LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

1
vote
0answers
26 views

Growing an encrypted RAID5 array without causing alignment issues

Question Is there anyway to tell mdadm to make sure a certain logical sector on the RAID-device stays aligned to the beginning of a stripe when growing a RAID5 array? Problem My RAID5 is encrypted ...
0
votes
1answer
20 views

Is there an AES 256 LUKS encryption option in Fedora?

it was suggested that my post (http://security.stackexchange.com/questions/73140/is-there-an-aes-256-luks-encryption-option-in-fedora?noredirect=1#comment120019_73140) would be better if I asked it ...
0
votes
0answers
23 views

Is there an AES 256 LUKS encryption option in Fedora? [on hold]

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough ...
0
votes
1answer
24 views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
1
vote
0answers
32 views

Move a LUKS partition to the left and resize it

I have a LUKS encrypted partition that is NOT into an LVM volume manager. It's at the end of the hard drive, and its size is 250 GB, but I want to add 50 more GBs to it. I would normally use GParted ...
0
votes
0answers
44 views

Luks Encrypted LVM trouble

When I boot into an LUKS encrypted LVM2 volume it displays an error and then asks for my password. Before it displayed the error but after some tinkering I fixed it to get it to work, however it ...
0
votes
0answers
89 views

Accessing LUKS-encrypted exFAT partition with FreeOTFE

My computer is setup with dual boot Windows 8.1 and Arch Linux, with the windows partition encrypted with BitLocker and Arch encrypted with dm-crypt/LUKS. (I would have used Truecrypt, but they are on ...
0
votes
0answers
13 views

Deleted part mapped to /home, how to map the new one (LUKS)?

I have 2 disks on my computer, on each I have a partition for a Linux Mint 17 installation. Both encrypted using LUKS. The other day, I deleted the partition mapped to /home. Now, I created another ...
1
vote
0answers
162 views

Crossplatform encrypted file containers [closed]

Since the sudden (and strange...) stop of TrueCrypt, I am looking in vain for a cross-platform (Windows/Linux essentially) encryption software that manage file containers (or equivalent) in a similar ...
1
vote
1answer
59 views

LUKS encryption with non-interactive login on RHEL6

I need to have LUKS encryption on this system but during lab development I don't want to have to enter the password at the console each reboot. I'd like a way to set a simple password that can be ...
0
votes
0answers
22 views

Preparing 2-disks in raid0 with luks encryption

I'm trying to setup my new system and I would like to have it working with 2 hdd's in (soft)raid0 striping mode together with luks full disc encryption. I'm having problems getting this to work and ...
0
votes
1answer
109 views

Transferring Linux OS from one drive to another with different partitions

First of all, some related questions: How to move from one drive to another that's a different size? What utility can move my Windows boot partition over to another hard drive? My situation is as ...
2
votes
0answers
69 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
0
votes
0answers
63 views

Lost luks password, encrypted partition open

Here is the deal. I have a small office email server that I manage and it needs an update, but the owner took it upon himself to go through cleaning the server room and all my notes got tossed (he, ...
2
votes
0answers
63 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
0
votes
0answers
207 views

mounting and accessing Encrypted LVM after reinstallation of Linux

I had Fedora installed on a LVM & had my /home & another file systems in it encrypted. ( i remember the passwords but forgot the cipher protocol used ) Now, I installed Ubuntu without ...
1
vote
1answer
33 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
152 views

Encrypting GPT Windows 8.1 on a multi boot system?

I have setup LVM on LUKS for my Linux partitons which I am very happy with but I would also like to encrypt Windows 8.1. I had planned to use TrueCrypt until I learned it does not support GPT. I would ...
1
vote
1answer
163 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
1
vote
0answers
32 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
1
vote
0answers
122 views

Automount LUKS encrypted USB HDD with keyfile auth in Mint/Cinnammon

My external backup HDD is LUKS encrypted and can be mounted with password or key file. When plugged in, Cinnammon asks me for a password and mounts it to /media/user/drivename. I want to change ...
0
votes
0answers
26 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
1
vote
1answer
49 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
0answers
76 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
2
votes
1answer
244 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
0
votes
1answer
267 views

fglrx drivers cause blank luks encryption password screen on boot, on Linux Mint Petra 16

I recently did a new install of Linux Mint 16 Petra on my main desktop, and used the full disk encryption option from the installer. The installation went smoothly, and the encryption password prompt ...
1
vote
0answers
72 views

Checking if Luks header is damaged

Is there any way to check if the Luks container header is damaged? My luks container is refusing to be opened with its keyfile, saying No key available with this pass-phrase. History of what ...
3
votes
2answers
99 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
159 views

How to recover LUKS encrypted disk?

I did a LUKS+ext4 encryption on my external hard drive using 'gnome-disk-utility' available in several recent Ubuntu editions. Disk contained only one partition. I lost the partition table of the ...
0
votes
0answers
246 views

(How) can I use VirtualBox (linux guest) to unlock LUKS and EcryptFS on Windows 8 (host)?

I run Linux (Ubuntu 13.10 and Mint 16) most of the time both at work and at home. Occasionally I need to boot into Windows (I dualboot Windows 8 at home or Windows 7 at work). In Windows, I'd like to ...
0
votes
1answer
186 views

dm-crypt on whole disk - cryptsetup /dev/sda?

My question is simple. Can I create a encrypt my whole disk with cryptsetup /dev/sda? Or do I need to create the volume on seperate partition? Edit: I meant a situation, in which I have rootfs on ...
0
votes
1answer
165 views

For LVM on LUKS when does the partition ID for a new install get set to 8e?

Trying to decipher my notes from the last time I installed LVM on Luks, I have a note to create three "primary" partitions for a Dual-Boot installation. The trouble is, after I install Windows, but ...
1
vote
0answers
45 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
1answer
317 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
460 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
2
votes
1answer
929 views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
2
votes
0answers
259 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
18
votes
1answer
715 views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
0
votes
1answer
326 views

LUKS encrypted flash drive: no partition table

I have 16GB encrypted LUKS flash drive with corrupted partition table. Here is the fdisk output: fdisk -l /dev/sdf Disk /dev/sdf: 16.2 GB, 16236150784 bytes 64 heads, 32 sectors/track, 15484 ...
1
vote
0answers
252 views

Move /home to a new HDD encrypt it with luks

as I'm getting more into linux, I'd like to make a few changes to my setup which seem pretty advanced to me. But first of all let me explain my setup so you know with what you are dealing with. This ...
4
votes
1answer
147 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
7
votes
1answer
4k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
8
votes
3answers
5k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
1
vote
2answers
314 views

How to automatically mount a file containing an encrypted file system, when a user login?

The file can be mounted manually via 'cryptsetup luksOpen' and 'mount /dev/mapper' but I would like it to be mounted automatically while logging in and by showing a GUI dialog for the passphrase just ...
1
vote
0answers
479 views

Why “not a valid LUKS device”?

During installing Debian Squeeze I created partitions on a VPS (/dev/vda): vda1 = /boot vda2 = encrypted LVM (not using a standard way of Debian installer, but with the help of cryptsetup switching ...
1
vote
1answer
479 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
5
votes
1answer
757 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
1
vote
2answers
4k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
419 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
0answers
122 views

If a passphrase for a luks container is discovered, can that reveal another passphrase?

I've been looking for an answer for this scenario - say I've got a volume encrypted with a long passphrase. something like a skeleton key passphrase thats used for a number of volumes. This volume ...