LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

2
votes
0answers
11 views

A portable linux system with luks encryption can't boot on one of my machines

I installed opensuse on a portable SSD drive, which I can boot on several of my machines. The installation uses luks encryption on /home and /swap partitions (ext4 filesystem). But only when I use ...
1
vote
0answers
18 views

How to mount a LUKS encrypted device with password prompt NOT at bootime?

I would like to automate the process of doing sudo cryptsetup luksOpen /dev/sdc sdc_crypt sudo mount /dev/mapper/sdc_crypt /mnt/data in one line with mount /mnt/data and only be prompted for the ...
0
votes
0answers
32 views

boot / mount TrueCrypt / VeraCrypt system drive automatically w/o user intervention?

Currently I use Linux to do full disk encryption and have it setup where I can ssh into the box to remotely unlock the machine during boot, as it is a headless server. Since this doesn't seem possible ...
1
vote
1answer
19 views

What is the recommended way to move a LUKS Volume Header backup to another computer?

I'm running Linux Mint with a full disk encryption (done during installation). Following this guide, I've created a backup of the LUKS header with the following command: # cryptsetup ...
1
vote
1answer
44 views

Remove encryption setup on a lvm/luks partition

On my linux machine, I have setup disk encryption using lvm/luks. However later I delete one of the partition and format it to NTFS in order to use it on Windows (as I have dual boot linux/win10). ...
1
vote
0answers
18 views

Can EFI/UEFI theoretically steal LUKS password?

I usually keep my data private by encrypting the whole hard drive. My previous notebook had BIOS, without UEFI. I have bought macbook, want to install linux in dualboot there. So I wonder if EFI can ...
1
vote
0answers
29 views

Laptop with two LUKS encrypted disks: HDD and SSD: How to start with same passphrase?

In my Linux laptop I've two disks: One larger conventional HDD and a smaller but fast SSD. On the SSD I've a small unencrypted /boot-Partition containung kernels, initrd images and GRUB. All ...
0
votes
0answers
26 views

Raid 0 SATA (2 discs) -> Raid 0 SSD (2 discs) - linux

What is the easiest way to migrate from two discs (approximately 500Gb) in RAID 0 with linux (fedora) to two new SSD discs with same size (approximately 500Gb)? For making process easier i can use ...
0
votes
1answer
535 views

Check that kernel supports aes-xts-plain64 cipher

After an update I can't access my encrypted disk. When trying to do so : sudo cryptsetup luksOpen /dev/sda8 Documents Failed to setup dm-crypt key mapping Check that kernel supports ...
0
votes
0answers
58 views

Disk encryption with separate /boot partition

I'm trying to setup an encrypted filesystem with a separate /boot partition and I'm having some troubles and there's no a complete and definite guide about this topic. I'll write down the procedure ...
0
votes
0answers
70 views

Full Disk LUKS in Debian, Unable to boot after rename partition name in crypttab

Here is the lsblk info: sdf1 vfat efi sdf2 ext2 boot sdf3 crypto_LU --- sdf3_crypto LVM2 --- name--vg--root EXT4 / --- name--vg--swap swap ...
1
vote
1answer
67 views

How to install openssl cryptographic library on Lubuntu

I'm trying to build cryptsetup 1.6.8 (or 1.7.0) from source using the openssl libraries instead of libgcrypt. ./configure --with-crypto_backend=openssl I did install libssl-dev but it still gives ...
0
votes
0answers
125 views

Fedora 23 Kernel Panic for All Kernel Versions in GRUB

Every time I try to start my Fedora 23 workstation a kernel panic occurs. This happens even with the rescue option at boot. The first line that appears to give an error is Kernel panic - notsyncing: ...
0
votes
0answers
21 views

How can I force delete a faulty drive from the Linux device mapper?

I have a faulty HDD which sometimes fails to spin up. It doesn't contain anything important, just my home directory and some multimedia files, so I don't care if the filesystem crashes. However, it's ...
1
vote
1answer
69 views

Recover luks partition for /home after system erase - cant mount /dev/mapper/MyDevice

I looked on a lot of places and cant find what to do now. I had encrypted /home on 2nd hard drive. I had to format my debian and now want to access my data. sudo fdisk -l /dev/sda1 * 2048 ...
0
votes
0answers
102 views

I have a corrupt gpt with a luks partition. How do I recover the disk?

I encrypted my drive about a month or so ago with LUKS(through Gnome Disks). It was working just fine and I restarted my computer, then Some time later I tried to access the drive and it wasn't ...
0
votes
1answer
19 views

Multiple passphrase volume decryption on Linux

Is there any way to decrypt a volume that's been encrypted using a "standard" or commonly used volume encryption system (such as LUKS) using multiple passphrases? I've been searching for something ...
0
votes
0answers
46 views

Extend PV encrypted with Luks on Fedora 22

When I initially setup my desktop and partitioned everything I left space available if I needed to extend a LV. Now I am needing to extend a LV but have found it's more complicated than I thought. ...
1
vote
1answer
1k views

How to manually setup grub on a seperate boot partition with LVM over LUKS full disk encryption?

I've installed Linux Mint 17.2, with a hard drive partitioned as follows: sdc1 - 100MB ext2 for boot sdc2 - rest of disk as LUKS -> Physical Volume -> LVM Volume The logical volumes are: / ...
3
votes
1answer
687 views

Change the keyboard layout of GRUB in stage 1

I installed grub on a EFI based system. So I have the EFI partition on /dev/sdc2 and my LUKS container in /dev/sdc5. I have only one linux partition in the LUKS container. So even /boot with the stage ...
0
votes
0answers
52 views

dm-crypt with encrypted key on USB

The requirement is to use dm-crypt with a key stored on an on external USB drive. The key most almost be encrypted with some symmetric encryption, decrypted at boot time (by entering the pasphrase), ...
0
votes
0answers
48 views

Duplicate entry in /etc/crypttab (Debian Jessie)

I am using Debian Jessie 8.1 (systemd init) with an encrypted (LUKS) root partition. I recently noticed, that there are two identical entries for the root partition in /etc/crypttab. Is this really ...
1
vote
0answers
43 views

Encrypt disk volume with LUKS, enable access without passphrase

How can I set “no passphrase, and don't prompt for one” on a LUKS volume, leaving it encrypted as is? Enabling LUKS encryption is a one-way, time-consuming operation. I need to divide the set-up of ...
1
vote
1answer
28 views

Is it safe to encrypt two different partitions with they same keyfile / passphrase?

My question in particular is: Does using the same key multiple times ease bruteforcing the used keyfile or passphrase?
1
vote
1answer
131 views

Enabled FIPS on a luks encrypted CentOS system - boot password not longer recognized

I have a CentOS VM instance which was software encrypted during install. The system booted fine (after entering the boot decryption password). My project requires enabling FIPS for OpenSSL, so I ...
2
votes
3answers
347 views

Open encrypted volumes created by LibreCrypt in linux

How can I open encrypted volumes created by LibreCrypt on linux? These Volume is created by LibreCrypt on Windows7 and is formatted with fat32. When I tried opening this volume in Linux through ...
0
votes
0answers
79 views

Install arch linux when lvm on luks keyfile on usb and bootlouder on usb

'm trying to install Arch Linux in the following way: LVM is installed on LUKS when the LUKS key is image stored on USB And the botlaodr is also on additional USB For some reason, even though I did ...
1
vote
0answers
93 views

How to change from passphrase to encrypted key file in debian using luks?

I have four partitions plus /boot, each one with a different passphrase. I would like to manage unlock of all partitions with a single passphrase that decrypts the gpg.key file on the boot partition. ...
2
votes
1answer
68 views

How to restore grub from a separate partition, to boot a luks partition?

My setup is: sda1 /boot ext2 sda2 swap swap sda3 / luks I broke the boot partition. Now when trying to boot manually, cannot figure out how to load crypto modules needed to open the root ...
2
votes
1answer
490 views

systemd: decrypt luks device on access

I have an external drive with a LUKS-encrypted partition. As the device is an external USB device and I don't always need it, I only want to decrypt and automount on demand. I can easily automount the ...
1
vote
0answers
107 views

Encryption and Wake-on-LAN [closed]

What I want: I have a storage server that can be turned on remotely via WoL. Now I want to encrypt the data stored on the server without losing the ability to turn the server on remotely While I do ...
0
votes
1answer
87 views

LUKS encrypted volume lost upon reboot

Using this guide I encrypted a volume and am able to open and mount it manually. The problem comes after rebooting. On startup the system does not open the encrypted volume, nor is the decrypted ...
2
votes
0answers
114 views

How can I recover a partition after luksFormat?

How can I recover an ext4 partition after luksFormat? It was late one night when I decided to try gnome-shell 3.16 without messing up my Ubuntu box. So, I downloaded an Antergos image and booted it. ...
1
vote
0answers
157 views

Alignment with RAID-6 (mdadm) + LUKS + XFS

What I want: I have a 4x4TB RAID-6 array with mdadm. I want the storage to be encrypted and plan on using LUKS. I will most probably use XFS as filesystem. I will add more disks to the array as ...
3
votes
2answers
1k views

Automatically unlock LUKS partition using a key on an USB drive on Debian Jessie

I am trying to have the encrypted root partition be unlocked on boot automatically using a connected USB drive on a fresh installation of Debian Jessie (no non-systemd upgrade). After following a ...
0
votes
1answer
367 views

dm-crypt with LUKS - /etc/crypttab using either keyfile or passphrase

I have my home partition encrypted using dm-crypt and LUKS header. I have two slots in its header: first one is a passphrase and second is keyfile. I have keyfile on external drive which I use only as ...
0
votes
1answer
80 views

Is it possible to skip the secure delete step when installing Debian with LUKS full-disk encryption?

I'm installing Debian using LUKS full-disk encryption onto brand new 500GB hard drives. Currently it's taking ~24 hours to prep the drive for installation by securely deleting the drive. Since it's a ...
1
vote
1answer
205 views

Can DoxBox ( or FreeOTFE Encfs Truecrypt ) prompt and mount an encrypted file volume or encrypted disk partition before Windows boots to its GUI?

I would like to Encrypt a secondary drive (NOT the OS/boot drive) and have it mounted and drive letter mapped etc, before Windows 7 gui boots up. This is because I will have mapped some user data onto ...
3
votes
2answers
661 views

LUKS partition automount fails at boot

I have an encrypted Ubuntu 14.04 Desktop setup. The encrypted root partition is created using the Ubuntu installer default parameters (choices "Erase disk and install Ubuntu" and "Encrypt the new ...
1
vote
1answer
560 views

Booting Gentoo on LVM inside LUKS with gpg encrypted keyfile [closed]

I'm trying to install Gentoo on LVM logical volume inside LUKS container encrypted with key file encrypted by GPG with passphrase. Everything was going smoothly until I tried to boot. I'm building the ...
0
votes
1answer
542 views

Migrating existing Debinan installation to LVM on LUKS with encrypted /boot

I have a VirtualBox with Debian Jessie. After some point I decided to create new virtual drive, encrypt it with LUKS, and copy old system to it without reinstalling. I've used several guides (1,2,3,4) ...
1
vote
0answers
92 views

LUKS partition recovery

A drive with 2 partitions - 1st is plain ext4, second is encrypted LUKS. The partition table has been overwritten. I've found the beginning of the second partition , which i need to recover, thusly: ...
0
votes
1answer
607 views

How to recreate encrypted dm-crypt/LUKS partition with predefined UUID on Linux?

I have / and swap area of Ubuntu 14.04 LTS (and Linux Mint 17.1 LTS) encrypted in dm-crypt/LUKS. / and swap area reside in /dev/mapper/UUID_1 and /dev/mapper/UUID_2. Is it possible to recreate the ...
0
votes
1answer
84 views

Set parameters for Linux Full Disk Encryption?

How do I change the parameters (algorithm, hash, key-lengh, block-size, IVs, mode-of-operation, key-derivation function etc.) for the encryption being used by Linux built in Full Disk Encryption ...
1
vote
0answers
65 views

Growing an encrypted RAID5 array without causing alignment issues

Question Is there anyway to tell mdadm to make sure a certain logical sector on the RAID-device stays aligned to the beginning of a stripe when growing a RAID5 array? Problem My RAID5 is encrypted ...
0
votes
1answer
910 views

Is there an AES 256 LUKS encryption option in Fedora?

it was suggested that my post (http://security.stackexchange.com/questions/73140/is-there-an-aes-256-luks-encryption-option-in-fedora?noredirect=1#comment120019_73140) would be better if I asked it ...
0
votes
0answers
68 views

Is there an AES 256 LUKS encryption option in Fedora? [closed]

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough ...
3
votes
1answer
1k views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
2
votes
0answers
217 views

Move a LUKS partition to the left and resize it

I have a LUKS encrypted partition that is NOT into an LVM volume manager. It's at the end of the hard drive, and its size is 250 GB, but I want to add 50 more GBs to it. I would normally use GParted ...
0
votes
1answer
400 views

Accessing LUKS-encrypted exFAT partition with FreeOTFE

My computer is setup with dual boot Windows 8.1 and Arch Linux, with the windows partition encrypted with BitLocker and Arch encrypted with dm-crypt/LUKS. (I would have used Truecrypt, but they are on ...