Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
769
questions
-3
votes
0
answers
31
views
Kubernetes: Encryption at Rest
3 weeks ago I opened an help request for encrypting at rest here: Where can I find the key_id returned by the EncryptRequest procedure call and the key_id returned by the Status ? · Issue #2 · ...
- 95
0
votes
1
answer
98
views
M365/OME - Encrypt emails not using TLS 1.2
I don't want to require the use of TLS 1.2 in Exchange online/O365 as it might result in some important business email not being sent/received.
So has anyone found a way to actually encrypt all in/out ...
-1
votes
2
answers
65
views
Disabling SHA in IIS
My company has a web server running IIS 6, and was asked to help disable SHA on it.
Specifically this cipher: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
I found these instructions https://www.namecheap.com/...
- 207
0
votes
0
answers
98
views
What is the difference between Mandatory and Strict modes in SQL Server 2022 encryption
It is possible to configure SQL Server encryption mode as Strict, rather than Mandatory.
Unlike other versions of SQL Server and ODBC drivers where you could only specify whether you want the ...
- 229
0
votes
1
answer
34
views
How to protect Jenkins from super users?
Any super user who has access to the Jenkins running on a Linux server can easily disable security authentication from config.xml file; then log in and can also decrypt sensitive passwords from ...
bsd-boo
0
votes
0
answers
141
views
Decrypting Kubernetes secret using the encryption key
I have a toy Kubernetes cluster with Encryption at rest enabled using the abs-256-cbc provider; I have not used any vault here for kms simulating the problem. This means the encryption key is in a ...
- 101
0
votes
0
answers
62
views
Prereqs for "Require NTLMv2 session security"?
I have a requirement to set this up for servers on my Domain environment (both the client and server version). Workstations are Windows 10 and all Servers are Server 2019.
I know how to do it through ...
- 153
0
votes
1
answer
371
views
Can Bitlocker be applied to a shared volume of the Windows 2022 server? + SMB Encryption?
Our school has a remote file server (Windows 2022 virtual server on a colo) that provides network shared drives. We have both Windows and MacOS clients accessing it through SMB.
Recently our IT Sub-...
- 33
0
votes
1
answer
303
views
OpenConnect force clients to use special cipher
I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server
I need to force clients to use special cipher like AES-256-GCM
because it seems that VPN blocks on some 4G net ...
- 131
1
vote
1
answer
413
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
- 11
0
votes
0
answers
27
views
Does ecryptfs support AES-256? How can I check?
I have been asked if our workstations are encrypted with AES-256. I have not been able to find this information at ecryptfs.org. Various web searches report conflicting information.
Is there a way to ...
- 358
0
votes
1
answer
147
views
nginx append query parameter with encrypted value to a react application
I want to send the DN field from the client certificate ($ssl_client_s_dn), but I want to send it encrypted.
In the question nginx append query parameter to a react application it is explained how to ...
- 19
1
vote
1
answer
107
views
How to generate kerberos traffic?
I'm trying to verify the encryption types allowed for kerberos by viewing packet captures in order to prepare to remove support for RC4 with kerberos. Does anyone know what I can do on Windows Server ...
- 403
0
votes
0
answers
52
views
Postfix and Dovecot security: receiving emails only
I'm creating a Postfix email server. It's bare-bones- I'm only using the email server to receive from my gmail account. So far I have TLS/SSL encryption on Postfix and Dovecot.
Is TLS/SSL enough? What ...
0
votes
0
answers
31
views
ADFS and ColdFusion setup regarding certificate
I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, ...
user282823
-5
votes
2
answers
458
views
Encryption at rest for VM storage in a hypervisor done properly/elegantly
Given a very simple infrastructure - a single machine running a hypervisor(Proxmox if it matters), I want to achieve a good data protection against the hardware being stolen.
Let's say there are ...
- 143
0
votes
1
answer
111
views
PureFtpD to Proftp Password Conversion
I am planning to migrate users from pureftp to proftpd, i need a tool to perform password conversion
Mysql password format-
MYSQLCrypt md5
pureftp From:
9dd4e461268c8034f5c8564e155c67a6
Proftpd - ...
- 21
1
vote
1
answer
250
views
MySQL keyring component configuration
I am having the exact same issue as described by user nerdgeekdork here:
MySQL keyring component (not plugin) not loading on server startup
I have tried setting up the component in the same way, as ...
- 11
1
vote
1
answer
217
views
LDAP SSSD SHA-512 authentication failure
I have a server with helm-openldap and a debian client.
I can't login to a user who has a SHA-512 encrypted password. If i store it in clear or MD5, it works perfectly.
$ id tuser
uid=5000(tuser) gid=...
- 13
0
votes
0
answers
78
views
How can I prevent a Virtual Machine from copy on the host?
I've been distributing a few virtual machines as 'beta' version of an project, but I don't have a specific security system on it so far. So, I'm looking for a way to only enable access to the virtual ...
0
votes
0
answers
69
views
SHA512-CRYPT MariaDB passwords migration to DynamoDB
I used to run my mail server's DB in MariaDB (10.5.16) on-prem on Debian 10. I've now migrated this to RDS, however I would also like to try and migrate to DynamoDB.
Most of the data is plaintext, ...
0
votes
0
answers
146
views
Encrypt SVN issue
could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that.
Would encrypting the ...
- 1
0
votes
0
answers
296
views
Which Cipher Is Being Used To Encrypt NFSv4 With "sec=krb5p"?
I am using NFSv4 with sec=krb5p encryption enabled on a CentOS 7 client & server. My NFS shares mount flawlessly at boot-time, and when I query my keytab file I am able to view the list of ...
- 11
6
votes
1
answer
2k
views
AWS Root volume Encryption
In my scenario, I have some old EBS volumes that are not encrypted. To satisfy new corporate security measures, all data needs to be encrypted so I need to compile a plan to encrypt the unencrypted ...
- 71
0
votes
1
answer
161
views
Can I move my encryption key (used for SQL always encrypted) from a key vault in one Azure tenant to another?
We have migrated a database (backup to .bacpac and restore to the new tenant) but the database was encrypted using always encrypted and the key is stored in the original tenant's key vault. I can look ...
- 29
0
votes
0
answers
1k
views
Does Apache Guacamole support VNC Connection with GNUTLS?
Currently I've working on my custom Remote Desktop Service which is strongly based on Apache Guacamole. I want my whole session encrypted with TLS when I enter Guacamole and connect to my PC with a ...
- 1
0
votes
0
answers
110
views
NextCloud : Can you use encrypted drives / file level encryption?
I am evaluating NextCloud for a solution for which I have a requirement that files cannot exist on non encrypted disks or the files themselves cannot be individually read or cached.
I have read a lot ...
- 345
0
votes
0
answers
61
views
Perform backup of root directory in luks-container form initramfs
My server is running from a root directory in an encrypted luks container with lvm layout.
To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
- 1
0
votes
2
answers
311
views
Encrypt nginx log files
Is it possible to encrypt nginx log files? If so, would the logrotate saving time the best time to do so?
The background for this is that the client is concerning about security issues that can happen ...
- 103
0
votes
1
answer
247
views
LimeSurvey: SodiumException: Wrong decryption key
Last day in a production Debian GNU/Linux server I've updated LimeSurvey from 5.0.1 to 5.2.5 and I could no longer compile any questionnaire, because when a visitor got to the end, LimeSurvey would ...
- 304
1
vote
0
answers
2k
views
Why is this SSH handshake failing?
The server logs this
2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222.
2021-12-07 21:57:29.889033114 Server listening on :: port 2222.
2021-12-07 21:57:30.635958078 Connection ...
- 459
0
votes
1
answer
2k
views
Which Encryption Method Is Being Used in My OpenVPN server?
When I try connecting to my OpenVPN server , the log on OpenVPN software is a bit confusing .
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 19 04:...
- 27
-2
votes
1
answer
105
views
How to host encrypted users' files in a way that I won't be able to read them?
I am making plans for a new project and looking for a way to allow users upload their files and keep them encrypted and only accessible by them, but at the same time I need their contacts to access ...
- 111
1
vote
1
answer
101
views
Does Microsoft Official RDP Program end to end encrypt data?
For example,
me RDP Client --connect to--> a Linux ServerA 1.1.1.1:3388 --iptables_Port_Forwarding--> a Windows ServerB 2.2.2.2:3389
Then, Is the part of me RDP Client >-to-> the Jump ...
- 55
0
votes
1
answer
134
views
unknown variable 'file-key-management-filename'
New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error...
2021-07-16 17:13:16 0 [Note] InnoDB: Using Linux native AIO
2021-07-...
- 1
0
votes
1
answer
172
views
?Does SQL Server 2016/2019 Web Edition supports encryption
I trying to find out if SQL Server 2016 and 2019 Web Edition
supports encryption (on AWS)?
any help will be appreciated.
Thank you,
Moshe
1
vote
2
answers
161
views
Are Windows GPOs encrypted?
We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
- 111
0
votes
1
answer
651
views
Duplicity backup is unexpectedly slow
I have a home cloud server whose data directory contains about 400GB of data.
I've tried to do a full duplicity backup on the directory. It's been running for 17 hours and only about 19 GB of data (...
- 109
0
votes
1
answer
2k
views
Unlock SATA SSD locked with Dell's HDD password option in BIOS
Latest problem is a locked SATA disk. It is a Samsung 870 QVO SSD. It has been locked a long time ago with the Dell BIOS password utility. But because an admin password was set, the system never ...
1
vote
2
answers
254
views
Hardware token/UUID for authentication of software
Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software?
I am working on writing a proprietary software for a ...
- 113
0
votes
1
answer
68
views
Is fscrypt encryption FIPS compliant?
I am considering to use https://www.kernel.org/doc/html/v4.19/filesystems/fscrypt.html to encrypt directory files and just wondered if the encryption with fscrypt is complaint with FIPS. If so, would ...
0
votes
1
answer
345
views
How can I check & configure Exchange 2013 for sending Encrypted messages to external Email address using Outlook?
One of my user wants to send encrypted messages to external vendor so he requested IT department that how he can do this? I have configured my Outlook from Files-> Options -> Trust Center ...
- 55
0
votes
1
answer
452
views
What is the optimal way to protect my data from my VPS provider? [closed]
What is the optimal way to protect my data (db and source code) from my hosting provider?
Would using an encrypted volume, such as truecrypt, suffice? However - for my program to access data on the ...
- 35
1
vote
2
answers
3k
views
Is VPS Disk Encryption pointless?
It's relatively straight-forward to create an encrypted storage volume (e.g. Like so: https://www.digitalocean.com/community/tutorials/how-to-create-an-encrypted-file-system-on-a-digitalocean-block-...
- 35
7
votes
1
answer
1k
views
Data missing after ZFS replication on FreeNAS/TrueNAS
In order to use the new encryption method in TrueNAS 12 I copied all data from a legacy encrypted FreeNAS pool to a newly formatted pool via a replication task.
After replication there seems to be ...
- 73
0
votes
0
answers
2k
views
Mysql keyring_file not loading
I am trying to encrypt some tables in a mysql database. I found a way in Mysql documentation (https://dev.mysql.com/doc/refman/8.0/en/innodb-data-encryption.html)
I have added the following lines ...
- 101
0
votes
0
answers
166
views
Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?
Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here.
I'm running a Web Service and currently support these 2 Ciphers:
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F)...
0
votes
1
answer
202
views
How do I setup ipsec VPN between APIs on different servers?
There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
- 311
1
vote
1
answer
793
views
How to set up a secure system to allow only specific clients to access specific services on a server?
Preface
Please bear with me if I use incorrect terminology or don't express the problem too well since I'm not an expert on system administration/server maintenance. Let me know/correct me if I do so ...
- 111
2
votes
2
answers
549
views
How to securely pass secrets to an application
I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
- 45