Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

11
votes
3answers
5k views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
44
votes
14answers
86k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
5
votes
1answer
2k views

Encrypted LVM on RAID1 - Failure testing, manual mount

We have an Ubuntu 10.04 LTS server set up with LVM running on top of disk encryption, which runs on top of a RAID1 volume comprised of two physical SATA disks. The configuration looks like this: ...
4
votes
8answers
2k views

protecting my files from root

In a remote box, my files are 700-chmoded, but I'm worried that root may be reading them. Is there a way to add another layer of protection to avoid that, perhaps by encrypting them, but allowing ...
143
votes
2answers
46k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
24
votes
4answers
24k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
8
votes
3answers
7k views

IPSec for LAN traffic: Basic considerations?

This is a follow-up to my Encrypting absolutely everything... question. Important: This is not about the more usual IPSec setup, where you want to encrypt traffic between two LANs. My basic goal is ...
13
votes
4answers
63k views

How can I see what version of SSL a web server is currently using?

I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this? What is the correct way to disable 2.0 and enable 3.0 on a ...
2
votes
6answers
14k views

Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?

I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer. Is ...
1
vote
4answers
518 views

What's the benefit of using asymmetric keys over passwords?

Is there a benefit to using keys over regular passwords when it comes to logging into a remote server over SSH? (Besides not having to remember/input that password)
42
votes
2answers
28k views

I have a keypair. How do I determine the key length?

Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
23
votes
4answers
1k views

Are encrypted backups a good idea?

I'm in charge of a small set of laptops and wanted to get some sort of automated remote (over WAN) backups going; the backups would be going to a RAID drive. Because we don't really have a secure ...
8
votes
6answers
27k views

How should someone create an encrypted password for /etc/shadow?

I am setting up a new account on a Linux box for Subversion repository access, and can send the password to the new user. However, I think there was a command line utility for this new user to encrypt ...
6
votes
6answers
4k views

Encrypting absolutely everything, even within the LAN

Has anybody tried that approach already? I'm really considering it: Instead of relying on network based IDS etc., every packet must use encryption which was initiated by a certificate issued by my own ...
9
votes
1answer
6k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? mgorven@...
36
votes
7answers
2k views

Is enforcing encryption for SMTP a good idea (yet)?

I am running an email server which is currently set up to use TLS if possible, when sending and receiving emails. When you read in the documentation about this, there is also the option to enforce ...
4
votes
3answers
4k views

How would you manage keys with TrueCrypt in a business enviroment?

What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
16
votes
3answers
11k views

How to disable swap files in ESXi?

We are running a few Solaris / Linux VMs on ESXi that contain very sensitive encrypted data that eventually get decrypted as required in memory. Everything is fine, except for the ESXi swap files ...
2
votes
3answers
550 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
2
votes
4answers
8k views

How do I setup a SSL mail server?

For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
1
vote
1answer
8k views

SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections

SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE SSL cert from third-party CA has been installed in Local Computer\Personal ...
6
votes
3answers
2k views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
3
votes
2answers
691 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
3
votes
3answers
2k views

How to encrypt traffic between two Amazon EC2 instances?

We are building a web app using Amazon EC2 instances running Linux. All the traffic to the client browser is encrypted with SSL. What should be used to encrypt the traffic between the instances. The ...
3
votes
4answers
1k views

Looking for an email encryption solution [closed]

I'm looking for an email encryption solution for a client. They are currently using Exchange 2007 but are willing to go to a hosted solution if necessary. They are looking for a solution that will ...
2
votes
3answers
2k views

decrypting AES files in an apache module?

I have a client with a security policy compliance requirement to encrypt certain files on disk. The obvious way to do this is with Device-mapper and an AES crypto module However the current system ...
2
votes
3answers
1k views

Backup on disc using TrueCrypt corruption problem

I recently burned a disc with a TrueCrypt volume. The burning process was bad and several blocks (all in the volume) were corrupted. Perfect! i wanted to test how TrueCrypt can handle corruption. So i ...
1
vote
1answer
1k views

Problem with setting up partitions - encrypted swap partition won't mount

Here's the layout I have; I'm using Software RAID10, LVM, and Encryption: LVM VG vg0, LV main - 2.0 TB Linux device-mapper (linear) #1 2.0 TB K crypto (vg0-main_crypt) ...
1
vote
3answers
353 views

Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?

Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
1
vote
2answers
236 views

Storing RSA Private Key un-encrypted

We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them. The main problem is that when ...
0
votes
1answer
624 views

Best encryption client for Outook 2007/Exchange?

We are looking for an encryption client for out business that will encrypt all out going messages, to different clients and different email clients. I understand Outlook 2007 has one built in, any ...
0
votes
1answer
448 views

Simple encryption for Samba shares

I have an Arch Linux machine acting as an SSH and file server, using vsftpd for FTP and samba for SMB. I would like to access this server via SMB over the Internet, and it is currently set up to ...
0
votes
6answers
4k views

Is it possible to configure SQL Server 2005 to auto-compress backups?

I have created scheduled backup and shrink maintenance plans for my SQL 2005 instances using the tools in SQL Server Management Studio. I am wondering, is there an equally easy method for ...