Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

10
votes
4answers
32k views

How can I see what version of SSL a web server is currently using?

I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this? What is the correct way to disable 2.0 and enable 3.0 on a ...
6
votes
2answers
1k views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
5
votes
1answer
1k views

Encrypted LVM on RAID1 - Failure testing, manual mount

We have an Ubuntu 10.04 LTS server set up with LVM running on top of disk encryption, which runs on top of a RAID1 volume comprised of two physical SATA disks. The configuration looks like this: ...
4
votes
8answers
1k views

protecting my files from root

In a remote box, my files are 700-chmoded, but I'm worried that root may be reading them. Is there a way to add another layer of protection to avoid that, perhaps by encrypting them, but allowing ...
28
votes
13answers
47k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
4
votes
6answers
2k views

Encrypting absolutely everything, even within the LAN

Has anybody tried that approach already? I'm really considering it: Instead of relying on network based IDS etc., every packet must use encryption which was initiated by a certificate issued by my own ...
7
votes
3answers
5k views

IPSec for LAN traffic: Basic considerations?

This is a follow-up to my Encrypting absolutely everything... question. Important: This is not about the more usual IPSec setup, where you want to encrypt traffic between two LANs. My basic goal is ...
5
votes
5answers
653 views

Sharing public key with ssh

Is it possible to somehow setup an ssh server that doesn't require a username,password or cert to login? If that's not possible, if I were to give all customers the same public key, would each ...
4
votes
5answers
39k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
1
vote
5answers
715 views

Encrypted file system on Ubuntu cloud server

Hi We have a cloud server (AWS) running Ubuntu 8.04. All the employees (around 15 people) in the company have system accounts in the server and all are sudoers. We want to provide a way for all the ...
1
vote
4answers
474 views

What's the benefit of using asymmetric keys over passwords?

Is there a benefit to using keys over regular passwords when it comes to logging into a remote server over SSH? (Besides not having to remember/input that password)
89
votes
1answer
23k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
7
votes
6answers
20k views

How should someone create an encrypted password for /etc/shadow?

I am setting up a new account on a Linux box for Subversion repository access, and can send the password to the new user. However, I think there was a command line utility for this new user to encrypt ...
22
votes
2answers
13k views

I have a keypair. How do I determine the key length?

Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
20
votes
4answers
1k views

Are encrypted backups a good idea?

I'm in charge of a small set of laptops and wanted to get some sort of automated remote (over WAN) backups going; the backups would be going to a RAID drive. Because we don't really have a secure ...
4
votes
3answers
4k views

How would you manage keys with TrueCrypt in a business enviroment?

What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
2
votes
3answers
508 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
1
vote
4answers
5k views

How do I setup a SSL mail server?

For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
6
votes
2answers
3k views

Are there huge drawbacks to using an excel 2010 document for password management?

At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
5
votes
3answers
1k views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
3
votes
2answers
321 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
3
votes
4answers
801 views

Looking for an email encryption solution [closed]

I'm looking for an email encryption solution for a client. They are currently using Exchange 2007 but are willing to go to a hosted solution if necessary. They are looking for a solution that will ...
3
votes
3answers
2k views

How to encrypt traffic between two Amazon EC2 instances?

We are building a web app using Amazon EC2 instances running Linux. All the traffic to the client browser is encrypted with SSL. What should be used to encrypt the traffic between the instances. The ...
2
votes
2answers
2k views

Data encryption on VPS

I know there is no way to completely secure a running system, however I'd like to do do what ever is possible. I'm not sure how to phrase the question, but basically, I'd like to secure the data on ...
2
votes
3answers
975 views

Backup on disc using TrueCrypt corruption problem

I recently burned a disc with a TrueCrypt volume. The burning process was bad and several blocks (all in the volume) were corrupted. Perfect! i wanted to test how TrueCrypt can handle corruption. So i ...
2
votes
5answers
10k views

Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?

I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer. Is ...
1
vote
2answers
3k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
1
vote
3answers
246 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
1
vote
2answers
206 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...
0
votes
1answer
566 views

Best encryption client for Outook 2007/Exchange?

We are looking for an encryption client for out business that will encrypt all out going messages, to different clients and different email clients. I understand Outlook 2007 has one built in, any ...
0
votes
6answers
3k views

Is it possible to configure SQL Server 2005 to auto-compress backups?

I have created scheduled backup and shrink maintenance plans for my SQL 2005 instances using the tools in SQL Server Management Studio. I am wondering, is there an equally easy method for ...