Questions tagged [encryption]

For questions about encryption, which is the process of transforming information into an unreadable format using an encryption algorithm combined with an encryption key.

Filter by
Sorted by
Tagged with
78 votes
5 answers
115k views

How to decrypt Jenkins passwords from credentials.xml?

I've taken over the project where a lot of Jenkins credentials has passwords or passphrase strings which I need to know in order to progress with the project, unfortunately these weren't documented ...
user avatar
  • 7,151
12 votes
2 answers
357 views

How to storing encrypted secrets in code for a serverless.com project?

With serverless.com, the easiest way to expose a secret to an AWS Lambda function is to store it in the serverless.yml file (encrypted with KMS, for example). But committing encrypted secrets to Git ...
user avatar
  • 1,231
9 votes
2 answers
656 views

Is Azure's confidential computing essentially encrypted RAM?

I'm trying to wrap my head around the Azure confidential computing offering. It appears that that AWS does not offer encryption at the application level (see diagram for what I mean by this:) My ...
user avatar
  • 1,083
8 votes
2 answers
2k views

Encrypting docker images (end to end); transporting over offline channels

We are developing and building docker images in our intranet, and need to deploy them to several hosts belonging to us (developers, internal testing, external testing and so on). Some of these are in ...
user avatar
  • 4,726
7 votes
3 answers
378 views

When your micro service in production needs a secret, where is the secret stored and retrieved from?

The context of the question is Secrets management. How do you manage storing and retrieving secrets for your micro service which is in production?
user avatar
5 votes
4 answers
2k views

How can I get a list of encrypted disks for instances that are running on the AWS CLI?

There is a great question here about how to get a list of encrypted disks. I'm currently using the describe-volumes command. For the record I'm currently using: aws ec2 describe-volumes --region us-...
user avatar
  • 1,083
4 votes
3 answers
191 views

What options are available to encrypt the content of git repositories?

git-crypt, git secret were found. What is your personal preference and why? A couple of months ago, I have applied git-crypt. It was quite hard to set it up and the secrets are stored as binaries. I ...
user avatar
  • 12.6k
4 votes
2 answers
135 views

What is the simplest way to list which attached disks are encrypted (and which not) on AWS?

An auditor is asking for proof that we've encrypted all the disks on our AWS EC2 VPC. I'd like a way to list all the disks and whether they're encrypted or not. I know I can build a report with the ...
user avatar
  • 1,083
4 votes
1 answer
62 views

What are the real world benefits of RDS instance (at rest) encryption?

AWS offers at rest encryption for its RDS instances. I think this sounds nice, and it's something that comes up regularly on security reviews but I'm not sure what the real benefit is. The most likely ...
user avatar
  • 295
3 votes
0 answers
226 views

Encrypted at rest persistent volume in kubernetes? [closed]

Is there a recommended approach to using encrypted file system for persistent volumes in kubernetes? Perhaps mounting a LUKS fs disk image file ?
user avatar
  • 257
2 votes
1 answer
115 views

Git Files Encryption for Business

I am using git and have the following problem: In the company where I work you now want to protect the source code from theft. So if for some reason a developer lets the source code of a project go ...
user avatar
2 votes
1 answer
271 views

Vault `SSH-CA` Elliptic Curve rather than `RSA`

Is it possible to use ECDSA(Elliptic Curve Digital Signature Algorithm) or EdDSA( Edwards-curve Digital Signature Algorithm) instead of RSA when configuring SSH-CA on HashiCorp Vault?
user avatar
  • 123
2 votes
2 answers
130 views

How do you know which secrets and credentials of your production services were used, and by whom/what?

The context of the question is Secrets management. As the title says, how do you know which secrets and credentials of your production services were used, and by whom/what?
user avatar
2 votes
0 answers
33 views

Is this a robust implementation of database encryption at rest? [closed]

I am looking forward to implement encryption at rest for two+ SQL database servers (Linux). My goal is (obviously) to avoid storing the clear encryption key on the server or store it in a well-known ...
user avatar
1 vote
1 answer
343 views

How do I use only an encrypted version of my AWS RDS password in my terraform code?

Is there a way to only have an encrypted version of my RDS password in my Terraform code and for AWS to decrypt it for RDS so you use the decrypted password to login to the RDS? So set my rds ...
user avatar
  • 463
1 vote
2 answers
81 views

How do you change a secret that half of your production applications use right now?

The context of the question is Secrets management. As the title says, how do you change a secret that half of your production applications use right now?
user avatar
1 vote
1 answer
34 views

How to ensure data protection on remote server?

We have sensitive data from a customer and need to train a Neural Network for our customers. However we have no severs to train the Neural Networks, so we want to rent GPU servers. There are many ...
user avatar
1 vote
1 answer
101 views

How do I setup an OpenShift route that will allow both 80 and 443 traffic to my app?

I'd like to setup a route that will pass both 80 and 443 traffic to the same service in OpenShift. When I try to create a second route it errors out. I want this to be in a yaml like would be used ...
user avatar
  • 273
1 vote
1 answer
77 views

How to create unique GPG Keys for different environments / projects

After searching and reading various documents it remains unclear to me as to an effective/straightforward manner to create/maintain multiple sets of GPG Keys. I have a project that needs unique GPG ...
user avatar
1 vote
1 answer
2k views

How to check accepted cipher suites by an Azure App Service?

I am looking for a way to reliably check accepted cipher suites by an Azure App Service. On standard virtual machine I just remote to it and execute PowerShell command: Get-TlsCipherSuite which ...
user avatar
  • 11
1 vote
0 answers
177 views

Security practice for storing private keys for use by Java Applications [closed]

We have a multi-tiered application hosted on Microsoft Azure Virtual Machine Scale Sets composed of: Websites (Sprint Boot) API (Sprint Boot) ForgeRock Access Management (Tomcat) ForgeRock Identity ...
user avatar
0 votes
1 answer
162 views

Securely saving AZURE_STORAGE_KEY and storage account name in Linux systems

The Azure CLI official documentation states that environmental variables can be used inside bash scripts to store AZURE_STORAGE_ACCOUNT and AZURE_STORAGE_KEY, like this: Compared to AWS CLI this ...
user avatar
  • 187