Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
1answer
98 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
4
votes
1answer
2k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, ...
2
votes
1answer
44 views

Cryptsetup luks - Check that kernel supports aes-xts-plain64 cipher

I encrypted a bunch of hard drives with cryptsetup luks encryption on CentOS 5. Everything was fine, until I upgraded my system to CentOS 6. Now I cannot mount the disks anymore. To mount with my ...
0
votes
0answers
7 views

What could be causing traffic with URL parameters rotated by a caesar cipher? [duplicate]

Customers coming into our website from our newsletter go through an email tracker through a url like: https://www.domain.com/email/tracking?u=https%3N%2S%2Swww.domain.com&e=aA-bB_cC Where url ...
-1
votes
1answer
13 views

Amazon S3: encryption speed and keys

I have couple theoretical questions about Amazon S3 I need to encrypt all my files. What encryption speed Amazon provide for S3? After encryption Amazon gives my key for file (or files package), it ...
-1
votes
0answers
12 views

OpenVPN Confusion - Server and client on one machine? [closed]

I have searched all over the internet and tried so many things.. but I cannot seem to figure this out. I have a Raspberry Pi. I have an ethernet, but I have access to a wireless if I needed it. 1. ...
0
votes
1answer
14 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
41
votes
14answers
76k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
6
votes
2answers
316 views

Sending HIPAA compliant e-mails

At a small office, my clients' HR department needs to communicate with some vendors regarding HIPAA-covered material. How do most companies deal with securely sending e-mails regarding HIPAA. I ...
-1
votes
1answer
24 views

Can a remote connetion from outside a LAN be invisible to protocol analyzers such as Wireshark, Process Hacker, Nbtstat? [closed]

When studying the behavior of trojans and (RAT) Remote Access Trojans this question came up. Can an attacker create a trojan that could trick the OS or the NIC into hiding a remote connection to a ...
0
votes
0answers
19 views

How to decrypt owncloud backups manually without a working installation?

I recently had a data lack and miss some very important files. Encrypted backups I had an owncloud 8.x instance running on my server last year for keeping backups and already located the wanted ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
3
votes
1answer
121 views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
0
votes
1answer
129 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
1
vote
1answer
35 views

Dovecot: increase ssl_dh_parameters_length

I'm using Dovecot 2.2.21 I set ssl_dh_parameters_length = 4096. Before that, I had set 2048. After the change I reloaded Dovecot. Since then, SSL doesn't work any more and I get these logs ...
15
votes
3answers
14k views

SSL Certificate Class 2 vs Class 3 vs Class 4

I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
8
votes
3answers
4k views

What's the best practice for taking MySQL dump, encrypting it and then pushing to s3?

This current project requires that the DB be dumped, encrypted and pushed to s3. I'm wondering what might be some "best practices" for such a task. As of now I'm using a pretty straight ahead method ...
4
votes
1answer
122 views

Creating a grow-on-demand encrypted volume with LUKS

I am trying to create an encrypted, growing-as-needed file system in with Linux. I am familiar with LUKS and cryptsetup. I can create an empty file: fallocate -l 512M /root/image I can create a ...
3
votes
2answers
26 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...
0
votes
0answers
11 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
1
vote
0answers
48 views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
0
votes
1answer
50 views

Fixing security holes on my web server

Full disclosure: I'm largely ignorant on web security matters. I'm a self-taught webmaster, and I manage lifering.org, a WordPress site, as a volunteer for Lifering Secular Recovery. We would like ...
128
votes
2answers
39k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
0
votes
0answers
29 views

Can't setup mount of EncFS on user login

I've tried to setup EncFS to be mounted on user login as described in this guide excluding the Password Utility section, however it works with little success. The EncFS works properly ...
0
votes
0answers
34 views

I'm having trouble installing perl module Crypt::OpenSSL::AES

I'm having trouble installing a perl module onto my server called Crypt::OpenSSL::AES I'm using cpan to try to install it but it keeps coming back with an error: Checking if your kit is ...
1
vote
0answers
44 views

Allowing IIS_IUSRS to encrypt & decrypt files [closed]

I have a simple ASP.NET site (on Windows Server 2012 R2 & IIS 8.5) for uploading files to a server. I would like to automatically encrypt these files using Windows' built-in Cryptographic Service ...
8
votes
3answers
5k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
4
votes
1answer
542 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
1
vote
2answers
2k views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
1
vote
0answers
16 views

VPN connection drops when using encryption

I have set up VPN server on Windows Server 2012 If I use encryption to connect to the VPN server the connection would drop after 20min, If I dont use encryption the coonection stays fine. The client ...
0
votes
2answers
158 views

Centos, PHP encrypted connection through freeTDS/ODBC to Microsoft SQL Server

I would like to connect from PHP to a Microsoft SQL Server through an encrypted connection. PHP scripts will run from a CentOS release 6.7 (Final) I want to connect to a Microsoft SQL Server 2014 ...
2
votes
0answers
31 views

How can I connect *with* RC4 ciphers using a browser on an HTTPS connection

I would like to use a web browser to surf some sites while using the RC4 ciphers so I can verify if logging said connections is working on some load balancers. Is there some way for me to enable and ...
1
vote
0answers
102 views

MySQL encryption at rest

Context: Rackspace CloudServers. The options I can find are rather slim. Amazon will encrypt the whole disk (meh), Gazzang could encrypt a virtual partition with just the DB files on it (if the ...
35
votes
7answers
2k views

Is enforcing encryption for SMTP a good idea (yet)?

I am running an email server which is currently set up to use TLS if possible, when sending and receiving emails. When you read in the documentation about this, there is also the option to enforce ...
0
votes
1answer
147 views

McAfee Drive Encryption issues with HP Elitebook 755 G2

Hi all (Sorry if this isn't the right forum to post on), I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
-2
votes
1answer
67 views

how do I LUKS encrypt a drive that already has data?

On a CentOS 7 server, I would like to LUKS encrypt the entire hard drive, including a 50GB partition that has already received yum install and a few other updates, but nothing else. But this tutorial ...
5
votes
3answers
15k views

Whats a good way to encrypt a mysql database, and is it worth it?

I know I can encrypt particular fields of a database, but I'm interested in encrypting every field of the database. I want to make sure no one who gains access to a mysql shell but who does not have ...
-1
votes
2answers
46 views

How can I protect business data from being removed by an employee using encryption? [closed]

I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
1
vote
0answers
19 views

Web encryption on uncontrolled LAN

I have a situation in which I wish to produce (physical hardware) widgets that plug into a LAN and act as a web server, serving content to web clients that are also on the LAN. The traffic from the ...
1
vote
0answers
42 views

Encrypt credentials JNDI authenticating to JBoss 7.1.1.Final

In my JNDI Lookup, connecting to JBoss 7.1.1.Final from remote clients with plain text password is working fine. Now, I am trying to encrypt credentials in the form, but it's not working. ...
1
vote
2answers
45 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
2
votes
2answers
62 views

Allowing multiple users to decrypt pgp emails for one email-address

me and my business partner each have our own company email address for which we use PGP. This allows us to communicate safely with our customers. However in order to communicate securely, the sender ...
0
votes
1answer
165 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
3
votes
1answer
912 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
2
votes
3answers
5k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
1answer
180 views

How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services

I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning: ...
17
votes
7answers
4k views

Easiest way to send encrypted email?

To comply with Massachusetts's new personal information protection law, my company needs to (among other things) ensure that anytime personal information is sent via email, it's encrypted. What is the ...
1
vote
1answer
256 views

Reliable PGP / GnuPG decryption for Mac OSX Mail

I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office. I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
2
votes
0answers
166 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
3
votes
1answer
1k views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. For this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 Here's ...