LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

1
vote
0answers
19 views

Open encrypted volumes created by LibreCrypt in linux

How can I open encrypted volumes created by LibreCrypt on linux? These Volume is created by LibreCrypt on Windows7 and is formatted with fat32. When I tried opening this volume in Linux through ...
0
votes
0answers
13 views

Encrypt non-system zpool

I want to encrypt a 3x1TB HDD mirror. My boot drive is a single SSD, I don't want to encrypt it or back it up. The encryptedZfs Ubuntu page is extensive, and directed at those installing the OS on an ...
0
votes
0answers
13 views

Install arch linux when lvm on luks keyfile on usb and bootlouder on usb

'm trying to install Arch Linux in the following way: LVM is installed on LUKS when the LUKS key is image stored on USB And the botlaodr is also on additional USB For some reason, even though I did ...
1
vote
0answers
30 views

How to change from passphrase to encrypted key file in debian using luks?

I have four partitions plus /boot, each one with a different passphrase. I would like to manage unlock of all partitions with a single passphrase that decrypts the gpg.key file on the boot partition. ...
2
votes
1answer
39 views

How to restore grub from a separate partition, to boot a luks partition?

My setup is: sda1 /boot ext2 sda2 swap swap sda3 / luks I broke the boot partition. Now when trying to boot manually, cannot figure out how to load crypto modules needed to open the root ...
1
vote
1answer
76 views

systemd: decrypt luks device on access

I have an external drive with a LUKS-encrypted partition. As the device is an external USB device and I don't always need it, I only want to decrypt and automount on demand. I can easily automount the ...
1
vote
0answers
38 views

Encryption and Wake-on-LAN [closed]

What I want: I have a storage server that can be turned on remotely via WoL. Now I want to encrypt the data stored on the server without losing the ability to turn the server on remotely While I do ...
0
votes
1answer
29 views

LUKS encrypted volume lost upon reboot

Using this guide I encrypted a volume and am able to open and mount it manually. The problem comes after rebooting. On startup the system does not open the encrypted volume, nor is the decrypted ...
2
votes
0answers
71 views

How can I recover a partition after luksFormat?

How can I recover an ext4 partition after luksFormat? It was late one night when I decided to try gnome-shell 3.16 without messing up my Ubuntu box. So, I downloaded an Antergos image and booted it. ...
1
vote
0answers
76 views

Alignment with RAID-6 (mdadm) + LUKS + XFS

What I want: I have a 4x4TB RAID-6 array with mdadm. I want the storage to be encrypted and plan on using LUKS. I will most probably use XFS as filesystem. I will add more disks to the array as ...
2
votes
2answers
248 views

Automatically unlock LUKS partition using a key on an USB drive on Debian Jessie

I am trying to have the encrypted root partition be unlocked on boot automatically using a connected USB drive on a fresh installation of Debian Jessie (no non-systemd upgrade). After following a ...
0
votes
1answer
90 views

dm-crypt with LUKS - /etc/crypttab using either keyfile or passphrase

I have my home partition encrypted using dm-crypt and LUKS header. I have two slots in its header: first one is a passphrase and second is keyfile. I have keyfile on external drive which I use only as ...
0
votes
0answers
125 views

How to revert a LUKS encryption over ecryptfs

I had an encrypted /home folder under Ubuntu. As far as I can tell, it was encrypted using ecryptfs. It was using ~890 Gb of a 904 Gb partition. But then I tried Antergos, an Arch derivative, and made ...
0
votes
1answer
29 views

Is it possible to skip the secure delete step when installing Debian with LUKS full-disk encryption?

I'm installing Debian using LUKS full-disk encryption onto brand new 500GB hard drives. Currently it's taking ~24 hours to prep the drive for installation by securely deleting the drive. Since it's a ...
1
vote
1answer
94 views

Can DoxBox ( or FreeOTFE Encfs Truecrypt ) prompt and mount an encrypted file volume or encrypted disk partition before Windows boots to its GUI?

I would like to Encrypt a secondary drive (NOT the OS/boot drive) and have it mounted and drive letter mapped etc, before Windows 7 gui boots up. This is because I will have mapped some user data onto ...
2
votes
2answers
207 views

LUKS partition automount fails at boot

I have an encrypted Ubuntu 14.04 Desktop setup. The encrypted root partition is created using the Ubuntu installer default parameters (choices "Erase disk and install Ubuntu" and "Encrypt the new ...
0
votes
0answers
73 views

Resize encrypted lvm volume and reallocate the space to windows partition

Here's a diagram of my solid state drive's partition setup. sda sda1 - boot (ext4) sda2 - LUKS Encrypted Partition LVM Volume Group Swap Logical Volume (ext4) Root Logical Volume (ext4) Home ...
1
vote
1answer
266 views

Booting Gentoo on LVM inside LUKS with gpg encrypted keyfile

I'm trying to install Gentoo on LVM logical volume inside LUKS container encrypted with key file encrypted by GPG with passphrase. Everything was going smoothly until I tried to boot. I'm building the ...
0
votes
0answers
143 views

Debian Wheezy doesn't map LUKS partition on boot

Firstly, I apologize for my English. It's really hard for me to write this lines; please, understand if I'm not clear enough or I explained very briefly way. I have an encrypt partition with LUKS ...
0
votes
0answers
192 views

Full encryption of multi user Linux Mint Installation and separatly encrypted homes

I have installed my Linux Mint System multiple times already with manual partioning and with full encryption in place. (A good tutorial and/or automatic script, that gives you a better control of the ...
0
votes
1answer
305 views

Migrating existing Debinan installation to LVM on LUKS with encrypted /boot

I have a VirtualBox with Debian Jessie. After some point I decided to create new virtual drive, encrypt it with LUKS, and copy old system to it without reinstalling. I've used several guides (1,2,3,4) ...
1
vote
0answers
41 views

LUKS partition recovery

A drive with 2 partitions - 1st is plain ext4, second is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition , which i need to recover, thusly: ...
0
votes
1answer
226 views

How to recreate encrypted dm-crypt/LUKS partition with predefined UUID on Linux?

I have / and swap area of Ubuntu 14.04 LTS (and Linux Mint 17.1 LTS) encrypted in dm-crypt/LUKS. / and swap area reside in /dev/mapper/UUID_1 and /dev/mapper/UUID_2. Is it possible to recreate the ...
0
votes
1answer
61 views

Set parameters for Linux Full Disk Encryption?

How do I change the parameters (algorithm, hash, key-lengh, block-size, IVs, mode-of-operation, key-derivation function etc.) for the encryption being used by Linux built in Full Disk Encryption ...
0
votes
0answers
45 views

How to use Keyboard Arrow Keys during LUKS key prompt?

I have recently installed Linux Mint 17.1 laptop, during set up I checked the checkbox to encrypt the installation drive. I chose my passphrase, everything installed fine. On reboot, I am prompted ...
1
vote
0answers
55 views

Growing an encrypted RAID5 array without causing alignment issues

Question Is there anyway to tell mdadm to make sure a certain logical sector on the RAID-device stays aligned to the beginning of a stripe when growing a RAID5 array? Problem My RAID5 is encrypted ...
0
votes
1answer
475 views

Is there an AES 256 LUKS encryption option in Fedora?

it was suggested that my post (http://security.stackexchange.com/questions/73140/is-there-an-aes-256-luks-encryption-option-in-fedora?noredirect=1#comment120019_73140) would be better if I asked it ...
0
votes
0answers
60 views

Is there an AES 256 LUKS encryption option in Fedora? [closed]

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough ...
2
votes
1answer
475 views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
1
vote
0answers
112 views

Move a LUKS partition to the left and resize it

I have a LUKS encrypted partition that is NOT into an LVM volume manager. It's at the end of the hard drive, and its size is 250 GB, but I want to add 50 more GBs to it. I would normally use GParted ...
0
votes
0answers
142 views

Luks Encrypted LVM trouble

When I boot into an LUKS encrypted LVM2 volume it displays an error and then asks for my password. Before it displayed the error but after some tinkering I fixed it to get it to work, however it ...
0
votes
1answer
315 views

Accessing LUKS-encrypted exFAT partition with FreeOTFE

My computer is setup with dual boot Windows 8.1 and Arch Linux, with the windows partition encrypted with BitLocker and Arch encrypted with dm-crypt/LUKS. (I would have used Truecrypt, but they are on ...
1
vote
0answers
269 views

Crossplatform encrypted file containers [closed]

Since the sudden (and strange...) stop of TrueCrypt, I am looking in vain for a cross-platform (Windows/Linux essentially) encryption software that manage file containers (or equivalent) in a similar ...
2
votes
2answers
246 views

LUKS encryption with non-interactive login on RHEL6

I need to have LUKS encryption on this system but during lab development I don't want to have to enter the password at the console each reboot. I'd like a way to set a simple password that can be ...
0
votes
1answer
223 views

Transferring Linux OS from one drive to another with different partitions

First of all, some related questions: How to move from one drive to another that's a different size? What utility can move my Windows boot partition over to another hard drive? My situation is as ...
2
votes
0answers
135 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
0
votes
0answers
173 views

Lost luks password, encrypted partition open

Here is the deal. I have a small office email server that I manage and it needs an update, but the owner took it upon himself to go through cleaning the server room and all my notes got tossed (he, ...
3
votes
1answer
515 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
0
votes
1answer
325 views

mounting and accessing Encrypted LVM after reinstallation of Linux

I had Fedora installed on a LVM & had my /home & another file systems in it encrypted. ( i remember the passwords but forgot the cipher protocol used ) Now, I installed Ubuntu without ...
1
vote
1answer
57 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
326 views

Encrypting GPT Windows 8.1 on a multi boot system?

I have setup LVM on LUKS for my Linux partitons which I am very happy with but I would also like to encrypt Windows 8.1. I had planned to use TrueCrypt until I learned it does not support GPT. I would ...
2
votes
1answer
414 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
1
vote
0answers
50 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
1
vote
0answers
259 views

Automount LUKS encrypted USB HDD with keyfile auth in Mint/Cinnammon

My external backup HDD is LUKS encrypted and can be mounted with password or key file. When plugged in, Cinnammon asks me for a password and mounts it to /media/user/drivename. I want to change ...
1
vote
1answer
83 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
2
votes
0answers
153 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
3
votes
1answer
631 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
0
votes
3answers
644 views

fglrx drivers cause blank luks encryption password screen on boot, on Linux Mint Petra 16

I recently did a new install of Linux Mint 16 Petra on my main desktop, and used the full disk encryption option from the installer. The installation went smoothly, and the encryption password prompt ...
1
vote
0answers
124 views

Checking if Luks header is damaged

Is there any way to check if the Luks container header is damaged? My luks container is refusing to be opened with its keyfile, saying No key available with this pass-phrase. History of what ...
3
votes
2answers
110 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...