Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
781
questions
0
votes
0
answers
9
views
Is the cluster key in AD Rights Management Service(RMS) the same as the private key for the SLC?
In AD RMS there is a Server Licensor Certificate that is responsible for encrypting content keys and such, and to do that a public-private key pair is generated.
I also know that RMS has something ...
- 11
0
votes
0
answers
21
views
How can I use rclone unattended while protecting my access keys from my provider?
I am running rclone remotely, over SSH, in the form of:
ssh user@host rclone ...
And this means that I have an rclone config at that host that contains my S3 bucket credentials--which I do not want ...
- 221
0
votes
0
answers
8
views
How to Securely Protect Decrypted Firmware Files During Flashing Process In C++ CLI Tool? [migrated]
I am developing a C++ CLI tool for Windows that flashes firmware to devices. The tool fetches encrypted firmware files from a server, decrypts them only during the flashing process, and deletes them ...
-1
votes
2
answers
86
views
Do I have to include the server secret (used to encrypt passwords) in the backup?
I have been requested to create a backup of a server. The server is Linux Ubuntu 22.04.2 where the core application (nodejs) + management software (nodejs / bash scripts) + monitoring (nodejs / net-...
- 1
0
votes
0
answers
53
views
MariaDB/MySQL TDE extract/recover key from running server, when keyfile is lost?
If I have a MariaDB Server encrypted with the File Key Management Encryption Plugin (TDE / Transparent Data Encryption), is it somehow possible to extract the key from the running server?
To my ...
- 150
0
votes
0
answers
163
views
GPG not decrypting PGP file in cmd line / script
Using Kleopatra / GPG4win
Have keys / secrets installed. Key trust is set to ultimate, validity is full, not expired. See it listed when doing gpg --list-secret-key and gpg --list-keys, everything ...
- 1
9
votes
2
answers
1k
views
AWS Graviton Processors: which encryption specs are hardware accelerated?
In testing Graviton instances there seems to be significantly more CPU overhead from AES/SHA functions compared to the same on cheaper/smaller Intel/AMD instances. Do these procs supports hardware ...
- 283
3
votes
0
answers
185
views
why does GPG ignore the trust level I had set for recepient key?
I encountered the following puzzling behavior with GPG: after I set trust for a recipient's key, gpg still complains it doesn't know if it should use the encryption subkey and prompts for input.
Here ...
- 31
0
votes
0
answers
36
views
How Can I Update Encryption and Deffie Hellman Groups for VPN in GCP?
So, I've got a VPN set up at the moment that's connected to the client's VPN and it's all good. Now, the client wants to tweak the encryption method to AES256 and Deffie Hellman groups to 19.
Is it ...
0
votes
1
answer
336
views
TrueNas Encryption method changed - Is the data safe?
just a quick question of understanding. I have a TrueNas Scale server and I just changed the Encryption method from key to passphrase. Now I wonder if I need to rewrite the whole dataset for this to ...
- 45
2
votes
1
answer
1k
views
MS365: Sending encrypted to remote tenants occasionally fails with "user not in tenant"
We are attempting to replace a secure email gateway solution with MS365's inbuilt email message encryption.
We have a mail flow rule set up to force encryption from a specific sending address to any ...
- 882
1
vote
0
answers
90
views
Which is the correct capability in Courier SMTP config to get user's password (encryption type)
MySql: 8.0.34-0ubuntu0.22.04.1
I have followed this guide: Postfix With Courier IMAP Mail Server Installation (unfortunately they do not answer questions).
I had to change the encryption method for ...
- 111
0
votes
2
answers
608
views
mail_crypt dovecot plugin requires you to store private key on the server
Why does mail_crypt require generated private key to be stored on the server? I thought that the purpose of encryption at rest is to prevent attacker from reading the contents of user's mailbox. Once ...
- 113
0
votes
0
answers
324
views
Decrypt remote file securely with local private key
I've created a alldots.tar file mainly with dot config files from my local server. I then transferred it to my other (remote) server and there it is, cryptographed.
It didn't occur at the time of ...
- 109
0
votes
3
answers
1k
views
Do i need to encrypt the OS drive with Bitlocker if i store data only on a second different drive in the same PC?
I have a PC with two drives in it. One is used for OS and programs only and the other one is used to store data. I want to encrypt my data to prevent the PC to be stolen and for the thieves to ...
0
votes
1
answer
185
views
What's the use of AES 256 for Zip files
Will it help if I compress Data files using AES 256 Encryption method as all a programmer has to do is try all sorts of combinations (brute force) to check if the Zip File gets Extracted. Each ...
- 3
0
votes
1
answer
673
views
M365/OME - Encrypt emails not using TLS 1.2
I don't want to require the use of TLS 1.2 in Exchange online/O365 as it might result in some important business email not being sent/received.
So has anyone found a way to actually encrypt all in/out ...
-1
votes
2
answers
627
views
Disabling SHA in IIS
My company has a web server running IIS 6, and was asked to help disable SHA on it.
Specifically this cipher: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
I found these instructions https://www.namecheap.com/...
- 207
1
vote
1
answer
2k
views
What is the difference between Mandatory and Strict modes in SQL Server 2022 encryption
It is possible to configure SQL Server encryption mode as Strict, rather than Mandatory.
Unlike other versions of SQL Server and ODBC drivers where you could only specify whether you want the ...
- 251
0
votes
1
answer
49
views
How to protect Jenkins from super users?
Any super user who has access to the Jenkins running on a Linux server can easily disable security authentication from config.xml file; then log in and can also decrypt sensitive passwords from ...
bsd-boo
1
vote
0
answers
465
views
Decrypting Kubernetes secret using the encryption key
I have a toy Kubernetes cluster with Encryption at rest enabled using the abs-256-cbc provider; I have not used any vault here for kms simulating the problem. This means the encryption key is in a ...
- 111
0
votes
0
answers
529
views
Prereqs for "Require NTLMv2 session security"?
I have a requirement to set this up for servers on my Domain environment (both the client and server version). Workstations are Windows 10 and all Servers are Server 2019.
I know how to do it through ...
- 361
0
votes
1
answer
2k
views
Create a public SSH key from the private key? Is an `ssh-ed25519` public key unrecoverable?
I want to recover my ssh public key from my private key. I am aware of this answer but it doesn't seem to work for me. When I run the command suggested ssh-keygen -f ~/.ssh/my_key -y > ~/.ssh/...
- 101
0
votes
1
answer
2k
views
Can Bitlocker be applied to a shared volume of the Windows 2022 server? + SMB Encryption?
Our school has a remote file server (Windows 2022 virtual server on a colo) that provides network shared drives. We have both Windows and MacOS clients accessing it through SMB.
Recently our IT Sub-...
- 33
1
vote
1
answer
653
views
OpenConnect force clients to use special cipher
I use ocserv on Centos as Openconnect VPN and I use config file for setting up the server
I need to force clients to use special cipher like AES-256-GCM
because it seems that VPN blocks on some 4G net ...
- 141
1
vote
1
answer
792
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
- 11
0
votes
1
answer
304
views
nginx append query parameter with encrypted value to a react application
I want to send the DN field from the client certificate ($ssl_client_s_dn), but I want to send it encrypted.
In the question nginx append query parameter to a react application it is explained how to ...
- 19
1
vote
1
answer
270
views
How to generate kerberos traffic?
I'm trying to verify the encryption types allowed for kerberos by viewing packet captures in order to prepare to remove support for RC4 with kerberos. Does anyone know what I can do on Windows Server ...
- 425
-5
votes
2
answers
1k
views
Encryption at rest for VM storage in a hypervisor done properly/elegantly
Given a very simple infrastructure - a single machine running a hypervisor(Proxmox if it matters), I want to achieve a good data protection against the hardware being stolen.
Let's say there are ...
- 163
0
votes
1
answer
250
views
PureFtpD to Proftp Password Conversion
I am planning to migrate users from pureftp to proftpd, i need a tool to perform password conversion
Mysql password format-
MYSQLCrypt md5
pureftp From:
9dd4e461268c8034f5c8564e155c67a6
Proftpd - ...
- 21
3
votes
2
answers
1k
views
MySQL keyring component configuration
I am having the exact same issue as described by user nerdgeekdork here:
MySQL keyring component (not plugin) not loading on server startup
I have tried setting up the component in the same way, as ...
- 41
1
vote
1
answer
560
views
LDAP SSSD SHA-512 authentication failure
I have a server with helm-openldap and a debian client.
I can't login to a user who has a SHA-512 encrypted password. If i store it in clear or MD5, it works perfectly.
$ id tuser
uid=5000(tuser) gid=...
- 33
0
votes
0
answers
116
views
How can I prevent a Virtual Machine from copy on the host?
I've been distributing a few virtual machines as 'beta' version of an project, but I don't have a specific security system on it so far. So, I'm looking for a way to only enable access to the virtual ...
0
votes
0
answers
138
views
SHA512-CRYPT MariaDB passwords migration to DynamoDB
I used to run my mail server's DB in MariaDB (10.5.16) on-prem on Debian 10. I've now migrated this to RDS, however I would also like to try and migrate to DynamoDB.
Most of the data is plaintext, ...
0
votes
0
answers
198
views
Encrypt SVN issue
could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that.
Would encrypting the ...
- 1
0
votes
0
answers
566
views
Which Cipher Is Being Used To Encrypt NFSv4 With "sec=krb5p"?
I am using NFSv4 with sec=krb5p encryption enabled on a CentOS 7 client & server. My NFS shares mount flawlessly at boot-time, and when I query my keytab file I am able to view the list of ...
- 11
7
votes
2
answers
3k
views
AWS Root volume Encryption
In my scenario, I have some old EBS volumes that are not encrypted. To satisfy new corporate security measures, all data needs to be encrypted so I need to compile a plan to encrypt the unencrypted ...
- 91
0
votes
1
answer
314
views
Can I move my encryption key (used for SQL always encrypted) from a key vault in one Azure tenant to another?
We have migrated a database (backup to .bacpac and restore to the new tenant) but the database was encrypted using always encrypted and the key is stored in the original tenant's key vault. I can look ...
- 29
0
votes
0
answers
2k
views
Does Apache Guacamole support VNC Connection with GNUTLS?
Currently I've working on my custom Remote Desktop Service which is strongly based on Apache Guacamole. I want my whole session encrypted with TLS when I enter Guacamole and connect to my PC with a ...
- 1
0
votes
0
answers
172
views
NextCloud : Can you use encrypted drives / file level encryption?
I am evaluating NextCloud for a solution for which I have a requirement that files cannot exist on non encrypted disks or the files themselves cannot be individually read or cached.
I have read a lot ...
- 355
0
votes
0
answers
79
views
Perform backup of root directory in luks-container form initramfs
My server is running from a root directory in an encrypted luks container with lvm layout.
To perform a backup of the root partition, it is usually the consensus that the filesystem can not be mounted,...
- 1
0
votes
2
answers
520
views
Encrypt nginx log files
Is it possible to encrypt nginx log files? If so, would the logrotate saving time the best time to do so?
The background for this is that the client is concerning about security issues that can happen ...
- 103
0
votes
1
answer
387
views
LimeSurvey: SodiumException: Wrong decryption key
Last day in a production Debian GNU/Linux server I've updated LimeSurvey from 5.0.1 to 5.2.5 and I could no longer compile any questionnaire, because when a visitor got to the end, LimeSurvey would ...
- 380
1
vote
0
answers
4k
views
Why is this SSH handshake failing?
The server logs this
2021-12-07 21:57:29.889029102 Server listening on 0.0.0.0 port 2222.
2021-12-07 21:57:29.889033114 Server listening on :: port 2222.
2021-12-07 21:57:30.635958078 Connection ...
- 481
0
votes
1
answer
5k
views
Which Encryption Method Is Being Used in My OpenVPN server?
When I try connecting to my OpenVPN server , the log on OpenVPN software is a bit confusing .
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 19 04:...
- 27
-2
votes
1
answer
185
views
How to host encrypted users' files in a way that I won't be able to read them?
I am making plans for a new project and looking for a way to allow users upload their files and keep them encrypted and only accessible by them, but at the same time I need their contacts to access ...
- 111
1
vote
1
answer
151
views
Does Microsoft Official RDP Program end to end encrypt data?
For example,
me RDP Client --connect to--> a Linux ServerA 1.1.1.1:3388 --iptables_Port_Forwarding--> a Windows ServerB 2.2.2.2:3389
Then, Is the part of me RDP Client >-to-> the Jump ...
- 75
0
votes
1
answer
204
views
unknown variable 'file-key-management-filename'
New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error...
2021-07-16 17:13:16 0 [Note] InnoDB: Using Linux native AIO
2021-07-...
- 1
0
votes
1
answer
313
views
?Does SQL Server 2016/2019 Web Edition supports encryption
I trying to find out if SQL Server 2016 and 2019 Web Edition
supports encryption (on AWS)?
any help will be appreciated.
Thank you,
Moshe
1
vote
2
answers
275
views
Are Windows GPOs encrypted?
We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
- 111