0
votes
0answers
5 views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
0
votes
0answers
11 views

Deleted part mapped to /home, how to map the new one (LUKS)?

I have 2 disks on my computer, on each I have a partition for a Linux Mint 17 installation. Both encrypted using LUKS. The other day, I deleted the partition mapped to /home. Now, I created another ...
0
votes
1answer
90 views

Transferring Linux OS from one drive to another with different partitions

First of all, some related questions: How to move from one drive to another that's a different size? What utility can move my Windows boot partition over to another hard drive? My situation is as ...
2
votes
0answers
57 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
1
vote
1answer
27 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
129 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
1
vote
0answers
29 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
0
votes
0answers
23 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
1
vote
1answer
47 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
0answers
62 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
0
votes
1answer
245 views

fglrx drivers cause blank luks encryption password screen on boot, on Linux Mint Petra 16

I recently did a new install of Linux Mint 16 Petra on my main desktop, and used the full disk encryption option from the installer. The installation went smoothly, and the encryption password prompt ...
3
votes
2answers
91 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
0
votes
0answers
221 views

(How) can I use VirtualBox (linux guest) to unlock LUKS and EcryptFS on Windows 8 (host)?

I run Linux (Ubuntu 13.10 and Mint 16) most of the time both at work and at home. Occasionally I need to boot into Windows (I dualboot Windows 8 at home or Windows 7 at work). In Windows, I'd like to ...
0
votes
1answer
168 views

dm-crypt on whole disk - cryptsetup /dev/sda?

My question is simple. Can I create a encrypt my whole disk with cryptsetup /dev/sda? Or do I need to create the volume on seperate partition? Edit: I meant a situation, in which I have rootfs on ...
1
vote
0answers
43 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
1answer
297 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
402 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
2
votes
1answer
865 views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
0
votes
1answer
304 views

LUKS encrypted flash drive: no partition table

I have 16GB encrypted LUKS flash drive with corrupted partition table. Here is the fdisk output: fdisk -l /dev/sdf Disk /dev/sdf: 16.2 GB, 16236150784 bytes 64 heads, 32 sectors/track, 15484 ...
1
vote
0answers
242 views

Move /home to a new HDD encrypt it with luks

as I'm getting more into linux, I'd like to make a few changes to my setup which seem pretty advanced to me. But first of all let me explain my setup so you know with what you are dealing with. This ...
4
votes
1answer
142 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
8
votes
3answers
5k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
1
vote
1answer
471 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
1
vote
2answers
4k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
404 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
3
votes
1answer
2k views

dm-crypt/LUKS passphrase/keyfile length

I have a couple of dm-crypt/LUKS related questions. Setting up dm-crypt/LUKS with these settings: cryptsetup -c aes-xts-plain -h sha256 --key-size=256 -y luksFormat /dev/sda1 (1) Considering the ...
1
vote
1answer
719 views

How to write as a normal user to a mounted dm-crypt/LUKS partition?

I managed to setup an encrypted partition that's mounted on boot using dm-crypt/LUKS. The relevant entry from my /etc/fstab: /dev/mapper/st_crypt /media/st ext4 defaults 0 2 ...
3
votes
3answers
4k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
5
votes
1answer
2k views

Moving a LVM/LUKS encrypted partition to the end of a harddrive?

I need to move a LUKS encrypted partition to the end of a harddrive to expand another partition. Does anyone know how to do this? Is it possible to do this with other partition editing programs? ...
0
votes
2answers
555 views

Accidentally changed partition type while trying to get a ext/luks encrypted linux partition to mount under windows 7 x64

As the title suggests, I was fiddling with ext2 volume manager trying to get my unencrypted removable ext/luks drive to show up under windows. I accidentally went to 'change partition type' and ...
1
vote
2answers
583 views

Multiple LUKS+dm_crypt datasets demands multiple passphrases at boot time

I am experimenting with LUKS+dm_crypt. My setup is something like this: a LVM VG made of multiple Physical Volumes (PV). That VG contains multiple LV (Logical Volumes), most of them encrypted via ...
3
votes
1answer
811 views

Crypsetup (Unix) is not reading my device

I have a Unix based question. Intro:Trying to create local image which is coded by the cryptsetup tool. Here are my steps: abcdef# dd if=/dev/zero of=image.img bs=512M count=1 1+0 records in 1+0 ...
2
votes
1answer
1k views

Performance losses due to whole disk encryption? PGP vs LUKS vs other?

How is performance impacted by whole disk encryption systems such as PGP or LUKS? How do PGP and LUKS compare in performance? Im working on Ubuntu 10.10
6
votes
1answer
2k views

How can I use a keyfile on a removable USB drive for my encrypted root in Debian?

Recently set up root encryption with a couple of LVM volumes inside one LUKS volume, and I am just a little confused as to how I would go about getting it to automatically unlock using a keyfile ...
8
votes
5answers
4k views

Does LUKS encryption affect TRIM? (SSD and linux)

I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the ...