LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

2
votes
0answers
9 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
0
votes
0answers
20 views

Lost luks password, encrypted partition open

Here is the deal. I have a small office email server that I manage and it needs an update, but the owner took it upon himself to go through cleaning the server room and all my notes got tossed (he, ...
1
vote
0answers
10 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
0
votes
0answers
23 views

mounting and accessing Encrypted LVM after reinstallation of Linux

I had Fedora installed on a LVM & had my /home & another file systems in it encrypted. ( i remember the passwords but forgot the cipher protocol used ) Now, I installed Ubuntu without ...
1
vote
1answer
15 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
0
votes
1answer
42 views

Encrypting GPT Windows 8.1 on a multi boot system?

I have setup LVM on LUKS for my Linux partitons which I am very happy with but I would also like to encrypt Windows 8.1. I had planned to use TrueCrypt until I learned it does not support GPT. I would ...
0
votes
1answer
28 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
1
vote
0answers
14 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
1
vote
0answers
39 views

Automount LUKS encrypted USB HDD with keyfile auth in Mint/Cinnammon

My external backup HDD is LUKS encrypted and can be mounted with password or key file. When plugged in, Cinnammon asks me for a password and mounts it to /media/user/drivename. I want to change ...
0
votes
0answers
15 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
1
vote
1answer
32 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
0answers
42 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
2
votes
1answer
78 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
0
votes
1answer
196 views

fglrx drivers cause blank luks encryption password screen on boot, on Linux Mint Petra 16

I recently did a new install of Linux Mint 16 Petra on my main desktop, and used the full disk encryption option from the installer. The installation went smoothly, and the encryption password prompt ...
1
vote
0answers
43 views

Checking if Luks header is damaged

Is there any way to check if the Luks container header is damaged? My luks container is refusing to be opened with its keyfile, saying No key available with this pass-phrase. History of what ...
3
votes
2answers
64 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
102 views

How to recover LUKS encrypted disk?

I did a LUKS+ext4 encryption on my external hard drive using 'gnome-disk-utility' available in several recent Ubuntu editions. Disk contained only one partition. I lost the partition table of the ...
0
votes
0answers
140 views

(How) can I use VirtualBox (linux guest) to unlock LUKS and EcryptFS on Windows 8 (host)?

I run Linux (Ubuntu 13.10 and Mint 16) most of the time both at work and at home. Occasionally I need to boot into Windows (I dualboot Windows 8 at home or Windows 7 at work). In Windows, I'd like to ...
0
votes
1answer
114 views

dm-crypt on whole disk - cryptsetup /dev/sda?

My question is simple. Can I create a encrypt my whole disk with cryptsetup /dev/sda? Or do I need to create the volume on seperate partition? Edit: I meant a situation, in which I have rootfs on ...
0
votes
1answer
118 views

For LVM on LUKS when does the partition ID for a new install get set to 8e?

Trying to decipher my notes from the last time I installed LVM on Luks, I have a note to create three "primary" partitions for a Dual-Boot installation. The trouble is, after I install Windows, but ...
1
vote
0answers
35 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
1answer
239 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
269 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
1
vote
1answer
642 views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
1
vote
0answers
198 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
17
votes
1answer
529 views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
0
votes
1answer
245 views

LUKS encrypted flash drive: no partition table

I have 16GB encrypted LUKS flash drive with corrupted partition table. Here is the fdisk output: fdisk -l /dev/sdf Disk /dev/sdf: 16.2 GB, 16236150784 bytes 64 heads, 32 sectors/track, 15484 ...
0
votes
0answers
396 views

LUKS with Serpent and SHA512, CBC ESSIV

I am trying to setup my new Gentoo system (I believe this is not relevant, as this is not Gentoo specific question) with LUKS while trying to use: cat smth | cryptsetup luksFormat /dev/sda10 -c ...
1
vote
0answers
224 views

Move /home to a new HDD encrypt it with luks

as I'm getting more into linux, I'd like to make a few changes to my setup which seem pretty advanced to me. But first of all let me explain my setup so you know with what you are dealing with. This ...
4
votes
1answer
130 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
1
vote
0answers
113 views

Zero-wipe free space on encrypted filesystem

I have a vmdk which has a partition with LUKS container (encrypted with cryptsetup luksFormat), which I use as the backup of my the home server and laptop. After some time, the vmdk can grow ...
6
votes
1answer
2k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
8
votes
3answers
5k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
1
vote
2answers
224 views

How to automatically mount a file containing an encrypted file system, when a user login?

The file can be mounted manually via 'cryptsetup luksOpen' and 'mount /dev/mapper' but I would like it to be mounted automatically while logging in and by showing a GUI dialog for the passphrase just ...
1
vote
0answers
415 views

Why “not a valid LUKS device”?

During installing Debian Squeeze I created partitions on a VPS (/dev/vda): vda1 = /boot vda2 = encrypted LVM (not using a standard way of Debian installer, but with the help of cryptsetup switching ...
1
vote
1answer
445 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
5
votes
1answer
681 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
1
vote
2answers
3k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
364 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
0answers
108 views

If a passphrase for a luks container is discovered, can that reveal another passphrase?

I've been looking for an answer for this scenario - say I've got a volume encrypted with a long passphrase. something like a skeleton key passphrase thats used for a number of volumes. This volume ...
1
vote
0answers
312 views

What does it mean “not a valid LUKS device”?

During an upgrade from Fedora 15 to 17, I installed into an existing LUKS encrypted partition. I'm sure I borked the boot loader options, because the new system boots to GRUB. When I attempt to fix ...
0
votes
1answer
869 views

Why does LVM HDD fail “mount” command when booting from CDROM?

Currently I have a superuser post asking if I can install/upgrade existing LUKS/LVM without having to erase and rebuild the partitions. This has provided instructions to mount the HDD, but there are ...
1
vote
1answer
763 views

Is LUKS/cryptsetup's `hddname` (or `name`) simply an arbitrary label used during the session

This is a very simple question about LUKS encryption. My Fedora 15 system uses LUKS over the root, home and swap LVM partitions. To access these partitions from a boot cd, for example, its necessary ...
0
votes
1answer
799 views

Dualboot on lvm with luks

I try to install PC-BSD 9 besides Fedora 16 on my Thinkpad. I installed Fedora on the hard disk, using default lvm with encryption. I left 50GB "unused" on the 250Gb HDD. When I boot into the LiveCD ...
1
vote
0answers
266 views

Tools for block diagrams / listings of multi-layered storage virtualization with LVM and LUKS?

When multiple storage virtualization systems are used together, it can be complicated and time-consuming to gain an understanding of the structure of the various relationships involved. What tools ...
1
vote
1answer
222 views

Encrypted HDD vs. Power Outage. SOL?

Tonight I came home to one of my servers stuck during boot saying the boot drive couldn't be found. I have three HDD's in this server and BIOS picked up all three, but reported one as having a ...
0
votes
1answer
672 views

LUKS encryption, Allow reboot without Password

I know PGP has an option to set a parameter so that the next reboot won't ask for the encryption password. I thought I saw the same functionality with LUKS/cryptsetup But, as it always happens, ...
0
votes
1answer
1k views

Truecrypt & luks, best from both worlds?

I am looking for multi-platform on-the-fly encryption tool, both truecrypt and luks /dmcrypt/ can provide, but I cant have dual boot /Linux&windows/ in this case, because TC does not support multi ...
4
votes
0answers
732 views

pam_mount error “crypt_activate_by_passphrase: Operation not permitted”

I'm trying to set up encrypted home directories on OpenSuSE. Everything works fine for direct login, but I want the home directories to get mounted via ssh as well. When I try to ssh to the machine, ...
2
votes
1answer
264 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...