LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

18
votes
1answer
945 views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
16
votes
3answers
6k views

How to mount an encrypted ext3 filesystem under OS X?

I know how to mount an ext3 filesystem in OS X with MacFUSE and fuse-ext2. But how can I mount an encrypted ext3 volume? I have Mac OS X 10.6 "Snow Leopard" running.
9
votes
3answers
6k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
9
votes
1answer
6k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
8
votes
5answers
4k views

Does LUKS encryption affect TRIM? (SSD and linux)

I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the ...
7
votes
4answers
5k views

TRIM support via dm-crypt/device-mapper

Getting a new laptop with SSD tomorrow. I need to know about the current status of dm-crypt and TRIM. I have seen several conflicting reports and most activity around this question seems to be > 1 ...
6
votes
1answer
2k views

How can I use a keyfile on a removable USB drive for my encrypted root in Debian?

Recently set up root encryption with a couple of LVM volumes inside one LUKS volume, and I am just a little confused as to how I would go about getting it to automatically unlock using a keyfile ...
5
votes
3answers
4k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
5
votes
1answer
817 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
5
votes
1answer
2k views

Moving a LVM/LUKS encrypted partition to the end of a harddrive?

I need to move a LUKS encrypted partition to the end of a harddrive to expand another partition. Does anyone know how to do this? Is it possible to do this with other partition editing programs? ...
4
votes
2answers
3k views

dm-crypt/LUKS passphrase/keyfile length

I have a couple of dm-crypt/LUKS related questions. Setting up dm-crypt/LUKS with these settings: cryptsetup -c aes-xts-plain -h sha256 --key-size=256 -y luksFormat /dev/sda1 (1) Considering the ...
4
votes
1answer
997 views

Crypsetup (Unix) is not reading my device

I have a Unix based question. Intro:Trying to create local image which is coded by the cryptsetup tool. Here are my steps: abcdef# dd if=/dev/zero of=image.img bs=512M count=1 1+0 records in 1+0 ...
4
votes
1answer
190 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
4
votes
0answers
905 views

pam_mount error “crypt_activate_by_passphrase: Operation not permitted”

I'm trying to set up encrypted home directories on OpenSuSE. Everything works fine for direct login, but I want the home directories to get mounted via ssh as well. When I try to ssh to the machine, ...
3
votes
2answers
107 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
3
votes
1answer
523 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
2
votes
5answers
3k views

System encryption LUKS: What's the strongest and most secure key size?

I'm reading an article on the Arch Linux wiki about system encryption, in an example the author specified a 512 bit key. From what I read on Wikipedia regarding encryption ciphers it doesn't seem to ...
2
votes
1answer
335 views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
2
votes
2answers
210 views

LUKS encryption with non-interactive login on RHEL6

I need to have LUKS encryption on this system but during lab development I don't want to have to enter the password at the console each reboot. I'd like a way to set a simple password that can be ...
2
votes
1answer
338 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
2
votes
1answer
1k views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
2
votes
1answer
297 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...
2
votes
1answer
2k views

Performance losses due to whole disk encryption? PGP vs LUKS vs other?

How is performance impacted by whole disk encryption systems such as PGP or LUKS? How do PGP and LUKS compare in performance? Im working on Ubuntu 10.10
2
votes
1answer
351 views

Ubuntu: Mounting an encrypted fs dump

I have encrypted an Ubuntu partition with the standard partition password encryption ubuntu offers (LUKS, As far as I remember). I have dd-dumped this partition to another computer, and want to mount ...
2
votes
1answer
19 views

How to restore grub from a separate partition, to boot a luks partition?

My setup is: sda1 /boot ext2 sda2 swap swap sda3 / luks I broke the boot partition. Now when trying to boot manually, cannot figure out how to load crypto modules needed to open the root ...
2
votes
0answers
57 views

How can I recover a partition after luksFormat?

How can I recover an ext4 partition after luksFormat? It was late one night when I decided to try gnome-shell 3.16 without messing up my Ubuntu box. So, I downloaded an Antergos image and booted it. ...
2
votes
0answers
127 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
2
votes
1answer
340 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
2
votes
0answers
135 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
2
votes
0answers
377 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
2
votes
0answers
179 views

How to mount USB disk with LVM/LUKS crypted volumes on a Mac? [duplicate]

Possible Duplicate: How to mount an encrypted ext3 filesystem under OS X? I have a USB disk that I've partitioned with LVM and encrypted some of the volumes with LUKS. This is all ...
2
votes
1answer
526 views

USB Linux Install w/ LUKS Encryption: Will Suspend to RAM Work?

I installed Debian Squeeze on a 8GB flash drive. So far, it is stock Squeeze (opted for Laptop and Standard System in Expert Mode install). Before I go nuts, I am trying to run a stripped down distro ...
1
vote
2answers
5k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
720 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
1
vote
1answer
551 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
1
vote
1answer
471 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
2answers
601 views

Multiple LUKS+dm_crypt datasets demands multiple passphrases at boot time

I am experimenting with LUKS+dm_crypt. My setup is something like this: a LVM VG made of multiple Physical Volumes (PV). That VG contains multiple LV (Logical Volumes), most of them encrypted via ...
1
vote
1answer
2k views

Ubuntu performance is bad with cryptsetup/lvm setup

I currently have the following setup on my laptop - harddrive is divided in 3 parts, first one is a /boot for my ubuntu, third one is a windows installation, and one in the middle is a encrypted ...
1
vote
1answer
55 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
81 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
1answer
424 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
1k views

Is LUKS/cryptsetup's `hddname` (or `name`) simply an arbitrary label used during the session

This is a very simple question about LUKS encryption. My Fedora 15 system uses LUKS over the root, home and swap LVM partitions. To access these partitions from a boot cd, for example, its necessary ...
1
vote
1answer
289 views

Encrypted HDD vs. Power Outage. SOL?

Tonight I came home to one of my servers stuck during boot saying the boot drive couldn't be found. I have three HDD's in this server and BIOS picked up all three, but reported one as having a ...
1
vote
1answer
968 views

How to write as a normal user to a mounted dm-crypt/LUKS partition?

I managed to setup an encrypted partition that's mounted on boot using dm-crypt/LUKS. The relevant entry from my /etc/fstab: /dev/mapper/st_crypt /media/st ext4 defaults 0 2 ...
1
vote
1answer
995 views

How to automatically mount a LUKS-encrpyted iSCSI device at boot time

I have a Debian Lenny server and a client with Kubuntu 10.10. The server provides some iSCSI storage. One of the devices is the /home of the Kubuntu client. I know how to add devices to /etc/crypttab ...
1
vote
0answers
10 views

How to change from passphrase to encrypted key file in debian using luks?

I have four partitions plus /boot, each one with a different passphrase. I would like to manage unlock of all partitions with a single passphrase that decrypts the gpg.key file on the boot partition. ...
1
vote
1answer
26 views

systemd: decrypt luks device on access

I have an external drive with a LUKS-encrypted partition. As the device is an external USB device and I don't always need it, I only want to decrypt and automount on demand. I can easily automount the ...
1
vote
0answers
29 views

Encryption and Wake-on-LAN [closed]

What I want: I have a storage server that can be turned on remotely via WoL. Now I want to encrypt the data stored on the server without losing the ability to turn the server on remotely While I do ...
1
vote
0answers
64 views

Alignment with RAID-6 (mdadm) + LUKS + XFS

What I want: I have a 4x4TB RAID-6 array with mdadm. I want the storage to be encrypted and plan on using LUKS. I will most probably use XFS as filesystem. I will add more disks to the array as ...
1
vote
2answers
85 views

Automatically unlock LUKS partition using a key on an USB drive on Debian Jessie

I am trying to have the encrypted root partition be unlocked on boot automatically using a connected USB drive on a fresh installation of Debian Jessie (no non-systemd upgrade). After following a ...