As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [encryption]

Encryption is transforming information through a cipher to protect it from unauthorized access.

Filter by
Sorted by
Tagged with
-3 votes
0 answers
31 views

Kubernetes: Encryption at Rest

3 weeks ago I opened an help request for encrypting at rest here: Where can I find the key_id returned by the EncryptRequest procedure call and the key_id returned by the Status ? · Issue #2 · ...
Raphael10's user avatar
0 votes
1 answer
98 views

M365/OME - Encrypt emails not using TLS 1.2

I don't want to require the use of TLS 1.2 in Exchange online/O365 as it might result in some important business email not being sent/received. So has anyone found a way to actually encrypt all in/out ...
Mathias Rønnow Nørtoft's user avatar
-1 votes
2 answers
65 views

Disabling SHA in IIS

My company has a web server running IIS 6, and was asked to help disable SHA on it. Specifically this cipher: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA I found these instructions https://www.namecheap.com/...
AndyD273's user avatar
  • 207
0 votes
0 answers
98 views

What is the difference between Mandatory and Strict modes in SQL Server 2022 encryption

It is possible to configure SQL Server encryption mode as Strict, rather than Mandatory. Unlike other versions of SQL Server and ODBC drivers where you could only specify whether you want the ...
username's user avatar
  • 229
0 votes
1 answer
34 views

How to protect Jenkins from super users?

Any super user who has access to the Jenkins running on a Linux server can easily disable security authentication from config.xml file; then log in and can also decrypt sensitive passwords from ...
user avatar
0 votes
0 answers
141 views

Decrypting Kubernetes secret using the encryption key

I have a toy Kubernetes cluster with Encryption at rest enabled using the abs-256-cbc provider; I have not used any vault here for kms simulating the problem. This means the encryption key is in a ...
P....'s user avatar
  • 101
0 votes
0 answers
62 views

Prereqs for "Require NTLMv2 session security"?

I have a requirement to set this up for servers on my Domain environment (both the client and server version). Workstations are Windows 10 and all Servers are Server 2019. I know how to do it through ...
The ITea Guy's user avatar
0 votes
1 answer
371 views

Can Bitlocker be applied to a shared volume of the Windows 2022 server? + SMB Encryption?

Our school has a remote file server (Windows 2022 virtual server on a colo) that provides network shared drives. We have both Windows and MacOS clients accessing it through SMB. Recently our IT Sub-...
RabbitSF's user avatar
0 votes
1 answer
303 views

OpenConnect force clients to use special cipher

I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server I need to force clients to use special cipher like AES-256-GCM because it seems that VPN blocks on some 4G net ...
Farhad Sakhaei's user avatar
1 vote
1 answer
413 views

Disable read/write workqueue for Ubuntu Full-Disk-Encryption

I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
Pascal Diu's user avatar
0 votes
0 answers
27 views

Does ecryptfs support AES-256? How can I check?

I have been asked if our workstations are encrypted with AES-256. I have not been able to find this information at ecryptfs.org. Various web searches report conflicting information. Is there a way to ...
dannyman's user avatar
  • 358
0 votes
1 answer
147 views

nginx append query parameter with encrypted value to a react application

I want to send the DN field from the client certificate ($ssl_client_s_dn), but I want to send it encrypted. In the question nginx append query parameter to a react application it is explained how to ...
Ximo Dante's user avatar
1 vote
1 answer
107 views

How to generate kerberos traffic?

I'm trying to verify the encryption types allowed for kerberos by viewing packet captures in order to prepare to remove support for RC4 with kerberos. Does anyone know what I can do on Windows Server ...
Roman's user avatar
  • 403
0 votes
0 answers
52 views

Postfix and Dovecot security: receiving emails only

I'm creating a Postfix email server. It's bare-bones- I'm only using the email server to receive from my gmail account. So far I have TLS/SSL encryption on Postfix and Dovecot. Is TLS/SSL enough? What ...
trouble_bucket's user avatar
0 votes
0 answers
31 views

ADFS and ColdFusion setup regarding certificate

I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, ...
user avatar
-5 votes
2 answers
458 views

Encryption at rest for VM storage in a hypervisor done properly/elegantly

Given a very simple infrastructure - a single machine running a hypervisor(Proxmox if it matters), I want to achieve a good data protection against the hardware being stolen. Let's say there are ...
alex.b.bg's user avatar
  • 143
0 votes
1 answer
111 views

PureFtpD to Proftp Password Conversion

I am planning to migrate users from pureftp to proftpd, i need a tool to perform password conversion Mysql password format- MYSQLCrypt md5 pureftp From: 9dd4e461268c8034f5c8564e155c67a6 Proftpd - ...
Rajesh Yidi's user avatar
1 vote
1 answer
250 views

MySQL keyring component configuration

I am having the exact same issue as described by user nerdgeekdork here: MySQL keyring component (not plugin) not loading on server startup I have tried setting up the component in the same way, as ...
Four Candles's user avatar
1 vote
1 answer
217 views

LDAP SSSD SHA-512 authentication failure

I have a server with helm-openldap and a debian client. I can't login to a user who has a SHA-512 encrypted password. If i store it in clear or MD5, it works perfectly. $ id tuser uid=5000(tuser) gid=...
ange's user avatar
  • 13
0 votes
0 answers
78 views

How can I prevent a Virtual Machine from copy on the host?

I've been distributing a few virtual machines as 'beta' version of an project, but I don't have a specific security system on it so far. So, I'm looking for a way to only enable access to the virtual ...
TelemetryJoe's user avatar
0 votes
0 answers
69 views

SHA512-CRYPT MariaDB passwords migration to DynamoDB

I used to run my mail server's DB in MariaDB (10.5.16) on-prem on Debian 10. I've now migrated this to RDS, however I would also like to try and migrate to DynamoDB. Most of the data is plaintext, ...
carlitobrigante's user avatar
0 votes
0 answers
146 views

Encrypt SVN issue

could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that. Would encrypting the ...
samtech's user avatar
0 votes
0 answers
296 views

Which Cipher Is Being Used To Encrypt NFSv4 With "sec=krb5p"?

I am using NFSv4 with sec=krb5p encryption enabled on a CentOS 7 client & server. My NFS shares mount flawlessly at boot-time, and when I query my keytab file I am able to view the list of ...
Will's user avatar
  • 11
6 votes
1 answer
2k views

AWS Root volume Encryption

In my scenario, I have some old EBS volumes that are not encrypted. To satisfy new corporate security measures, all data needs to be encrypted so I need to compile a plan to encrypt the unencrypted ...
samtech 2021's user avatar
0 votes
1 answer
161 views

Can I move my encryption key (used for SQL always encrypted) from a key vault in one Azure tenant to another?

We have migrated a database (backup to .bacpac and restore to the new tenant) but the database was encrypted using always encrypted and the key is stored in the original tenant's key vault. I can look ...
R2Bleep2's user avatar
0 votes
0 answers
1k views

Does Apache Guacamole support VNC Connection with GNUTLS?

Currently I've working on my custom Remote Desktop Service which is strongly based on Apache Guacamole. I want my whole session encrypted with TLS when I enter Guacamole and connect to my PC with a ...
redjen's user avatar
  • 1
0 votes
0 answers
110 views

NextCloud : Can you use encrypted drives / file level encryption?

I am evaluating NextCloud for a solution for which I have a requirement that files cannot exist on non encrypted disks or the files themselves cannot be individually read or cached. I have read a lot ...
Alex's user avatar
  • 345
0 votes
0 answers
61 views

Perform backup of root directory in luks-container form initramfs

My server is running from a root directory in an encrypted luks container with lvm layout. To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
northcom's user avatar
0 votes
2 answers
311 views

Encrypt nginx log files

Is it possible to encrypt nginx log files? If so, would the logrotate saving time the best time to do so? The background for this is that the client is concerning about security issues that can happen ...
FormigaNinja's user avatar
0 votes
1 answer
247 views

LimeSurvey: SodiumException: Wrong decryption key

Last day in a production Debian GNU/Linux server I've updated LimeSurvey from 5.0.1 to 5.2.5 and I could no longer compile any questionnaire, because when a visitor got to the end, LimeSurvey would ...
Valerio Bozzolan's user avatar
1 vote
0 answers
2k views

Why is this SSH handshake failing?

The server logs this 2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222. 2021-12-07 21:57:29.889033114 Server listening on :: port 2222. 2021-12-07 21:57:30.635958078 Connection ...
conorgriffin's user avatar
0 votes
1 answer
2k views

Which Encryption Method Is Being Used in My OpenVPN server?

When I try connecting to my OpenVPN server , the log on OpenVPN software is a bit confusing . Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Fri Nov 19 04:...
master lfc6's user avatar
-2 votes
1 answer
105 views

How to host encrypted users' files in a way that I won't be able to read them?

I am making plans for a new project and looking for a way to allow users upload their files and keep them encrypted and only accessible by them, but at the same time I need their contacts to access ...
CDoc's user avatar
  • 111
1 vote
1 answer
101 views

Does Microsoft Official RDP Program end to end encrypt data?

For example, me RDP Client --connect to--> a Linux ServerA 1.1.1.1:3388 --iptables_Port_Forwarding--> a Windows ServerB 2.2.2.2:3389 Then, Is the part of me RDP Client >-to-> the Jump ...
rm -rf's user avatar
  • 55
0 votes
1 answer
134 views

unknown variable 'file-key-management-filename'

New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error... 2021-07-16 17:13:16 0 [Note] InnoDB: Using Linux native AIO 2021-07-...
Stephen's user avatar
0 votes
1 answer
172 views

?Does SQL Server 2016/2019 Web Edition supports encryption

I trying to find out if SQL Server 2016 and 2019 Web Edition supports encryption (on AWS)? any help will be appreciated. Thank you, Moshe
Moshe Harel's user avatar
1 vote
2 answers
161 views

Are Windows GPOs encrypted?

We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
scmccart's user avatar
  • 111
0 votes
1 answer
651 views

Duplicity backup is unexpectedly slow

I have a home cloud server whose data directory contains about 400GB of data. I've tried to do a full duplicity backup on the directory. It's been running for 17 hours and only about 19 GB of data (...
maxbc's user avatar
  • 109
0 votes
1 answer
2k views

Unlock SATA SSD locked with Dell's HDD password option in BIOS

Latest problem is a locked SATA disk. It is a Samsung 870 QVO SSD. It has been locked a long time ago with the Dell BIOS password utility. But because an admin password was set, the system never ...
Earl Hughes's user avatar
1 vote
2 answers
254 views

Hardware token/UUID for authentication of software

Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software? I am working on writing a proprietary software for a ...
Cyberpks's user avatar
  • 113
0 votes
1 answer
68 views

Is fscrypt encryption FIPS compliant?

I am considering to use https://www.kernel.org/doc/html/v4.19/filesystems/fscrypt.html to encrypt directory files and just wondered if the encryption with fscrypt is complaint with FIPS. If so, would ...
jerry chung's user avatar
0 votes
1 answer
345 views

How can I check & configure Exchange 2013 for sending Encrypted messages to external Email address using Outlook?

One of my user wants to send encrypted messages to external vendor so he requested IT department that how he can do this? I have configured my Outlook from Files-> Options -> Trust Center ...
G Vakharia's user avatar
0 votes
1 answer
452 views

What is the optimal way to protect my data from my VPS provider? [closed]

What is the optimal way to protect my data (db and source code) from my hosting provider? Would using an encrypted volume, such as truecrypt, suffice? However - for my program to access data on the ...
Glenn's user avatar
  • 35
1 vote
2 answers
3k views

Is VPS Disk Encryption pointless?

It's relatively straight-forward to create an encrypted storage volume (e.g. Like so: https://www.digitalocean.com/community/tutorials/how-to-create-an-encrypted-file-system-on-a-digitalocean-block-...
Glenn's user avatar
  • 35
7 votes
1 answer
1k views

Data missing after ZFS replication on FreeNAS/TrueNAS

In order to use the new encryption method in TrueNAS 12 I copied all data from a legacy encrypted FreeNAS pool to a newly formatted pool via a replication task. After replication there seems to be ...
Andept's user avatar
  • 73
0 votes
0 answers
2k views

Mysql keyring_file not loading

I am trying to encrypt some tables in a mysql database. I found a way in Mysql documentation (https://dev.mysql.com/doc/refman/8.0/en/innodb-data-encryption.html) I have added the following lines ...
Aneeez's user avatar
  • 101
0 votes
0 answers
166 views

Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?

Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here. I'm running a Web Service and currently support these 2 Ciphers: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F)...
Adamski2505's user avatar
0 votes
1 answer
202 views

How do I setup ipsec VPN between APIs on different servers?

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
xenon's user avatar
  • 311
1 vote
1 answer
793 views

How to set up a secure system to allow only specific clients to access specific services on a server?

Preface Please bear with me if I use incorrect terminology or don't express the problem too well since I'm not an expert on system administration/server maintenance. Let me know/correct me if I do so ...
nicoty's user avatar
  • 111
2 votes
2 answers
549 views

How to securely pass secrets to an application

I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
xsw2_2wsx's user avatar

1
2 3 4 5
16