search for: encrypted

...ched google and found out a technique that utilizes the symmetric encryption. Then it needs to generate a symmetric key every day and uses public/private key pair to encrypt the symmetric key. However the drawback is that we don?t know how to manage the symmetric key securely. We can?t leave the un-encrypted symmetric key there on the server but we have to use the un-encrypted symmetric key for encryption process. Plus we?ll need to manage the symmetric encryption key, public and private key pair 3 things securely. Has anyone had experience on managing the asymmetric encryption for very large file and...

Hey, guys I've been working on whether libvirt supports encrypted snapshots,Here are my versions of libvirt and qemu [root@xx ~]# libvirtd -V libvirtd (libvirt) 4.5.0 [root@xx ~]# qemu-img -V qemu-img version 2.12.0 (qemu-kvm-ev-2.12.0-33.1.el7_7.4) Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers 1. assign $MYSECRET to libvirt secret...

...me, are not allowed. Disconnect all [...]" [2] Error message is "The specified server connot perform the requested operation" [3] Error message is "Check the spelling of the name. Otherwise there might be a problem with your network." [4] Browsing shares connection not encrypted. When trying to enter a share, possibly Samba/Windows tries to create an encrypted connection leading to [1]. If it is not possible to renegotiate encryption, then the unencrypted connection should be used instead (remember that 'smb encryption = desired'). Below is testparm output (f...

I am playing around with IAX encryption and have had good success. I read somewhere, that trunked packets are not encrypted. Does anybody know if this means the trunk packets themselves are not encrypted but the voice frames in them are encrypted or does this mean that if you are using trunking then encryption of the voice frames will not occur. I have used Wireshark to sniff the packets and it looks like the encrypti...

Hi， I used 'virsh snapshot-create' create an encrypted external snapshot, when I try to use 'qemu-img check' top file, found no entrance to pass backing-file's secret-id 1、Version centos-release-8.2-2.2004.0.1.el8.x86_64 libvirt.x86_64 6.0.0-17.el8...

...ach folder has a keypair but I don't understand why a single keypair isn't enough? Because of possibility to have shared folders? Anywayz I'm confused how it relating against global mode and where user mode fits (there is no user mode say the docs). > NOTE that the keys won't be encrypted in this scenario. > > To encrypt keys you have few choices. You can use a static password, > static ECC key, per-user password, per-user ECC key, per-user > password protected ECC key. Sorry newb question, though how is this choice made (on different values of mail_crypt_require_en...

I have existing systems with un-encrypted disks. I have tried unsuccessfully to encrypt them using LUKS. Has anyone out there been able to encrypt an existing system (after the fact, so to speak)? TIA -- Roger Wells, P.E. leidos 221 Third St Newport, RI 02840 401-847-4210 (voice) 401-849-1585 (fax) roger.k.wells at leidos.com

Hai, Do you have advice about Dovecot plugins for mail encryption: https://wiki2.dovecot.org/Plugins/MailCrypt https://0xacab.org/riseuplabs/trees I like NaCL based encryption but the MailCrypt plugin is better because it's maintained by Dovecot developers (is this correct?) Hard to understand MailCrypt docs so may I ask, may I provide per user encryption? I don't like global

Kevin, Firstly, you need to obtain the DES libraries. Then you need to tell the Samba Makefile that you wish to compile in DES encryption services and link with the DES library. Then in the smb.conf file you need to add to the [Globals] section: encrypted passwords = yes Then you need to create a separate smbpasswd file. Please read the documentation in the docs directory of the Samba source distribution. Samba-1.9.17alpha5 was released two days ago and has significantly improved (in volume and in currency) documentation. The Samba Team have been...

...d out a technique that utilizes the > symmetric encryption. Then it needs to generate a symmetric key every day > and uses public/private key pair to encrypt the symmetric key. However the > drawback is that we don?t know how to manage the symmetric key securely. > We can?t leave the un-encrypted symmetric key there on the server but we > have to use the un-encrypted symmetric key for encryption process. Plus > we?ll need to manage the symmetric encryption key, public and private key > pair 3 things securely. > Has anyone had experience on managing the asymmetric encryption for...

I''m trying to use the full disk encryption under Debian and Xen. Not talking about domU. Talking about dom0 and hypervisor booting off an encrypted disk. When I apt-get install Xen and reboot from an encrypted partition, I can start xen, I can select the dom0 but after booting, it dies (appears to hang) Rebooting the standard kernel is fine. Thanks for any hints Sent from my iPhone _______________________________________________ Xen-users...

I was attempting one way to solve: https://bugzilla.redhat.com/show_bug.cgi?id=1400332 "RFE: virt-builder should support templates with encrypted filesystems" However this approach doesn't really work because templates containing encrypted partitions cannot be compressed, and therefore the guest template would be a multi-gigabyte download. I better approach will likely be to use the new qcow2 encryption (LUKS-based) recently writt...

>> you cannot select by username, the reason being that the negotiation SMBs >> incidate encrypted or cleartext password capability _before_ a session >> setup SMB, which indicates username and password. > > Which end controls this? I'm perfectly happy to continue to accept > cleartext from any client that offers it. This is a firewalled > business environment where peo...

Hello Why is it necessary to specify encrypt passwords = no to make Samba server start using solely /etc/passwd? Isn't it possible to tell Samba server that on the way between a client and the server, the passwords sould be encrypted, and after decryption, they will be checked against /etc/passwd and not smbpasswd, tdb or whatever backend? Cl<

...tfix mailing list for a solution, how to encrypt incoming emails with public gpg key My original idea was to use a smtpd-milter, which would encrypt all incoming plaintext messages of given user, using the users public gpg key. This way, it would look as if the original sender has sent the message encrypted. Somebody suggested this might be better done in Dovecot, as it is Dovecot who stores the emails in Maildir. Does anybody have any suggestions how to implement this scheme in Dovecot ? I am including the original email below: > when new email arrives, and it is not already encrypted, I would...

Hi, I have an application where I want to be able to encrypt large amounts of text before storing them to my DB (MySQL Text field - might be switched to a Blob). I have an idea of how to do this, but was wondering what the general consensus is within the community regarding the issue. I have come across a couple different plug ins/gems (Stringbox, EzCrypto), but am wondering what other people

Hello, I am working on a web system (php) that uses R in the backend, and we need some basic fast encryption/decryption for the underlying mysql database that can be used by both R AND php. It does not need to be top-of-the-line, but just provide some basic level of fast encryption/decryption. Any suggestions? Thank you, Ramiro [[alternative HTML version deleted]]

Hi, I would like to store some sensitive data into my DB using Rails, it has to be encrypted. I''ve tried a lot of methods of encryption, they all work. Fine by now, yet when I try to store the results into my DB (tables are UTF-8, SET NAMES UTF8; is there, server UTF-8, DB Connection UTF-8) -- I can cmd (yeah, Windows..) and enter a UTF-8 record into the table, so that''s...

...t; Initially when I was thinking up how to do this I was expecting block > encryption to stay consistent from one 'encryption run' to the next, but I > found out later that most schemes randomize the result by injecting a > random block or seed at the beginning and basing all other encrypted data > on that. > > In order to prevent plaintext attacks I guess (the block at the beginning > of many formats is always the same?) and also to prevent an attacker from > learning the key based on multiple encryptions using the same key. > > However the downside is that any op...

We need to encrypt files before transferring them to the destination Host for security reasons. Encryption must be strong: IDEA, 3DES or similar. One way would be the integration of PGP into rsync. Is there any PGP integration into rsync available ? Thank?s Clemens