Questions tagged [encryption]

Encryption is transforming information through a cipher to protect it from unauthorized access.

Encryption is the process of taking some information (the plain text), and transforming it (usually with a cypher and a key) so that it is secure. Assuming a sufficiently strong cypher and key have been chosen, this cyphertext can be shared widely, without the information being compromised.

The reverse of Encryption is Decryption, where the process is reversed (normally by someone holding the key and cypher details) to return the information.

See the Wikipedia Page for more details.

775 questions
2
votes
1 answer

How to access mysql console on Docker container using secrets

I've been able to access Mysql console on a Mariadb Docker container. From my local machine I can run this command to access the console (I have mariadb installed locally): mysql -h localhost -P 3306 -u lc -p --protocol tcp The issue rise when I…
a.barbieri
  • 483
  • 1
  • 5
  • 7
2
votes
1 answer

Why can't I manually seed the FreeBSD random number generator?

Years ago, I could manually seed the random number generator in FreeBSD by setting: sysctl -w kern.random.sys.seeded=0 ... and then if I deleted my SSH keys (on purpose) and restarted sshd, I would be forced to mash my keyboard for a page or two in…
user227963
  • 209
  • 1
  • 2
  • 11
2
votes
6 answers

How to Crypt an sh script into Linux Environnement?

I've a tinny question, how can I crypt my scripts? I mean, for exemple, sometimes I've some sh scripts (provided by some company like VMWare) and when I VI's it they just show me a crypted file and not a plained text file. How Can I transform my…
Dr I
  • 955
  • 17
  • 33
2
votes
0 answers

OpenVPN with authentication but without encryption does not work with multiple clients

I'm trying to set up a system in Linux where OpenVPN tunnels are authenticated but the actual traffic is not encrypted. With one server and one client everything is working fine. Here are the relevant parts of the conf files: server.conf: port…
Sampo
  • 21
  • 2
2
votes
1 answer

Is possible execute crypttab config without rebooting making the encrypted device mapped and available?

I need turn a file into a encrypted device mapped on /dev/mapper/ and to do it the easier way I found is adding a named entry to /etc/crypttab pointing to image file and key file, it works fine and map the device but only on next reboot. Im doing it…
Mark
  • 91
  • 1
  • 9
2
votes
2 answers

Bitlocker - "Recovery information was successfully backed up to Active Directory", but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM protector. So I added a Numerical Password. I want…
beansbeans
  • 71
  • 1
  • 8
2
votes
1 answer

Activate Tape Encryption on Windows Server

We use windows to make tape (LTO 8) backups with ltfs and now I want to use the hardware encryption. My problem is I can not find a way to activate it. For Linux I found "stenc" but is there something similar for windows? I only found backup…
niggi
  • 21
  • 1
2
votes
1 answer

Windows encrypted software raid

Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.) From what I know, I have to use an SSD for normal/fast…
2
votes
1 answer

How to get only the pub part of gpg --list-public-keys?

Okay, there is probably a better way to phrase this question. I am writing a script to configure my web servers on the first boot, but I hit a snag when generating the GPG key that will be used to encrypt backups with duplicity. I am using this to…
user497477
2
votes
0 answers

How to reinstall MariaDB?

I had MariaDB 10.2 installed on Ubuntu 16.04. and I was using MariaDB encryption. I had to uninstall MariaDB so I have uninstalled with following command: apt purge mariadb-server -y That uninstalled and left /var/lib/mysql + /etc/mysql unchanged,…
iWizard
  • 418
  • 3
  • 12
  • 27
2
votes
1 answer

AWS SES Encryption vs S3 bucket encryption

SES Configuration for a SES rule allows one to have the email be put into a S3 bucket. Under this configuration, the option "KMS Key" is available, which would have SES encrypt the email before sending/putting it into the bucket. Specifically, using…
eugenevd
  • 419
  • 5
  • 12
2
votes
2 answers

Is it possible to secure a VPS from its seller/provider?

I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential spying by the Iranian authorities. Partial,…
HappyFace
  • 151
  • 1
  • 9
2
votes
1 answer

How to setup logrotate with GPG to encrypt for GDPR?

As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my encryption method, but don't know how to invoke the…
2
votes
2 answers

How to enable support for Authenticated encryption (AEAD) cipher suites on Windows Server

SSL lab test provides grade B for one of my websites due to AEAD issue. I was wondering how we could enable AEAD support to improve the grading to A. I am using windows server 2008 R2, TLS1.2 is enabled. I tried IIS Crypto…
Siben
2
votes
1 answer

Enable hardware encryption in Bacula with LTO-7

Does Bacula support encryption by using the AES-chip which is integrated in LTO-7 Tapedrive? Or is there a plugin like "stenc" that could be integrated in Bacula?