15 votes

LUKS on Ubuntu 16.04 : unknown filesystem type 'crypto_LUKS'

To be able to access your files you have to decrypt them first cryptsetup open /dev/sda1 backup where sda1 is the encrypted partition and backup is the name of your partition (that is a very basic ...
Joe's user avatar
  • 673
8 votes

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

The 5.1 kernel, current at the time I write this, has two different formats the for cipher string, the "old" format and the "new" format. Everything in this question so far, and apparently all docs ...
TrentP's user avatar
  • 191
6 votes
Accepted

Load dm-crypt on Ubuntu Server 18.04 LTS in Windows Subsystem for Linux 1 or 2

I can't vouch for WSL1, but it appears that WSL2 supports it since it is running the full Linux kernel. In fact I have just tried to load the dm-crypt module and succeeded. dm-crypt module loaded ...
Johan van Tonder's user avatar
3 votes
Accepted

What to keep in mind when partitioning external hard drive with both encrypted ext4 and unencrypted NTFS?

Older Windows versions didn't support multiple partitions on flash drives, but USB disks (HDDs or SSDs) were always fully supported (where by "always" I mean "at least since Windows 7, ...
gronostaj's user avatar
  • 57k
3 votes

LUKS - change keyFile using cryptsetup

No idea why @studiohack voted down / deleted my answer (and no idea howto sent direct communications here and I am not paid by superuser.com so my time here is limited). But the ANSWER was/is right - ...
Reiner030's user avatar
3 votes

Is it possible to add a key to an open luks volume whithout providing a current key?

Yes, like this: cryptsetup luksAddKey <DEVICE> --master-key-file <(dmsetup table --showkey /dev/mapper/<MAP> | awk '{print$5}' | xxd -r -p) Substitute <DEVICE> with the block ...
Joseph Sible-Reinstate Monica's user avatar
2 votes

Can I make a encrypted image by using openssl encrypt tools instead of dmsetup?

No, you can't do this: Because the filesystem you use is implemented in the kernel, you need an underlying encrypted block device implementation that is also implemented in the kernel, which is the ...
Juergen's user avatar
  • 53
2 votes

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

You can list the ciphers supported by your kernels with the following command, [root@arif]# ls /lib/modules/[your kernel version]/kernel/crypto/ algif_rng.ko.xz blowfish_common.ko.xz cmac.ko.xz ...
arif's user avatar
  • 143
2 votes

LUKS - change keyFile using cryptsetup

The answer is in your question, just read carefully: There are 5 named parameters (3 for the old and 2 for the new keyfile), plus the one missing unnamed parameter: luksChangeKey <device> [<...
Daniel Alder's user avatar
2 votes
Accepted

What is the default encryption key-size for dm-crypt / cryptsetup in LUKS mode?

Neither. The default is equivalent to issuing --key-size 256 as this refers to the key data handled by cryptsetup itself, but because XTS-AES requires two independent AES keys (one for the data and ...
u1686_grawity's user avatar
2 votes
Accepted

Add new LUKS passphrase or key using existing keyfile for LUKS2 encrypted partition

Using --key-file According to the manual: luksAddKey <device> [<key file with new key>] Adds a new passphrase. An existing passphrase must be supplied interactively or via --key-file. The ...
A.B's user avatar
  • 5,916
2 votes
Accepted

Command requires missing /run on read-only filsystem

You got this option with cryptsetup, but it sounds risky. --disable-locks Disable lock protection for metadata on disk. This option is valid only for LUKS2 and ignored for ...
LawrenceC's user avatar
  • 74k
1 vote
Accepted

Mount a LUKS partition without manually supplying a passphrase

It's possible – most Linux distributions support unlocking LUKS volumes on boot per /etc/crypttab (either using a keyfile or prompting for a passphrase), and a keyfile works the same way as a ...
u1686_grawity's user avatar
1 vote

Is there a easy way to encrypt my /home directory?

Consider the information from "Benjamin's Blog": How to: Encrypt your Home directory in Arch Linux
Vassilis Papanikolaou's user avatar
1 vote
Accepted

Understanding plain dm-crypt, cryptsetup, mapping; securely wiping data using plain dm-crypt

This seems to be a caching issue, as the following shows: root@archiso ~ # dd if=/dev/zero of=/dev/sda bs=32 count=2 % zeroing sda 2+0 records in 2+0 records out 64 bytes copied, 0.75095 s, 0.1 kB/s ...
nox's user avatar
  • 216
1 vote

Understanding plain dm-crypt, cryptsetup, mapping; securely wiping data using plain dm-crypt

The first commands should have worked, they're the same as the cryptsetup faq too (2.19). Using a file instead of a device uses an intermediary loop file, but is otherwise the same. But I'm ...
Xen2050's user avatar
  • 14k
1 vote

LUKS detached header on RHEL 6

I copied cryptsetup-1.7 source code to RHEL-6 and was able to build it successfully. It required if_alg.h which I copied from RHEL-7 system and installed libgcrypt-devel.
user2255299's user avatar
1 vote

How to configure grub.cfg to decrypt root partition?

First off boot off the install media and chroot into the LUKs LVM. In the file /etc/default/grub you will want to make sure the following line exists GRUB_CMDLINE_LINUX="dolvm crypt_root=UUID=...
Citizen Kepler's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible