LUKS stands for Linux Unified Key Setup, a disk-encryption specification. (It does not refer to Rodopi Luks cigarettes!)

learn more… | top users | synonyms

17
votes
1answer
543 views

How to make suspend to RAM secure on Ubuntu with full disk encryption (LVM on top of LUKS)?

I'm on Ubuntu 13.04 using full disk encryption (LVM on top of LUKS). I would like to incorporate luksSuspend into the suspend procedure (and later use luksResume) so that I can suspend to RAM without ...
11
votes
3answers
4k views

How to mount an encrypted ext3 filesystem under OS X?

I know how to mount an ext3 filesystem in OS X with MacFUSE and fuse-ext2. But how can I mount an encrypted ext3 volume? I have Mac OS X 10.6 "Snow Leopard" running.
8
votes
5answers
4k views

Does LUKS encryption affect TRIM? (SSD and linux)

I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything. But then I came to think about TRIM, and garbage collection on the ...
8
votes
3answers
5k views

Why the results of Truecrypt and cryptsetup (LUKS) benchmarking are so different?

I want to encrypt a part of my HDD. But before that I wanted to benchmark the different algorithm available wondering if I should choose aes-xts-256 or aes-xts-512. Note: I don't have aes hardware ...
7
votes
4answers
5k views

TRIM support via dm-crypt/device-mapper

Getting a new laptop with SSD tomorrow. I need to know about the current status of dm-crypt and TRIM. I have seen several conflicting reports and most activity around this question seems to be > 1 ...
6
votes
1answer
2k views

How can I use a keyfile on a removable USB drive for my encrypted root in Debian?

Recently set up root encryption with a couple of LVM volumes inside one LUKS volume, and I am just a little confused as to how I would go about getting it to automatically unlock using a keyfile ...
6
votes
1answer
2k views

How can I access volumes encrypted with LUKS/dm-crypt from Windows?

The answer to this question used to be FreeOTFE (https://en.wikipedia.org/wiki/FreeOTFE); sadly, the project has not been updated for three years and its website (http://www.freeotfe.org) is no longer ...
5
votes
1answer
685 views

Which SSD controllers don't use compression?

I'm in the market for an SSD, but I haven't found any information on which SSDs do NOT use compression on the controller. The system it will go into requires full disk encryption (provided via ...
5
votes
1answer
2k views

Moving a LVM/LUKS encrypted partition to the end of a harddrive?

I need to move a LUKS encrypted partition to the end of a harddrive to expand another partition. Does anyone know how to do this? Is it possible to do this with other partition editing programs? ...
4
votes
1answer
130 views

What files from the /boot partition, in addition to the MBR, must be hashed in order to detect an “evil maid” attack against LUKS-encrypted Linux?

Are boot.img, initrd, and vmlinuz adequate or should the entire contents be hashed? I am not familiar enough with the Linux boot process to answer this with confidence myself.
4
votes
0answers
740 views

pam_mount error “crypt_activate_by_passphrase: Operation not permitted”

I'm trying to set up encrypted home directories on OpenSuSE. Everything works fine for direct login, but I want the home directories to get mounted via ssh as well. When I try to ssh to the machine, ...
3
votes
2answers
68 views

Once opened, isn't a volume encrypted using cryptsetup readable by all users?

A volume is encrypted using cryptsetup. Once cryptsetup open ... has been executed, isn't the mapped device then readable by all users on the host? If they know the file system, they can trivially ...
3
votes
1answer
2k views

dm-crypt/LUKS passphrase/keyfile length

I have a couple of dm-crypt/LUKS related questions. Setting up dm-crypt/LUKS with these settings: cryptsetup -c aes-xts-plain -h sha256 --key-size=256 -y luksFormat /dev/sda1 (1) Considering the ...
3
votes
3answers
3k views

Bad performance with Linux software RAID5 and LUKS encryption

I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot ...
3
votes
1answer
746 views

Crypsetup (Unix) is not reading my device

I have a Unix based question. Intro:Trying to create local image which is coded by the cryptsetup tool. Here are my steps: abcdef# dd if=/dev/zero of=image.img bs=512M count=1 1+0 records in 1+0 ...
2
votes
1answer
265 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...
2
votes
1answer
1k views

Performance losses due to whole disk encryption? PGP vs LUKS vs other?

How is performance impacted by whole disk encryption systems such as PGP or LUKS? How do PGP and LUKS compare in performance? Im working on Ubuntu 10.10
2
votes
1answer
339 views

Ubuntu: Mounting an encrypted fs dump

I have encrypted an Ubuntu partition with the standard partition password encryption ubuntu offers (LUKS, As far as I remember). I have dd-dumped this partition to another computer, and want to mount ...
2
votes
0answers
13 views

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the ...
2
votes
1answer
86 views

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

I'm not a an expert in cryptography, but I've read the project's faqs. How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
2
votes
0answers
176 views

How to mount USB disk with LVM/LUKS crypted volumes on a Mac? [duplicate]

Possible Duplicate: How to mount an encrypted ext3 filesystem under OS X? I have a USB disk that I've partitioned with LVM and encrypted some of the volumes with LUKS. This is all ...
2
votes
1answer
502 views

USB Linux Install w/ LUKS Encryption: Will Suspend to RAM Work?

I installed Debian Squeeze on a 8GB flash drive. So far, it is stock Squeeze (opted for Laptop and Standard System in Expert Mode install). Before I go nuts, I am trying to run a stripped down distro ...
1
vote
5answers
3k views

System encryption LUKS: What's the strongest and most secure key size?

I'm reading an article on the Arch Linux wiki about system encryption, in an example the author specified a 512 bit key. From what I read on Wikipedia regarding encryption ciphers it doesn't seem to ...
1
vote
2answers
3k views

HDD & SSD Linux: Hard resetting link

my current storage setup consists of two traditional HDD's and two SSD's in my Linux box, each two on their own RAID 1 array which is encrypted via luks. I have a story of sorts, rather than a ...
1
vote
1answer
285 views

How to automatically unmount encrypted loop device at shutdown?

I'm using debian testing, and I have a file, it's a LUKS container with ext4 filesystem. My system mounts it with every boot. I had to use the three following files in order to do so: /etc/crypttab ...
1
vote
1answer
447 views

How to automaticaly mount luks-partition only when disk is plugged in

I have the following scenario: I want to automatically backup some data from my Laptop(Fedora Core 17) to a external encrypted(luks) hard disk. The disk can be opened by a key file, which lies on the ...
1
vote
1answer
365 views

How to open a LUKS, OTFE .vol?

I feel like this is a dumb question, but I can't find the answer anywhere. I have a .vol, LUKS/OTFE. I know the password. How can I open it? This should be simple, but the closest answer I've ...
1
vote
2answers
565 views

Multiple LUKS+dm_crypt datasets demands multiple passphrases at boot time

I am experimenting with LUKS+dm_crypt. My setup is something like this: a LVM VG made of multiple Physical Volumes (PV). That VG contains multiple LV (Logical Volumes), most of them encrypted via ...
1
vote
1answer
2k views

Ubuntu performance is bad with cryptsetup/lvm setup

I currently have the following setup on my laptop - harddrive is divided in 3 parts, first one is a /boot for my ubuntu, third one is a windows installation, and one in the middle is a encrypted ...
1
vote
1answer
15 views

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to ...
1
vote
1answer
244 views

Recovering a LUKS encrypted partition from dump

I did a Linux Mint 15 install on my notebook a couple of weeks ago, and chose to encrypt the whole disk. Yesterday I could no longer decrypt it (that is, it insisted that either the passphrase or ...
1
vote
1answer
661 views

Linux SSD Performance with Luks / LVM

I've recently obtained a Samsung EVO 840 1TB SSD as a hard disk replacement for my laptop (Lenovo X220t, core-i5-2520m, 8GB RAM). So far, I'm not impressed with the resulting performance and request ...
1
vote
1answer
781 views

Is LUKS/cryptsetup's `hddname` (or `name`) simply an arbitrary label used during the session

This is a very simple question about LUKS encryption. My Fedora 15 system uses LUKS over the root, home and swap LVM partitions. To access these partitions from a boot cd, for example, its necessary ...
1
vote
1answer
222 views

Encrypted HDD vs. Power Outage. SOL?

Tonight I came home to one of my servers stuck during boot saying the boot drive couldn't be found. I have three HDD's in this server and BIOS picked up all three, but reported one as having a ...
1
vote
1answer
614 views

How to write as a normal user to a mounted dm-crypt/LUKS partition?

I managed to setup an encrypted partition that's mounted on boot using dm-crypt/LUKS. The relevant entry from my /etc/fstab: /dev/mapper/st_crypt /media/st ext4 defaults 0 2 ...
1
vote
0answers
14 views

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available ...
1
vote
0answers
15 views

How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?

I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
1
vote
0answers
40 views

Automount LUKS encrypted USB HDD with keyfile auth in Mint/Cinnammon

My external backup HDD is LUKS encrypted and can be mounted with password or key file. When plugged in, Cinnammon asks me for a password and mounts it to /media/user/drivename. I want to change ...
1
vote
1answer
35 views

ZFS on top of LUKS partitions

I have weird problem I cannot quite explain. I have three hard disks. One is the root disk sda, and then there are two more, namely sdb and sdc. The latter have two LUKS partitions sdb1 and sdc1 and ...
1
vote
0answers
43 views

Linux LUKS and choice of filesystem

Which filesystem displays the best performance when running on a LUKS encrypted partition? Does it make sense to use f2fs when the LUKS partition is on an SSD, or does the device-mapper abstraction ...
1
vote
0answers
43 views

Checking if Luks header is damaged

Is there any way to check if the Luks container header is damaged? My luks container is refusing to be opened with its keyfile, saying No key available with this pass-phrase. History of what ...
1
vote
0answers
35 views

How to find out whether a specific mounted Linux file system is located on a encrypted device?

How can I find out via the command line whether a specific mounted file system in a Linux system is ultimately located on an encrypted device? Of course, a generic solution would be nice, but ...
1
vote
0answers
202 views

Uefi and full disk encryption with lvm on luks

I have an asus machine on which i can use old bios and new uefi. I've always used the old bios system, running a full encrypted debian with the following configuration: an unencrypted boot partition ...
1
vote
0answers
226 views

Move /home to a new HDD encrypt it with luks

as I'm getting more into linux, I'd like to make a few changes to my setup which seem pretty advanced to me. But first of all let me explain my setup so you know with what you are dealing with. This ...
1
vote
2answers
234 views

How to automatically mount a file containing an encrypted file system, when a user login?

The file can be mounted manually via 'cryptsetup luksOpen' and 'mount /dev/mapper' but I would like it to be mounted automatically while logging in and by showing a GUI dialog for the passphrase just ...
1
vote
0answers
422 views

Why “not a valid LUKS device”?

During installing Debian Squeeze I created partitions on a VPS (/dev/vda): vda1 = /boot vda2 = encrypted LVM (not using a standard way of Debian installer, but with the help of cryptsetup switching ...
1
vote
0answers
110 views

If a passphrase for a luks container is discovered, can that reveal another passphrase?

I've been looking for an answer for this scenario - say I've got a volume encrypted with a long passphrase. something like a skeleton key passphrase thats used for a number of volumes. This volume ...
1
vote
0answers
317 views

What does it mean “not a valid LUKS device”?

During an upgrade from Fedora 15 to 17, I installed into an existing LUKS encrypted partition. I'm sure I borked the boot loader options, because the new system boots to GRUB. When I attempt to fix ...
1
vote
0answers
268 views

Tools for block diagrams / listings of multi-layered storage virtualization with LVM and LUKS?

When multiple storage virtualization systems are used together, it can be complicated and time-consuming to gain an understanding of the structure of the various relationships involved. What tools ...
1
vote
1answer
299 views

Extending available space in LVM using LUKS

I have one volume group consisting of lv_root, lv_swap and lv_home. I want to increase the space available to lv_home by adding an extra hard drive. Can this be done while maintaining a LUKS-based ...