0
votes
0answers
7 views

Cannot create LUKS container on external harddisk

I have an external USB drive, where I had two partitions. A 100 MB partition where I store my password manager file, and the remainder (500 GB) of the drive for the actual data in a LUKS container. ...
1
vote
0answers
18 views

Multi-boot encrypted operating systems on EFI

I'm getting ready to "redo" my desktop computer, encrypting all of my partitions as I install the operating systems. I currently boot with EFI. I'm looking to install both Ubuntu 12.04 (really ...
1
vote
1answer
24 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
0answers
25 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
0
votes
1answer
189 views

How to encrypt a zpool in Linux

Does zfs on linux have a built in command to encrypt entire pools (or zfs file systems)? If not - how should one proceed to do so? (I'm running zfs on an Ubuntu Server 12.04LTE)
3
votes
2answers
83 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
146 views

dm-crypt on whole disk - cryptsetup /dev/sda?

My question is simple. Can I create a encrypt my whole disk with cryptsetup /dev/sda? Or do I need to create the volume on seperate partition? Edit: I meant a situation, in which I have rootfs on ...
1
vote
0answers
42 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
1answer
278 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
-1
votes
2answers
291 views

Re-installing Windows with HDD encrypted with Ubuntu?

When I installed Ubuntu, I encrypted everything for security reasons but now I need to switch back to Windows and I cannot boot from CD. When I boot the CD in Wine it says: Windows Setup cannot ...
1
vote
0answers
139 views

recover files from encrypted home folder

I can't seem to find the answer to my questions -- hence my posting this here. I have encrypted my home folder in LinuxMint 15 Cinammon x64. If I create images of LM's partitions via fsarchiver, ...
0
votes
1answer
66 views

faulted newly created files when no free space

After running out of space in the $HOME i found some of my scripts failing, leaving corrupted files arround. I'll explain with an example: I'm using Ubuntu 12.04, the / partition is ext4 with the ...
4
votes
1answer
671 views

Does Linux support self-Encrypted Disk API?

In this article it is shown how easy it is to bypass BIOS ATA passphrases, and it ends with that using the disks self-Encryption Disk (SED) API from within the OS would not give a performance hit. On ...
1
vote
0answers
223 views

Upgrading from loop-aes to cryptsetup

Once upon a time, I had an encrypted external disk that I would mount thus: # losetup -e AES128 /dev/loop1 /dev/sdb1 # fsck /dev/loop1 # mount /dev/loop1 /mnt/wd # ls /wd There are those that say ...
0
votes
1answer
228 views

How to prevent “evil maid” attacks? How to move /boot to a USB pendrive?

Apparently using full-disk encryption is not enough to secure a computer, because the /boot partition is not encrypted, and could be modified to include a keylogger. I have read about different ...
2
votes
1answer
657 views

Could disk encrypted with cryptsetup on Linux be read on Windows?

I need to encrypt my USB disk so it's accessible both in Ubuntu and Windows 7. I plan to use cryptsetup in linux and another one in Windows, if that's possible. Is it possible to use cryptsetup drives ...
2
votes
0answers
167 views

Linux bootloader on USB-stick, load different kernel depending on hardware

I'm experimenting with a setup where I keep my kernel and initrd on a USB stick, and thus I can keep everything on the actual computers fully encrypted. Nothing is stored in clear text, and nothing ...
8
votes
3answers
5k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
1
vote
1answer
41 views

How to autodetect device name in Linux

I have an encrypted USB dongue with cryptosetup, to mount it I have to execute a script that has hardcoded (or admits it as a parameter) the device name of that dongue that previously you had to ...
0
votes
1answer
349 views

linux kernel mount filesystem from the encrypt partition when boot,how to?

my sd card have two partition,one is the boot,and another is the filesystem,now I use linux tool cryptsetup encrypt the filesystem partition,when boot on my board,the kernel can't mount the ...
6
votes
4answers
942 views

encrypted backups for Linux and FreeBSD readable for both

I have a Linux and a FreeBSD computer, both encrypted (LUKS and geli respectively). I am wondering how to make backups that would also be encrypted and would be readable to both (so that if one of the ...
2
votes
3answers
8k views

How to change pass phrase of full disk encryption?

I installed Ubuntu 12 with full disk encryption, and now I want to change the pass phrase. How can this be done?
0
votes
1answer
249 views

installing linux on full disk encrypted machine [duplicate]

I have machine with windows 7 installed and full disk encryption using TrueCrypt. I'm wondering if there is a way to install linux next to windows but without reinstaling everything and loosing data? ...
1
vote
4answers
377 views

Recover overwritten encrypted partition

I accidentally (due to a typo) have overwritten parts of my encrypted ext3 partition with an iso file: cat 200Mb-sized.iso > /dev/sdb Is there any chance to recover the files of the partition ...
2
votes
1answer
873 views

How to convert ext3 partition to use encrypted file system without losing data?

My embedded Linux device have 2 partitions: small root partition containing OS big data partition which uses ext3 I want to encrypt the data partition by using an encrypted file system. I don't ...
5
votes
1answer
3k views

LVM Encrypted Physical Volume versus Encrypted Logical Volume. Am I safe?

I'm somehow new to disk encryption techniques in Linux, but I have the basic notions about encryption. Here my conditions: I need to have "full disk encryption", including "/", not just "/home". I ...
1
vote
2answers
368 views

Windows 7 Laptop - Truecrypt - Ubuntu?

I have a windows 7 Professional Laptop that has had the entire drive encrypted so as to require a password to allow it to boot up. There is only one partition on the drive that takes up the entire ...
1
vote
1answer
574 views

No space left on device with encrypted disk that takes all space

I use Ubuntu 11.04. There's no space left on device. I have encrypted the disk that takes up space (maybe it's good to disable it, but I don't know how). In shell, I get this message: No space ...
0
votes
1answer
706 views

How can I recover an encrypted Linux partition after resizing, when the volume shows up as “Unknown”?

I had followed the this how-to on reducing the size of an encrypted (LUKS) partition. Everything went fine until the fdisk session. In the disk utility, the volume shows up as "Unknown" as opposed to ...
2
votes
1answer
990 views

How to implement full disk encryption on Linux?

The only reason why I don't use Linux (even though I prefer Linux over Windows, and can do everything faster and more efficiently) is because each time I try to learn about dm-crypt I give up. Can ...
3
votes
3answers
3k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
4
votes
1answer
339 views

Securing a Linux server when there is potential physical access

We want to set up a Linux server (hosting Git or later SVN repositories) which should have all stored data strongly encrypted, so that if one steals the server the data cannot be read. For example, ...
3
votes
2answers
399 views

Scramdisk for Linux (SD4L)

I can't find any evidence of people using Scramdisk for Linux anywhere. Is it a dead project, or is it just too new for people to trust its reliability and security? Have any of you used it for any ...
1
vote
1answer
835 views

Encryption, loop device and journaling file system on Linux

I've been reading up on tools like Truecrypt, loop-AES and Cryptoloop that use a "loop device" to create an encrypted disk volume within a file. On the README page for loop-AES, it has this paragraph ...
0
votes
4answers
238 views

Best way to protect a server with encryption

I am planning to deploy a server at a customer location, probably either of linux/bsd based system. How can I ensure that the server is protected from data-theft/replication, for eg. someone(maybe ...
0
votes
1answer
273 views

Fedora - what's the easiest solution for the in-place (without data loss) encryption of the (existing) /home partition?

I read that the installer can handle encryption easily, but I don't want to reinstall. TrueCrypt apparently can't encrypt a partition in-place and will require a format. I've looked around at some ...
6
votes
3answers
2k views

Linux Bitlocker equivalent

Bitlocker is a harddrive encryption data protection tool which comes with Windows Vista Ultimate and 7. Does anyone know an equivalent for Linux distros like Fedora and Ubuntu?
2
votes
1answer
1k views

Performance losses due to whole disk encryption? PGP vs LUKS vs other?

How is performance impacted by whole disk encryption systems such as PGP or LUKS? How do PGP and LUKS compare in performance? Im working on Ubuntu 10.10
1
vote
1answer
164 views

dm_crypt no keyboard

I recently installed Arch Linux on a USB hard drive with disk encryption via dm_crypt. Everything is working fine on the system I set everything up on (my laptop) but when I try to boot to it from my ...
3
votes
2answers
4k views

How to use ATA security on a hard disk in practice?

My SSD HD supports ATA Security. Does Macbook EFI and linux support it? I know hdparm does. Who will do the unlock at each bootup? Can I still set a password without erasing the disk? Update: removed ...
5
votes
2answers
752 views

Linux laptop encryption

What are my options for encrypting the /home directories of my Ubuntu laptops? They are currently setup without any encryption and some have /home as a separate partition whilst others don't. Most ...
11
votes
6answers
2k views

Want an easy to use Linux disk encryption scheme

In the interests of protecting personal info in case a laptop gets stolen, I'm looking for the best way to encrypt a Linux system. Disadvantages of whole disk encryption including swap: Pre-boot ...
4
votes
3answers
7k views

How to setup disk-encryption with Ubuntu?

I'm interested how you can setup disk-encryption for Ubuntu, with as few hassle as possible.