Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
1answer
28 views

How to send “ATA Secure Erase” command to SSD?

A very good way to erase a SSD which have SED support is to change the password/key. But what to do with those that doesn't have SED support? This article says Fortunately it is possible to erase ...
1
vote
0answers
20 views

Mounting encrypted Samba share (linux server/client)

I'm trying to set up encrypted samba access. In order to achieve that I've added 2 lines to [global] scope in smb.conf: server signing = mandatory smb encrypt = mandatory But unfortunately I can't ...
2
votes
1answer
1k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, ...
1
vote
0answers
42 views

Encrypting a file name in linux?

I'm trying to encrypt a file as well as its filename. Encrypting the file is fairly easy, I use gpg for that, but I can't figure out how to encrypt the filename as well. Would be great if the filename ...
3
votes
0answers
27 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
0
votes
1answer
36 views

Debian encrypted home directory setup fails

Here's the problem: # ecryptfs-migrate-home -u <user> INFO: Checking disk space, this may take a few moments. Please be patient. INFO: Checking for open files in /home/<user> Enter ...
1
vote
1answer
23 views

Ubuntu Encryption - Protect data in the case of Physical Server Access

Looking to Encrypt a system, such that if someone has physical access to the server they can not clone the hard drive or copy data off of it. I require the services to be running such that the ...
2
votes
1answer
87 views

How to use an encrypted disk without needing an unencrypted boot partition

I would like to know if there is a way to encrypt a linux system which does not require a small unencrypted /boot partition. In addition I would like to know if encryption can be implemented on an ...
8
votes
4answers
3k views

How to create a randomly keyed, encrypted swap partition, referring to it “by-uuid”, on Debian?

It is sensible that if you have any sort of block device encryption implemented on your GNU/Linux system, to encrypt your swap partition too, as any decrypted data may be written in cleartext at any ...
2
votes
1answer
56 views

LUKS full disk encryption use keyfile instead of passphrase

I have enabled LUKS full disk encryption on an LVM volume while installing centos6.6, however it asks for a passphrase every time the OS is rebooted. I am now trying to use a key file according to ...
1
vote
2answers
1k views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
3
votes
8answers
1k views

Why do https connections take longer to establish than straight http connections?

Why is it that Secured HTTP Connection (https) is Slower then than typical HTTP (http)? Just interested in knowing only. Thanks.
2
votes
2answers
943 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
1
vote
3answers
497 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
12
votes
7answers
21k views

How can I disable encryption on openssh?

I'm having performance problems using openshh(server) and putty(client) combination to use a remote webproxy. I'd like to disable encryption and test the results to see if it makes a difference. How ...
1
vote
1answer
25 views

ZFS, mdconfig, GELI and getting my head around

I want to create an encrypted virtual disk but I am struggling with understanding some basic concepts. Please correct me if any of these statements are wrong: I need a block device that geli can ...
-1
votes
1answer
34 views

Linux private file encryption

I need to store and secure clients files. I would like to encrypt files and not being able to open it. Only file owner can open his file. I think I’ll have to generate private key for each customer. ...
1
vote
1answer
476 views

Encrypt Files Before Sending To Bittorrent Sync

Is there a way to encrypt files before being sent to Bittorrent sync, either via a plugin, or by encrypting the files first? Also do you trust Bittorrent Sync's encryption?
2
votes
0answers
78 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
8
votes
4answers
10k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
0
votes
1answer
125 views

Shibboleth SP - Signing and Encryption Key

I have a Shibboleth SP installed on Server 2012 R2. I tried to submit the metadata to be imported into the IDP and was told that without having the signing or encryption key, they won't be able to ...
9
votes
3answers
15k views

Can I create my own S/MIME certificate for email encryption?

I'm having a bit of an issue here. Bear with me as this may be a case of "not asking the right question". Background: Using Apple Mail. Want to encrypt/decrypt email but GPGMail (and apparently ...
0
votes
2answers
230 views

Recovering files without .encfs6.xml

I've lost my .encfs6.xml file for a encfs volume. I still know my passphrase. Is there anyway to regenerate the .encfs6.xml based on similar volumes and the passphrase? Any chance of brute-forcing? ...
8
votes
2answers
1k views

Should I encrypt OS disk with BitLocker for HIPAA compliance

I am looking into hosting a HIPAA compliant web application on Azure VM's. For the database, right now I am leaning towards using a VM with SQL 2014 Standard Edition. Since TDE is not available with ...
4
votes
1answer
354 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
0
votes
0answers
23 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
0answers
17 views

How do I edit a signed or encrypted SMIME message to include a footer?

Is there any way to edit a signed/encrypted SMIME message so that there is a legal disclaimer on the message? I'm thinking about the MIME multipart email directive may allow for this.
10
votes
2answers
12k views

Is MySQL port 3306 encrypted, and if no, how can I encrypt it?

I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
0
votes
2answers
63 views

Decrypt a Header in Apache (HTTPD)

I've been asked to have a look at whether it's possible to decrypt a header during the processing of the request. The specific use case is to respond to the decrypted contents of the header by ...
0
votes
1answer
60 views

Recomendations for this mail server setup?

EMAIL SERVER SETUP Hey, its my first time using serverfault but I hope the community can help. I am trying to build a secure email system using Linux, Postfix, Dovecot and MySQL. I have read on ...
-2
votes
1answer
86 views

Generating public/private credentials for MS Outlook email encryption

An app running on a CentOS 7 web server needs to receive encrypted emails sent from users of MS Outlook. Can someone please provide explicit instructions as to how I can generate or procure all of ...
-2
votes
1answer
39 views

How to verify whether randomness was written to a device and what exactly has been written?

I am preparing a device with shred to use it later on encrypted with dm-crypt/cryptsetup/luks. How can I check the device before and after using shred or e.g openssl/dd with /dev/urandom to be sure ...
0
votes
0answers
49 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
-2
votes
1answer
109 views

mkpasswd on Centos 7 does not support -m flag [duplicate]

I cannot find how to install grub-crypt either. How can I generate SHA512 pass hashes on Centos 7? Edit: I was actually trying to look up how to generate hashes with an adjustable number of rounds. ...
-4
votes
4answers
85 views

Blocking another Win 2008 R2 admin from accesing some important folders [closed]

I have sold half my dedicated server to somebody but I dont want them accessing my web hosted Plesk files for my Wordpress website. As some of them are custom and confidential. I gave them local ...
0
votes
0answers
24 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
1answer
169 views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
2
votes
2answers
119 views

How can I encrypt my SSD but still boot unattended (linux)? [closed]

I have a system that displays video from a camera feed with an overlay, and it must boot without any user intervention (the quicker the better). However, these systems will be in the hands of ...
2
votes
0answers
56 views

Decrypt All traffic by wireshark [closed]

Ok I can decrypt a specified client connected to wifi by deauthing it and getting the handshake using wireshark. In fact after wireshark captures the EAPOL messages it starts to decrypt the traffic. ...
0
votes
0answers
33 views

Preseeding with RAID1 Encrypted LVM

I would like to preseed a debian wheezy system with Encrypted RAID1 LVM. I've done some google searching, seen others asking the same question, but have not found any answers. I have successful ...
3
votes
3answers
7k views

How do I limit SSL/TLS connections to at least 128-bit encryption?

When I'm ordering an SSL cert for my public web server, how can I be sure that the web server (IIS 6 in my case) will only allow SSL/TLS client connections supporting our corporate standard of at ...
1
vote
1answer
88 views

After resizing an encrypted LVM device, the machine takes 4 hours to boot

I have a host, under Debian Wheezy. The virtualisation software is qemu/KVM, and uses LVM Volumes as disks for the guests. The guests all have been installed using debian wheezy, full-disk ...
1
vote
0answers
72 views

Remmina TLS, NLA works, but high encryption fails

Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working. Questions: 1. Why setting high encryption prevents connectivity? 2. What's ...
1
vote
0answers
90 views

Debian KVM Host, Debian guests : where full-disk encryption should be done?

I have a host under Debian Wheezy, running qemu/KVM. I want to have all my guests fully-encrypted. I can see to possibilities : - Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
0
votes
0answers
70 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
0
votes
1answer
129 views

How do I encrypt large (20Gb+) compressed files from a backup?

I want to encrypt regularly created and compressed backup files from OpenVZ containers, before they leave the server and get copied to the providers backup space via ftp. They vary in size, from 6 to ...
0
votes
1answer
77 views

Sun T2/Niagara Hardware Crypto Acceleration with Debian Linux?

I wanted to use an older T2 machine as a webserver for SSL heavy websites. With Solaris, there is the crypto acceleration available which would make sense for SSL. Now I am wondering if this crypto ...
1
vote
2answers
71 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
1
vote
0answers
45 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
0
votes
1answer
22 views

Using samba password to encrypt partition

I have a local server with encrypted partition just for data, which I want to serve through samba server. I want to avoid re-entering password on each server start (e.g. on electricity failure) for ...