Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
753
questions
0
votes
0
answers
65
views
Encrypt SVN issue
could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that.
Would encrypting the ...
- 1
0
votes
0
answers
29
views
Which Cipher Is Being Used To Encrypt NFSv4 With "sec=krb5p"?
I am using NFSv4 with sec=krb5p encryption enabled on a CentOS 7 client & server. My NFS shares mount flawlessly at boot-time, and when I query my keytab file I am able to view the list of ...
- 11
5
votes
1
answer
209
views
AWS Root volume Encryption
In my scenario, I have some old EBS volumes that are not encrypted. To satisfy new corporate security measures, all data needs to be encrypted so I need to compile a plan to encrypt the unencrypted ...
- 61
0
votes
1
answer
24
views
Can I move my encryption key (used for SQL always encrypted) from a key vault in one Azure tenant to another?
We have migrated a database (backup to .bacpac and restore to the new tenant) but the database was encrypted using always encrypted and the key is stored in the original tenant's key vault. I can look ...
- 29
0
votes
0
answers
16
views
Automount second encrypted drive without password
I'm attempt to mount a second encrypted drive at boot by getting the password from a TPM device. I'm on Ubuntu 20.04.
The second drive as well as the first are in LVM as physical volumes. Both ...
0
votes
0
answers
293
views
Does Apache Guacamole support VNC Connection with GNUTLS?
Currently I've working on my custom Remote Desktop Service which is strongly based on Apache Guacamole. I want my whole session encrypted with TLS when I enter Guacamole and connect to my PC with a ...
- 1
0
votes
0
answers
35
views
NextCloud : Can you use encrypted drives / file level encryption?
I am evaluating NextCloud for a solution for which I have a requirement that files cannot exist on non encrypted disks or the files themselves cannot be individually read or cached.
I have read a lot ...
- 345
0
votes
0
answers
29
views
Perform backup of root directory in luks-container form initramfs
My server is running from a root directory in an encrypted luks container with lvm layout.
To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
- 1
0
votes
2
answers
110
views
Encrypt nginx log files
Is it possible to encrypt nginx log files? If so, would the logrotate saving time the best time to do so?
The background for this is that the client is concerning about security issues that can happen ...
- 103
0
votes
1
answer
93
views
LimeSurvey: SodiumException: Wrong decryption key
Last day in a production Debian GNU/Linux server I've updated LimeSurvey from 5.0.1 to 5.2.5 and I could no longer compile any questionnaire, because when a visitor got to the end, LimeSurvey would ...
- 237
0
votes
0
answers
247
views
Why is this SSH handshake failing?
The server logs this
2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222.
2021-12-07 21:57:29.889033114 Server listening on :: port 2222.
2021-12-07 21:57:30.635958078 Connection ...
- 429
0
votes
1
answer
220
views
Which Encryption Method Is Being Used in My OpenVPN server?
When I try connecting to my OpenVPN server , the log on OpenVPN software is a bit confusing .
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 19 04:...
- 27
0
votes
0
answers
36
views
Thales nCipher HSM Software
I'm very new to the HSM world and wanting to learn I bough an old Thales nCipher HSM off eBay for $500. However I didn't realise I needed software for it and the seller didn't provide any (but I do ...
- 1
0
votes
0
answers
22
views
Does storage engine ndbcluster support Data-at-Rest Encryption?
I want to enable Data-at-Rest Encryption in ndbcluster.
I try to find how to make that but it doesn't solve this problem.
Is there another way ? (I care about every solution. Although MySQL Enterprise ...
-2
votes
1
answer
51
views
How to host encrypted users' files in a way that I won't be able to read them?
I am making plans for a new project and looking for a way to allow users upload their files and keep them encrypted and only accessible by them, but at the same time I need their contacts to access ...
- 101
1
vote
1
answer
53
views
Does Microsoft Official RDP Program end to end encrypt data?
For example,
me RDP Client --connect to--> a Linux ServerA 1.1.1.1:3388 --iptables_Port_Forwarding--> a Windows ServerB 2.2.2.2:3389
Then, Is the part of me RDP Client >-to-> the Jump ...
- 55
0
votes
0
answers
58
views
Racoon establish tunnel even both devices uses different aes encryption bit size
i am using racoon in my linux pc to enable ipsecurity. when i configure PC1 with "aes256" phase1 encryption and PC2 configured with "aes128".when i ping PC2 to PC1 tunnel ...
0
votes
1
answer
63
views
unknown variable 'file-key-management-filename'
New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error...
2021-07-16 17:13:16 0 [Note] InnoDB: Using Linux native AIO
2021-07-...
- 1
0
votes
1
answer
63
views
?Does SQL Server 2016/2019 Web Edition supports encryption
I trying to find out if SQL Server 2016 and 2019 Web Edition
supports encryption (on AWS)?
any help will be appreciated.
Thank you,
Moshe
1
vote
2
answers
84
views
Are Windows GPOs encrypted?
We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
- 111
0
votes
1
answer
321
views
Duplicity backup is unexpectedly slow
I have a home cloud server whose data directory contains about 400GB of data.
I've tried to do a full duplicity backup on the directory. It's been running for 17 hours and only about 19 GB of data (...
- 109
0
votes
1
answer
823
views
Unlock SATA SSD locked with Dell's HDD password option in BIOS
Latest problem is a locked SATA disk. It is a Samsung 870 QVO SSD. It has been locked a long time ago with the Dell BIOS password utility. But because an admin password was set, the system never ...
1
vote
2
answers
77
views
Hardware token/UUID for authentication of software
Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software?
I am working on writing a proprietary software for a ...
- 113
0
votes
0
answers
27
views
How to find out the encryption algorithm used in a set of keys
I am running into an issue where I need to find out the encryption strength of a number of keys that I have (lets just say "KEY_0", through "KEY_N"). I am currently on Centos 7. ...
- 101
0
votes
1
answer
47
views
Is fscrypt encryption FIPS compliant?
I am considering to use https://www.kernel.org/doc/html/v4.19/filesystems/fscrypt.html to encrypt directory files and just wondered if the encryption with fscrypt is complaint with FIPS. If so, would ...
0
votes
1
answer
120
views
How can I check & configure Exchange 2013 for sending Encrypted messages to external Email address using Outlook?
One of my user wants to send encrypted messages to external vendor so he requested IT department that how he can do this? I have configured my Outlook from Files-> Options -> Trust Center ...
- 55
0
votes
1
answer
199
views
What is the optimal way to protect my data from my VPS provider? [closed]
What is the optimal way to protect my data (db and source code) from my hosting provider?
Would using an encrypted volume, such as truecrypt, suffice? However - for my program to access data on the ...
- 15
0
votes
1
answer
1k
views
Is VPS Disk Encryption pointless?
It's relatively straight-forward to create an encrypted storage volume (e.g. Like so: https://www.digitalocean.com/community/tutorials/how-to-create-an-encrypted-file-system-on-a-digitalocean-block-...
- 15
6
votes
1
answer
695
views
Data missing after ZFS replication on FreeNAS/TrueNAS
In order to use the new encryption method in TrueNAS 12 I copied all data from a legacy encrypted FreeNAS pool to a newly formatted pool via a replication task.
After replication there seems to be ...
- 63
0
votes
0
answers
926
views
Mysql keyring_file not loading
I am trying to encrypt some tables in a mysql database. I found a way in Mysql documentation (https://dev.mysql.com/doc/refman/8.0/en/innodb-data-encryption.html)
I have added the following lines ...
- 101
0
votes
0
answers
67
views
Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?
Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here.
I'm running a Web Service and currently support these 2 Ciphers:
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F)...
0
votes
1
answer
54
views
How do I setup ipsec VPN between APIs on different servers?
There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
- 291
1
vote
1
answer
219
views
How to set up a secure system to allow only specific clients to access specific services on a server?
Preface
Please bear with me if I use incorrect terminology or don't express the problem too well since I'm not an expert on system administration/server maintenance. Let me know/correct me if I do so ...
- 111
2
votes
2
answers
310
views
How to securely pass secrets to an application
I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
- 45
1
vote
2
answers
243
views
Is all web traffic sent over http/https protocol?
I was wondering what were the differences (security-wise) between VPN encryption and HTTPS encryption, and I found this article: https://surfshark.com/blog/vpn-vs-https According to this blog, HTTPS ...
- 23
1
vote
2
answers
152
views
Possibilities to protect network traffic in datacenter without adding much latency
I am looking for possibilities (and their pros and cons) for protecting network traffic of the components of a a time-critical application in a data center. The aim is minimizing the damage an ...
- 5,097
1
vote
1
answer
754
views
nginx server that only proxies to my game servers
I have clients connecting to my WebSockets game server for an online browser game. Game servers are created and destroyed when players start games, and so each server can have a different IP address ...
- 13
0
votes
1
answer
31
views
What would basic encryption key management do's and don'ts look like for an organization that has a low amount of keys?
The company I work at, just had a need for encryption to be utilized. What would be the best practice for taking care of this key, during its lifecycle? Where should I keep it?
0
votes
1
answer
91
views
Decrypt file for specific session in CentOS 7
I am looking for a way to encrypt my file that can be decrypted for the current terminal session. The moment we exit the session, it gets encrypted again.
A use case for this scenario would be: Let's ...
- 1
0
votes
1
answer
294
views
win10 bitlocker enrypts partition after update
one of my clients has an laptop with Win 10.
After the client run the latest Updates apparently BitLocker started to encrypt the files/Partition WITHOUT CONSENT and WITHOUT PROVIDING ANY RECOVERY KEYS....
- 57
0
votes
1
answer
471
views
Might "Require TLS Encryption" in Exchange mail-flow rules cause compatibility issues for e-mail?
Picture of how I'm forcing TLS.
This is essentially forced TLS.
Should "Require TLS Encryption" be required for microsoft exchange mailflow rules?
I'm worried about compatibility issues, e-...
- 103
0
votes
0
answers
30
views
Read files from an encrypted disk?
Is it possible to read from an LUKS-encrypted disk via the terminal, e.g. by booting from a live Linux system on a USB flash drive and accessing the encrypted host computer's hard drive?
- 1
0
votes
0
answers
35
views
How to create a local email relay for encrypt mails
We have a Ubuntu 20.04 server with redmine installed. Redmine send automated mails through an external smtp provider. We have also other services that do the same thing (teamcity etc)
Everything works ...
- 111
0
votes
0
answers
54
views
How to set up IPsec between two instances within the same VPC assuming that the traffic between them isn't secure?
I want to set up a secure transit of data between services running is different instances.
First , I thought about setting up an EFS but I don't really like that an instance could have an access to ...
- 35
0
votes
1
answer
1k
views
OpenVPN faster with encryption than without it
I would've expected OpenVPN to achieve higher speeds when encryption is disabled, but the opposite is true.
When setting the cipher to AES-128-GCM, the speed between two of my computers is 580 to 613 ...
- 101
0
votes
1
answer
34
views
Is it possible to umount a drive from where a program is running?
I want to run some confidential program on a cloud server. In order to protect it from being copied, I can encrypt it into a drive and mount the decrypted drive to run it. However I want to umount the ...
- 330
3
votes
1
answer
254
views
What filesystem and RAID for a server syncing linux windows macOS android and iOS machines
I plan to have one master server including several HDDs (for RAID5, probably all homogeneous with 4TB each), and one remote slave server containing only one big capacity HDD, or a bunch of disks not ...
- 31
0
votes
1
answer
255
views
RDP Connection closes due to Encryption error
My azure windows VM has been working fine for 3 months since it was set up. I tried to reconnect today via RDP and it came up with Remote Desktop Application - because of an error in data encrption ...
2
votes
2
answers
596
views
Set default data encryption policy in exchange online
I have recently enabled the customer key on my o365 tennant.
I have been able to set my mailboxes DEP with the following :
Get-Mailbox | Set-Mailbox -DataEncryptionPolicy "MyDEPPolicyNmae"
Now I'm ...
- 198
0
votes
1
answer
1k
views
Generate PFX file using P7B file with private key data in text format
I have the certificate in P7B format and along with I have private key data in text file format as below. Can anyone please help how can I generate the PFX certificate using this data?
-----BEGIN ...
- 11