Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

0
votes
0answers
18 views

Encrypting SVN Store with ecryptfs

I previously had TrueCrypt setup to automount my SVN repos on the Subversion server at boot with an automated network script that used a keyfile on a protected share to mount the volume. Now that ...
-1
votes
1answer
29 views

2008R2 Server to Server Encryption [closed]

What is the best way to encrypt data between internal servers? We have a few homegrown apps that run on 2008R2 servers that transmit sensitive data. Would an IPSec connection between the two servers ...
-2
votes
3answers
877 views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
0
votes
0answers
34 views

Do I have to somehow enable AES-NI on Nginx?

I've got CPU With AES-NI, I would like to use this function with nginx. ssl_engine aesni; - this parameter was used before openssl 1.0.0, but now, openssl is bundled with aesni support. And this ...
1
vote
1answer
29 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
0answers
22 views

Encrypted home mount for single session on Ubuntu?

I currently have Ubuntu 12.04 as my remote server and I have a purpose of keeping my important files on that server under encrypted home folder. I did this and it works; I send my files to the server ...
2
votes
1answer
50 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
1answer
303 views

DB encryption for Django web app without storing key on server

We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
-6
votes
1answer
40 views

encryption of fiber communications [closed]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
1
vote
1answer
28 views

encrypted (luks) partition had some damage - any chance?

I was trying to run Debian installer on top of an already luks-encrypted partition (I tried to do use cryptsetup in the console). I don't remember ever saying "yes, destroy" data, but what I see now, ...
8
votes
3answers
2k views

ZFS RAID and LUKS encryption in Linux

I'm planning to setup a set of 3x 2TB 7200rpm drives as a LUKS-encrypted Z-RAID pool in Linux (for a NAS solution). My understanding of the problem at hand is that the only way to achieve this is to ...
2
votes
1answer
179 views

EFS Recovery Agent not working

I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
2
votes
5answers
10k views

Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?

I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer. Is ...
0
votes
2answers
101 views

How to disable Null and Weak Ciphers on 389-Directory-Server

I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636. I tried to disable them by shutting down DS, ...
3
votes
2answers
662 views

Changed encfs password, but filenames didn't change

I thought changing the password with 'encfsctl passwd path/to/encrypted' would change all filenames. But it didn't work. Any ideas why? I got this, so the password was changed correctly: Enter ...
0
votes
1answer
21 views

How to re-create the symmetric key on Amazon RDS

We have some column encrypted by symmetric key. Now we want to upload our database to Amazon RDS (SQL Server). Can we do that? If yes, how?
4
votes
8answers
1k views

protecting my files from root

In a remote box, my files are 700-chmoded, but I'm worried that root may be reading them. Is there a way to add another layer of protection to avoid that, perhaps by encrypting them, but allowing ...
0
votes
3answers
76 views

Encrypt communications on local network

I'm developing a web application that runs on a server local to the same network as the client- basically, instead of a central web server, each customer site will have its own server hosted on the ...
1
vote
2answers
3k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
0
votes
1answer
50 views

Is OTR required for XMPP message encryption? [closed]

I use XMPP for sending instant messages from a bot in a server to a laptop client. I have full control of both the clients (bot and laptop client) and they are both connected to the same server which ...
0
votes
1answer
34 views

Moving data across countries securely [closed]

Currently I am planning on moving data from a number of remote sites across to our head quarters in Germany. The data is too large to replicate/copy over site to site VPN so I'm going to have to do ...
0
votes
0answers
30 views

Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)

This question does not rely on time... so it's not about keeping data on tape or anything similar. I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
28
votes
13answers
45k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
10
votes
3answers
6k views

SSL Certificate Class 2 vs Class 3 vs Class 4

I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
2
votes
2answers
2k views

How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)

I'm trying to get pam_mount working on Ubuntu 12.04. I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it. Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or ...
2
votes
1answer
91 views

How can I encrypt 2008 Server Running under esxi

I have a need to run multiple 2008 R2 VMs under the free esxi. Storage will be local to the host. As I understand it, BitLocker is not a supported option in a VM environment from either Microsoft or ...
5
votes
4answers
4k views

Are there any FIPS-140-2 certified solutions for Linux?

I'm not even 100% certain what this involves, but my current understanding is this: use of only approved cryptographic algorithms for network traffic (easy, we use SSL and lock down the algorithms ...
1
vote
0answers
620 views

How to encrypt a section within web.config using aspnet_regiis -pe or -pef

I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...). Having repeated failures with all types of syntax changes, so perhaps better to post ...
-2
votes
1answer
93 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
0
votes
1answer
139 views

Encrypt Files Before Sending To Bittorrent Sync

Is there a way to encrypt files before being sent to Bittorrent sync, either via a plugin, or by encrypting the files first? Also do you trust Bittorrent Sync's encryption?
0
votes
1answer
119 views

Problems saving encrypted emails from Outlook into Document Management System

We use a commercially available Document Management System (DMS) which integrates with Microsoft Outlook 2010. This allows users to save important emails in the DMS so that their colleagues have ...
0
votes
2answers
52 views

How to recover key after using LuksRemovekey?

I have an encrypted partition on /dev/sda5, yesterday I use cryptsetup to remove the encryption using cryptsetup luksRemovekey /dev/sda5, but when I restart I have to provide a passphrase for ...
0
votes
0answers
65 views

SQL Server 2012 : recover lost symmetrical encryption key or just disable encryption

We currently face a huge problem and we hope you can help us. We have two systems (Dynamics CRM 2013) on two different servers, both use SQL Server 2012. One on our dev server the other on our live ...
1
vote
2answers
70 views

Encrypted partition and hardware failure

I have a kind of philosophical question. I'm about to set a new backup server and as time is passing encryption of data seems more and more reasonable. However what if the harddrive goes bad. I know ...
1
vote
2answers
120 views

Migrate user and passwords to new linux box

I am trying to migrate old Centos 4.3 box to Centos 7. I have followed the migration steps from an article published way long back on ...
29
votes
7answers
16k views

What is a good solution to encrypt some files in unix?

I am looking for a utility to encrypt certain directories in Linux. I am not looking for any full disk encryption services, but simply to encrypt a few directories for the purposes of storing files in ...
4
votes
2answers
578 views

Encryption with ZFS on linux

Does ZFS on Linux already support Encryption? If not, is it planned? I found tons of info for ZFS+LUKS but that's absolutely uninteresting: I want ZFS encryption so that I can do replication using ...
1
vote
2answers
520 views

GELI / ELI at FreeBSD - changing passphrase

How can I change/replace the passphrase of an encrypted eli provider in FreeBSD? Do I have to recreate the entire provider and copy data, or is there a simpler and faster way? I've looked in the man ...
2
votes
1answer
81 views

How can I transfer a certificate from an account to another on Windows

Long story short, I have some configuration file for a tool containing sensitive information and the client want them encrypted. I want to use EFS for this, but there is a problem : the account doing ...
3
votes
2answers
410 views

Should Carrier Ethernet traffic be encrypted?

I'm looking for a best practice answer. We have a 100Mb point to point Carrier Ethernet circuit between a corporate office and an offsite data center. Basically we have SQL traffic replicating to ...
2
votes
1answer
79 views

Encrypted User Directory on FreeBSD?

I'm running FreeBSD and I'd like to have user's files stored encrypted using his/her password, and have seamless SSH access to those files as well (provided that the user always uses password-based ...
1
vote
2answers
3k views

Ubuntu 13.10 - How to disable LVM and cryptsetup? cryptsetup: evms_activate is not available

I am trying to remove whole drive encryption from my Ubuntu installation. I've run Ubuntu from Live CD, mounted crypt partition and copied it to another partition /dev/sda3. sudo cryptsetup luksOpen ...
0
votes
3answers
2k views

Mount EncFS at boot

am trying to get an EncFS encrypted home to mount at boot without user input (directly, not via ssh). Have tried various solutions (adding a volume entry in pam_mount.conf.xml, various tweaks to ...
0
votes
0answers
73 views

openSUSE encrypted root over RAID, given Yast doesn't support encrypted root?

This is for a fresh install of 13.1 I'll be making. Four drives in RAID10 need to be on the bottom. I'd rather the RAID be software, MD, rather than hardware, though I'd use hardware RAID if all else ...
12
votes
6answers
18k views

How can I disable encryption on openssh?

I'm having performance problems using openshh(server) and putty(client) combination to use a remote webproxy. I'd like to disable encryption and test the results to see if it makes a difference. How ...
0
votes
0answers
150 views

Recovering files without .encfs6.xml

I've lost my .encfs6.xml file for a encfs volume. I still know my passphrase. Is there anyway to regenerate the .encfs6.xml based on similar volumes and the passphrase? Any chance of brute-forcing? ...
4
votes
5answers
37k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
1
vote
2answers
176 views

Office 365 E3 with Exchange Hosted Encryption (EHE)

I have a client who wants to move to Office 365. They are currently running on a trial of Office 365 E3 plan. My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
2
votes
2answers
1k views

Encrypting Amazon EBS Snapshots

Would love it if someone could help me out with this: The setup is a distributed LAMP architecture hosted on Amazon EC2 instances. MySQL Percona. We use Amazon's EBS snapshots for backups. We have ...
2
votes
1answer
222 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine ...