LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

18
votes
1answer
1k views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
16
votes
3answers
7k views

How to mount an encrypted ext3 filesystem under OS X?

I know how to mount an ext3 filesystem in OS X with MacFUSE and fuse-ext2. But how can I mount an encrypted ext3 volume? I have Mac OS X 10.6 "Snow Leopard" running.
9
votes
3answers
7k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
9
votes
2answers
7k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
8
votes
5answers
4k views

Does LUKS encryption affect TRIM? (SSD and linux)

I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the ...
7
votes
4answers
6k views

TRIM support via dm-crypt/device-mapper

Getting a new laptop with SSD tomorrow. I need to know about the current status of dm-crypt and TRIM. I have seen several conflicting reports and most activity around this question seems to be > 1 ...
6
votes
1answer
2k views

How can I use a keyfile on a removable USB drive for my encrypted root in Debian?

Recently set up root encryption with a couple of LVM volumes inside one LUKS volume, and I am just a little confused as to how I would go about getting it to automatically unlock using a keyfile ...
5
votes
3answers
4k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
5
votes
1answer
840 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
5
votes
1answer
3k views

Moving a LVM/LUKS encrypted partition to the end of a harddrive?

I need to move a LUKS encrypted partition to the end of a harddrive to expand another partition. Does anyone know how to do this? Is it possible to do this with other partition editing programs? ...
5
votes
0answers
947 views

pam_mount error “crypt_activate_by_passphrase: Operation not permitted”

I'm trying to set up encrypted home directories on OpenSuSE. Everything works fine for direct login, but I want the home directories to get mounted via ssh as well. When I try to ssh to the machine, ...
4
votes
2answers
3k views

dm-crypt/LUKS passphrase/keyfile length

I have a couple of dm-crypt/LUKS related questions. Setting up dm-crypt/LUKS with these settings: cryptsetup -c aes-xts-plain -h sha256 --key-size=256 -y luksFormat /dev/sda1 (1) Considering the ...
4
votes
1answer
1k views

Crypsetup (Unix) is not reading my device

I have a Unix based question. Intro:Trying to create local image which is coded by the cryptsetup tool. Here are my steps: abcdef# dd if=/dev/zero of=image.img bs=512M count=1 1+0 records in 1+0 ...
4
votes
1answer
198 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
3
votes
2answers
110 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
3
votes
1answer
537 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
3
votes
1answer
644 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
2
votes
5answers
4k views

System encryption LUKS: What's the strongest and most secure key size?

I'm reading an article on the Arch Linux wiki about system encryption, in an example the author specified a 512 bit key. From what I read on Wikipedia regarding encryption ciphers it doesn't seem to ...
2
votes
1answer
489 views

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS ...
2
votes
2answers
223 views

LUKS partition automount fails at boot

I have an encrypted Ubuntu 14.04 Desktop setup. The encrypted root partition is created using the Ubuntu installer default parameters (choices "Erase disk and install Ubuntu" and "Encrypt the new ...
2
votes
2answers
248 views

LUKS encryption with non-interactive login on RHEL6

I need to have LUKS encryption on this system but during lab development I don't want to have to enter the password at the console each reboot. I'd like a way to set a simple password that can be ...
2
votes
1answer
418 views

Can I specify PBKDF2 rounds to use with LUKS/dm-crypt?

I have encrypted my root partition with dm-crypt/LUKS/cryptsetup on Ubuntu 12.04. Since it uses PBKDF2: Is it possible, during creation of the encrypted disk, to specify a custom amount of PBKDF2 ...
2
votes
1answer
1k views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
2
votes
1answer
1k views

Is LUKS/cryptsetup's `hddname` (or `name`) simply an arbitrary label used during the session

This is a very simple question about LUKS encryption. My Fedora 15 system uses LUKS over the root, home and swap LVM partitions. To access these partitions from a boot cd, for example, its necessary ...
2
votes
1answer
305 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...
2
votes
1answer
2k views

Performance losses due to whole disk encryption? PGP vs LUKS vs other?

How is performance impacted by whole disk encryption systems such as PGP or LUKS? How do PGP and LUKS compare in performance? Im working on Ubuntu 10.10
2
votes
1answer
356 views

Ubuntu: Mounting an encrypted fs dump

I have encrypted an Ubuntu partition with the standard partition password encryption ubuntu offers (LUKS, As far as I remember). I have dd-dumped this partition to another computer, and want to mount ...
2
votes
1answer
43 views

How to restore grub from a separate partition, to boot a luks partition?

My setup is: sda1 /boot ext2 sda2 swap swap sda3 / luks I broke the boot partition. Now when trying to boot manually, cannot figure out how to load crypto modules needed to open the root ...
2
votes
0answers
71 views

How can I recover a partition after luksFormat?

How can I recover an ext4 partition after luksFormat? It was late one night when I decided to try gnome-shell 3.16 without messing up my Ubuntu box. So, I downloaded an Antergos image and booted it. ...
2
votes
2answers
270 views

Automatically unlock LUKS partition using a key on an USB drive on Debian Jessie

I am trying to have the encrypted root partition be unlocked on boot automatically using a connected USB drive on a fresh installation of Debian Jessie (no non-systemd upgrade). After following a ...
2
votes
0answers
136 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
2
votes
0answers
155 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
2
votes
0answers
399 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
2
votes
0answers
179 views

How to mount USB disk with LVM/LUKS crypted volumes on a Mac? [duplicate]

Possible Duplicate: How to mount an encrypted ext3 filesystem under OS X? I have a USB disk that I've partitioned with LVM and encrypted some of the volumes with LUKS. This is all ...
2
votes
1answer
528 views

USB Linux Install w/ LUKS Encryption: Will Suspend to RAM Work?

I installed Debian Squeeze on a 8GB flash drive. So far, it is stock Squeeze (opted for Laptop and Standard System in Expert Mode install). Before I go nuts, I am trying to run a stripped down distro ...
1
vote
2answers
5k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
783 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
1
vote
1answer
569 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
1
vote
1answer
478 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
2answers
605 views

Multiple LUKS+dm_crypt datasets demands multiple passphrases at boot time

I am experimenting with LUKS+dm_crypt. My setup is something like this: a LVM VG made of multiple Physical Volumes (PV). That VG contains multiple LV (Logical Volumes), most of them encrypted via ...
1
vote
1answer
2k views

Ubuntu performance is bad with cryptsetup/lvm setup

I currently have the following setup on my laptop - harddrive is divided in 3 parts, first one is a /boot for my ubuntu, third one is a windows installation, and one in the middle is a encrypted ...
1
vote
1answer
18 views

Is it safe to encrypt two different partitions with they same keyfile / passphrase?

My question in particular is: Does using the same key multiple times ease bruteforcing the used keyfile or passphrase?
1
vote
1answer
57 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
84 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
1answer
446 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
298 views

Encrypted HDD vs. Power Outage. SOL?

Tonight I came home to one of my servers stuck during boot saying the boot drive couldn't be found. I have three HDD's in this server and BIOS picked up all three, but reported one as having a ...
1
vote
1answer
1k views

How to write as a normal user to a mounted dm-crypt/LUKS partition?

I managed to setup an encrypted partition that's mounted on boot using dm-crypt/LUKS. The relevant entry from my /etc/fstab: /dev/mapper/st_crypt /media/st ext4 defaults 0 2 ...
1
vote
1answer
1k views

How to automatically mount a LUKS-encrpyted iSCSI device at boot time

I have a Debian Lenny server and a client with Kubuntu 10.10. The server provides some iSCSI storage. One of the devices is the /home of the Kubuntu client. I know how to add devices to /etc/crypttab ...
1
vote
0answers
27 views

Open encrypted volumes created by LibreCrypt in linux

How can I open encrypted volumes created by LibreCrypt on linux? These Volume is created by LibreCrypt on Windows7 and is formatted with fat32. When I tried opening this volume in Linux through ...
1
vote
0answers
31 views

How to change from passphrase to encrypted key file in debian using luks?

I have four partitions plus /boot, each one with a different passphrase. I would like to manage unlock of all partitions with a single passphrase that decrypts the gpg.key file on the boot partition. ...