt the payload of 802.11 MAC frames and we know that MAC goes under the Data Link Layer (Layer 2), can we also assume that encryption occurs in Layer 2 as well? At least ...
5
votes
2answers
2k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
2
votes
0answers
55 views

EFS Recovery Agent not working

I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
0
votes
0answers
44 views

How to solve problematic cpu load due to encryption when using SFTP on a VM

my company is trying offer a sftp service for a big amount of customers. The serving machine will be on a VM and tests have shown that, with an increasing amount of simultaneous users, the cpu becomes ...
13
votes
5answers
769 views

Encrypted offsite backups - where to store the encryption key?

In addition to regular onsite backups (kept in a fire resistant safe), we also send tapes offsite once a month, encrypted with AES. So if our site is one day vaporised by an alien heat ray, we should ...
0
votes
2answers
87 views

Encrypted off-site data storage

My business has a rather unique problem. We work in China and we want to implement a file server paradigm which does not store any files locally, but rather in a server overseas. Applications would be ...
1
vote
1answer
886 views

How can I enable encryption for SQLite3 in PHP5.3? [closed]

The php manual for SQLite3::open has this information: public bool SQLite3::open ( string $filename [, int $flags = SQLITE3_OPEN_READWRITE | SQLITE3_OPEN_CREATE [, string $encryption_key ...
3
votes
2answers
405 views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
3
votes
1answer
211 views

prevent mounting of encrypted volume on EC2

I've got a secondary EBS volume attached to my EC2 instances that's encrypted. When restarted, it attempts to reload the volume and gets stuck on luksOpen requesting a passphrase (which, with no ...
1
vote
1answer
67 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
1
vote
1answer
54 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
0
votes
0answers
38 views

Encrypt MySQL column with ssh-key forwarded by ssh-agent

I would like to keep sensitive data such as user's e-mail address in MySQL database in encrypted form. Is it possible to encrypt/decrypt mail column in MySQL using ssh-key forwarded by ssh-agent on ...
2
votes
1answer
78 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
2
votes
1answer
51 views

Sharing ENV variables between multiple linux servers

I need to be able to share ENV variables between multiple linux servers. These variables are used by my application. I'd like to keep these variables in sync between all servers. Application ...
6
votes
2answers
8k views

Is MySQL port 3306 encrypted, and if no, how can I encrypt it?

I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
3
votes
1answer
1k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
1
vote
1answer
88 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
0
votes
0answers
158 views

How to change IIS Express Virtual Directory password encryption provider?

In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
0
votes
0answers
31 views

Encrypting SQL Connections: no certificates listed

We are trying to setup encrypted connection to SQL server, using the this guide. We have certificates installed and they are being used to encrypt the [http] connection to our application. When we ...
8
votes
3answers
3k views

How to create a randomly keyed, encrypted swap partition, referring to it “by-uuid”, on Debian?

It is sensible that if you have any sort of block device encryption implemented on your GNU/Linux system, to encrypt your swap partition too, as any decrypted data may be written in cleartext at any ...
0
votes
3answers
742 views

Why is it considered bad practice to only protect one page with SSL instead of whole website

I know that protecting all pages with SSL will slow down the website and add overhead to the server resources. I also see many other websites only protecting their login and registration page, which ...
0
votes
2answers
99 views

Encrypt Windows Backup

Is there a way to encrypt my backups using Windows Backup in Server 2008 R2 without using a paid for 3rd party application? I've searched high and low but have been unable to find anything. Thanks ...
2
votes
1answer
276 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
4
votes
1answer
106 views

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the ...
0
votes
2answers
52 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
0
votes
1answer
199 views

Move encrypted debian system on luks+lvm with dropbear from single SSD to SSD-RAID1

We have a debian linux server which has a single 120GB SSD and 2x2TB HDDs as RAID 1. We now have to move to another server which has 2x240GB SSD and a single 2TB HDD. The aim is to move the current ...