Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
43
questions
21
votes
3
answers
14k
views
Is it possible to have a 100% secure virtual private server?
I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS.
Obviously there are some things that you could do to ...
- 425
325
votes
2
answers
231k
views
Create a public SSH key from the private key?
Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
- 32.3k
71
votes
20
answers
215k
views
How to create an SHA-512 hashed password for shadow?
The previous SF questions I've seen have lead to answers that produce MD5 hashed password.
Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
- 10.9k
5
votes
1
answer
4k
views
Encrypted LVM on RAID1 - Failure testing, manual mount
We have an Ubuntu 10.04 LTS server set up with LVM running on top of disk encryption, which runs on top of a RAID1 volume comprised of two physical SATA disks. The configuration looks like this:
...
- 5,660
5
votes
8
answers
3k
views
protecting my files from root
In a remote box, my files are 700-chmoded, but I'm worried that root may be reading them.
Is there a way to add another layer of protection to avoid that, perhaps by encrypting them, but allowing ...
- 177
74
votes
8
answers
88k
views
Is STARTTLS less safe than TLS/SSL?
In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS".
As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
- 889
17
votes
1
answer
10k
views
Creating a grow-on-demand encrypted volume with LUKS
I am trying to create an encrypted, growing-as-needed file system in with Linux. I am familiar with LUKS and cryptsetup.
I can create an empty file:
fallocate -l 512M /root/image
I can create a ...
- 807
14
votes
3
answers
15k
views
IPSec for LAN traffic: Basic considerations?
This is a follow-up to my Encrypting absolutely everything... question.
Important: This is not about the more usual IPSec setup, where you want to encrypt traffic between two LANs.
My basic goal is ...
- 4,262
21
votes
6
answers
133k
views
How can I see what version of SSL a web server is currently using?
I believe I have disabled SSL 2.0 on my web server (Windows Server 2003). To make sure that it is now using SSL 3.0, how can I check this?
What is the correct way to disable 2.0 and enable 3.0 on a ...
- 333
2
votes
6
answers
26k
views
Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?
I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer.
Is ...
- 2,569
1
vote
4
answers
668
views
What's the benefit of using asymmetric keys over passwords?
Is there a benefit to using keys over regular passwords when it comes to logging into a remote server over SSH? (Besides not having to remember/input that password)
fromClouds
102
votes
2
answers
118k
views
I have a keypair. How do I determine the key length?
Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
- 3,865
37
votes
8
answers
6k
views
Is enforcing encryption for SMTP a good idea (yet)?
I am running an email server which is currently set up to use TLS if possible, when sending and receiving emails.
When you read in the documentation about this, there is also the option to enforce ...
- 1,531
23
votes
4
answers
2k
views
Are encrypted backups a good idea?
I'm in charge of a small set of laptops and wanted to get some sort of automated remote (over WAN) backups going; the backups would be going to a RAID drive. Because we don't really have a secure ...
- 233
22
votes
3
answers
20k
views
How to disable swap files in ESXi?
We are running a few Solaris / Linux VMs on ESXi that contain very sensitive encrypted data that eventually get decrypted as required in memory.
Everything is fine, except for the ESXi swap files ...
- 331
15
votes
1
answer
16k
views
Resizing a LUKS encrypted volume
I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume?
mgorven@...
- 31k
10
votes
6
answers
35k
views
How should someone create an encrypted password for /etc/shadow?
I am setting up a new account on a Linux box for Subversion repository access, and can send the password to the new user. However, I think there was a command line utility for this new user to encrypt ...
- 221
8
votes
1
answer
5k
views
Outlook 2010 cannot reply to encrypted email
A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, replying,...
- 746
7
votes
6
answers
12k
views
Encrypting absolutely everything, even within the LAN
Has anybody tried that approach already? I'm really considering it: Instead of relying on network based IDS etc., every packet must use encryption which was initiated by a certificate issued by my own ...
- 4,262
6
votes
3
answers
4k
views
Can Windows log CryptoAPI CRL timouts?
I suspect that the process of building the CRL cache may cause latency in some applications.
We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
- 8,951
5
votes
3
answers
11k
views
Synology Cloud Sync : How to read encrypted files in the cloud?
I own a Synology NAS which i synchronised with Google Drive using the 'Cloud Sync' feature. For security reasons, i used the Synology built-in feature to encrypt the files on the NAS before sending ...
- 31
4
votes
3
answers
4k
views
How to encrypt traffic between two Amazon EC2 instances?
We are building a web app using Amazon EC2 instances running Linux. All the traffic to the client browser is encrypted with SSL. What should be used to encrypt the traffic between the instances.
The ...
- 319
4
votes
4
answers
10k
views
Mount EncFS at boot
am trying to get an EncFS encrypted home to mount at boot without user input (directly, not via ssh). Have tried various solutions (adding a volume entry in pam_mount.conf.xml, various tweaks to ...
- 41
4
votes
3
answers
4k
views
How would you manage keys with TrueCrypt in a business enviroment?
What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
- 1,434
4
votes
2
answers
1k
views
Do I need to back up the SQL Server Encryption Password and Symmetric Key?
I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN:
Create the Master Key with a strong password.
Create a ...
- 171
4
votes
2
answers
2k
views
Encrypt at rest existing AWS EFS instances - is it possible?
Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
- 235
3
votes
1
answer
2k
views
AWS: SES Rule: S3 Action: fails when choosing bucket that has encryption enabled
I can not create a SES rule to put emails into a S3 bucket that has encryption enabled (on the bucket).
Created a bucket and enabled encryption.
Add a SESPut bucket policy to allow SES. https://docs....
- 419
3
votes
4
answers
1k
views
Looking for an email encryption solution [closed]
I'm looking for an email encryption solution for a client. They are currently using Exchange 2007 but are willing to go to a hosted solution if necessary. They are looking for a solution that will ...
- 78
3
votes
3
answers
721
views
Is there a way to make encrypted DNS resolutions? [closed]
Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested?
Maybe, just thinking, by tunneling DNS requests through ...
- 462
2
votes
3
answers
1k
views
Backup on disc using TrueCrypt corruption problem
I recently burned a disc with a TrueCrypt volume. The burning process was bad and several blocks (all in the volume) were corrupted. Perfect! i wanted to test how TrueCrypt can handle corruption. So i ...
user274
2
votes
1
answer
2k
views
Digital signature with openssl
I am trying to sign and verify a signature using an RSA key-pair.
Here is how I generate the key pair (which work fine for encryption / decryption):
ssh-keygen -t rsa -f mykey -N '' -b 2048
mv ...
- 153
2
votes
1
answer
880
views
AWS SES Encryption vs S3 bucket encryption
SES
Configuration for a SES rule allows one to have the email be put into a S3 bucket.
Under this configuration, the option "KMS Key" is available, which would have SES encrypt the email before ...
- 419
2
votes
1
answer
2k
views
How to store hashes in ipsec.secrets when using Strongswan with eap-mschapv2?
I am using eap-mschapv2 as an authentication method. It requires to store plain text passwords in ipsec.secrets. I.e. I have a password like this:
user : EAP "mypassword"
I want to use something ...
- 763
2
votes
3
answers
4k
views
decrypting AES files in an apache module?
I have a client with a security policy compliance requirement to encrypt certain files on disk. The obvious way to do this is with Device-mapper and an AES crypto module However the current system ...
- 11.3k
2
votes
4
answers
18k
views
How do I setup a SSL mail server?
For a beginner, can anyone recommend a good method of setting up a encrypted IMAP server (on port 993) or at least TLS POP3 email ? There are plenty of examples of opportunistic client side email ...
1
vote
3
answers
1k
views
Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?
Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
- 279
1
vote
2
answers
416
views
Storing RSA Private Key un-encrypted
We have our infrastructure on amazon ec2. Because we are growing we are setting up a basic Web Server AMI image that we will use to launch new servers as we need them.
The main problem is that when ...
Julio Andrés Viera
1
vote
1
answer
10k
views
SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections
SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE
SSL cert from third-party CA has been installed in Local Computer\Personal ...
- 73
0
votes
1
answer
2k
views
How to configure OpenVpn server with multiple clients using asymethric key
Introduction
I want to configure OpenVpn with 2 clients and 1 server but i only mannage to use it with 1 server and 1 client.
Setup
Server ip: 10.10.102.146
Client ips: 10.10.102.138
Server ...
- 204
0
votes
1
answer
649
views
Best encryption client for Outook 2007/Exchange?
We are looking for an encryption client for out business that will encrypt all out going messages, to different clients and different email clients.
I understand Outlook 2007 has one built in, any ...
- 73
0
votes
1
answer
2k
views
Simple encryption for Samba shares
I have an Arch Linux machine acting as an SSH and file server, using vsftpd for FTP and samba for SMB. I would like to access this server via SMB over the Internet, and it is currently set up to ...
- 403
0
votes
1
answer
2k
views
Group policy setting to prevent asking user where to store recovery key
Win10 PCs, 2012R2 domain
I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible.
I do need users to run the wizard so they can set a ...
- 4,253
0
votes
6
answers
5k
views
Is it possible to configure SQL Server 2005 to auto-compress backups?
I have created scheduled backup and shrink maintenance plans for my SQL 2005 instances using the tools in SQL Server Management Studio.
I am wondering, is there an equally easy method for ...
- 757