LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

0
votes
0answers
17 views

Best choice for a bitrot-resistant external storage system [on hold]

I've recently purchased s new computer that has a fancy SSD drive. Since it is smaller than what my current computer has, I find that I need a system where I can put my videos, photos, etc. I'd also ...
1
vote
1answer
17 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
0answers
26 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
1
vote
0answers
39 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
0
votes
1answer
143 views

fglrx drivers cause blank luks encryption password screen on boot, on Linux Mint Petra 16

I recently did a new install of Linux Mint 16 Petra on my main desktop, and used the full disk encryption option from the installer. The installation went smoothly, and the encryption password prompt ...
1
vote
0answers
29 views

Checking if Luks header is damaged

Is there any way to check if the Luks container header is damaged? My luks container is refusing to be opened with its keyfile, saying No key available with this pass-phrase. History of what ...
3
votes
2answers
48 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
1answer
81 views

How to recover LUKS encrypted disk?

I did a LUKS+ext4 encryption on my external hard drive using 'gnome-disk-utility' available in several recent Ubuntu editions. Disk contained only one partition. I lost the partition table of the ...
0
votes
0answers
79 views

(How) can I use VirtualBox (linux guest) to unlock LUKS and EcryptFS on Windows 8 (host)?

I run Linux (Ubuntu 13.10 and Mint 16) most of the time both at work and at home. Occasionally I need to boot into Windows (I dualboot Windows 8 at home or Windows 7 at work). In Windows, I'd like to ...
0
votes
1answer
72 views

dm-crypt on whole disk - cryptsetup /dev/sda?

My question is simple. Can I create a encrypt my whole disk with cryptsetup /dev/sda? Or do I need to create the volume on seperate partition? Edit: I meant a situation, in which I have rootfs on ...
0
votes
1answer
88 views

For LVM on LUKS when does the partition ID for a new install get set to 8e?

Trying to decipher my notes from the last time I installed LVM on Luks, I have a note to create three "primary" partitions for a Dual-Boot installation. The trouble is, after I install Windows, but ...
1
vote
0answers
27 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
1answer
139 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
193 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
1
vote
1answer
505 views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
1
vote
0answers
168 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
16
votes
1answer
417 views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
0
votes
1answer
197 views

LUKS encrypted flash drive: no partition table

I have 16GB encrypted LUKS flash drive with corrupted partition table. Here is the fdisk output: fdisk -l /dev/sdf Disk /dev/sdf: 16.2 GB, 16236150784 bytes 64 heads, 32 sectors/track, 15484 ...
0
votes
0answers
337 views

LUKS with Serpent and SHA512, CBC ESSIV

I am trying to setup my new Gentoo system (I believe this is not relevant, as this is not Gentoo specific question) with LUKS while trying to use: cat smth | cryptsetup luksFormat /dev/sda10 -c ...
1
vote
0answers
197 views

Move /home to a new HDD encrypt it with luks

as I'm getting more into linux, I'd like to make a few changes to my setup which seem pretty advanced to me. But first of all let me explain my setup so you know with what you are dealing with. This ...
4
votes
1answer
111 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
1
vote
0answers
93 views

Zero-wipe free space on encrypted filesystem

I have a vmdk which has a partition with LUKS container (encrypted with cryptsetup luksFormat), which I use as the backup of my the home server and laptop. After some time, the vmdk can grow ...
5
votes
1answer
1k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
7
votes
3answers
4k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
1
vote
2answers
190 views

How to automatically mount a file containing an encrypted file system, when a user login?

The file can be mounted manually via 'cryptsetup luksOpen' and 'mount /dev/mapper' but I would like it to be mounted automatically while logging in and by showing a GUI dialog for the passphrase just ...
1
vote
0answers
364 views

Why “not a valid LUKS device”?

During installing Debian Squeeze I created partitions on a VPS (/dev/vda): vda1 = /boot vda2 = encrypted LVM (not using a standard way of Debian installer, but with the help of cryptsetup switching ...
1
vote
1answer
412 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
5
votes
1answer
634 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
1
vote
2answers
2k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
327 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
0answers
90 views

If a passphrase for a luks container is discovered, can that reveal another passphrase?

I've been looking for an answer for this scenario - say I've got a volume encrypted with a long passphrase. something like a skeleton key passphrase thats used for a number of volumes. This volume ...
1
vote
0answers
297 views

What does it mean “not a valid LUKS device”?

During an upgrade from Fedora 15 to 17, I installed into an existing LUKS encrypted partition. I'm sure I borked the boot loader options, because the new system boots to GRUB. When I attempt to fix ...
0
votes
1answer
824 views

Why does LVM HDD fail “mount” command when booting from CDROM?

Currently I have a superuser post asking if I can install/upgrade existing LUKS/LVM without having to erase and rebuild the partitions. This has provided instructions to mount the HDD, but there are ...
1
vote
1answer
665 views

Is LUKS/cryptsetup's `hddname` (or `name`) simply an arbitrary label used during the session

This is a very simple question about LUKS encryption. My Fedora 15 system uses LUKS over the root, home and swap LVM partitions. To access these partitions from a boot cd, for example, its necessary ...
0
votes
1answer
753 views

Dualboot on lvm with luks

I try to install PC-BSD 9 besides Fedora 16 on my Thinkpad. I installed Fedora on the hard disk, using default lvm with encryption. I left 50GB "unused" on the 250Gb HDD. When I boot into the LiveCD ...
1
vote
0answers
257 views

Tools for block diagrams / listings of multi-layered storage virtualization with LVM and LUKS?

When multiple storage virtualization systems are used together, it can be complicated and time-consuming to gain an understanding of the structure of the various relationships involved. What tools ...
1
vote
1answer
203 views

Encrypted HDD vs. Power Outage. SOL?

Tonight I came home to one of my servers stuck during boot saying the boot drive couldn't be found. I have three HDD's in this server and BIOS picked up all three, but reported one as having a ...
0
votes
1answer
598 views

LUKS encryption, Allow reboot without Password

I know PGP has an option to set a parameter so that the next reboot won't ask for the encryption password. I thought I saw the same functionality with LUKS/cryptsetup But, as it always happens, ...
0
votes
1answer
1k views

Truecrypt & luks, best from both worlds?

I am looking for multi-platform on-the-fly encryption tool, both truecrypt and luks /dmcrypt/ can provide, but I cant have dual boot /Linux&windows/ in this case, because TC does not support multi ...
4
votes
0answers
693 views

pam_mount error “crypt_activate_by_passphrase: Operation not permitted”

I'm trying to set up encrypted home directories on OpenSuSE. Everything works fine for direct login, but I want the home directories to get mounted via ssh as well. When I try to ssh to the machine, ...
2
votes
1answer
251 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...
1
vote
1answer
288 views

Extending available space in LVM using LUKS

I have one volume group consisting of lv_root, lv_swap and lv_home. I want to increase the space available to lv_home by adding an extra hard drive. Can this be done while maintaining a LUKS-based ...
3
votes
1answer
2k views

dm-crypt/LUKS passphrase/keyfile length

I have a couple of dm-crypt/LUKS related questions. Setting up dm-crypt/LUKS with these settings: cryptsetup -c aes-xts-plain -h sha256 --key-size=256 -y luksFormat /dev/sda1 (1) Considering the ...
1
vote
1answer
513 views

How to write as a normal user to a mounted dm-crypt/LUKS partition?

I managed to setup an encrypted partition that's mounted on boot using dm-crypt/LUKS. The relevant entry from my /etc/fstab: /dev/mapper/st_crypt /media/st ext4 defaults 0 2 ...
3
votes
3answers
3k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
7
votes
4answers
5k views

TRIM support via dm-crypt/device-mapper

Getting a new laptop with SSD tomorrow. I need to know about the current status of dm-crypt and TRIM. I have seen several conflicting reports and most activity around this question seems to be > 1 ...
2
votes
0answers
175 views

How to mount USB disk with LVM/LUKS crypted volumes on a Mac? [duplicate]

Possible Duplicate: How to mount an encrypted ext3 filesystem under OS X? I have a USB disk that I've partitioned with LVM and encrypted some of the volumes with LUKS. This is all ...
5
votes
1answer
2k views

Moving a LVM/LUKS encrypted partition to the end of a harddrive?

I need to move a LUKS encrypted partition to the end of a harddrive to expand another partition. Does anyone know how to do this? Is it possible to do this with other partition editing programs? ...
2
votes
1answer
487 views

USB Linux Install w/ LUKS Encryption: Will Suspend to RAM Work?

I installed Debian Squeeze on a 8GB flash drive. So far, it is stock Squeeze (opted for Laptop and Standard System in Expert Mode install). Before I go nuts, I am trying to run a stripped down distro ...
1
vote
5answers
2k views

System encryption LUKS: What's the strongest and most secure key size?

I'm reading an article on the Arch Linux wiki about system encryption, in an example the author specified a 512 bit key. From what I read on Wikipedia regarding encryption ciphers it doesn't seem to ...