encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

5
votes
1answer
228 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
1
vote
2answers
150 views

Does DM-Crypt partition look like random noise?

If I format partition with dm-crypt does its entry in partition table suggest somehow that this partition is encrypted or for someone from outside it looks like regular partition with random noise ...
3
votes
2answers
324 views

Dropbox/Copy.com & Truecrypt

I have a partition that contains all my personal stuff, which is mounted at boot under /home/myuser/foo. I would like to synchronize it on the cloud via Dropbox or Copy.com, but I don't trust them, so ...
3
votes
2answers
107 views

Does using full-disk encryption affect the probability of losing data in case of storage errors?

So.. if there is a bad block on the HDD, what can survive better? not using FDE (full disc encryption) using FDE - since the whole disk has "1 partition" - the encrypted one, isn't it more likely to ...
3
votes
3answers
368 views

Best practice to backup a LUKS encrypted device

What's the fastest method to backup and restore a luks encrypted device (e.g. a full encrypted usb-device to a image-file). The usb-device can be decrypted/accessed. I'm looking for a solution to ...
0
votes
0answers
74 views

Encrypted Zorin 7 Partition HELP!

I had Zorin 7 Encrypted Harddrive option installed on my laptop. I accidentally deleted important GRUB data trying to make more room in the boot folder i think? So the computer would no longer boot ...
3
votes
3answers
203 views

Best way to benchmark different encryption solutions on my system

I want to compare different encryption solutions for encrypting my system, possibly different solutions for different parts of the system such as /usr or /home. In particular I look at dm-crypt ...
2
votes
3answers
345 views

Use EncFS to encrypt files so that a particular user or process can access them, but root cannot

I have a process which I would like to have access to an encrypted file system. This is very easy to do with EncFS, but this requires a user mounting the encrypted file system, therefore giving any ...
1
vote
1answer
114 views

How can I unlock a self encrypting disk using an sata usb adapter

Suppose I plug in a self encrypting disk (for example the samung 840 pro) via a sata usb adapter to a linux-box. Suppose I know the password. How can I access the hard-drive in this case?
4
votes
2answers
315 views

How to get a usable full disk encryption with different encryptions for different users

I want to have a full system encryption on my laptop. But I have two users, one for home and one for work and want a separate encryption for both. Sure I could do a full disk encryption with dm-crypt ...
3
votes
1answer
182 views

ecryptfs mounted via command line, what do I need to backup?

I asked this question on the ecryptfs launchpad, but it expired there without answer. https://answers.launchpad.net/ubuntu/+source/ecryptfs-utils/+question/235226 It might be trivial, but I really ...
3
votes
1answer
157 views

cryptdisks_start: precheck failed: the device contains a filesystem type crypto_LUKS

I'm trying to use cryptdisks_start to open a LUKS device that is defined in my /etc/crypttab. Unfortunately, the command fails with the following error message: martin ~ # cryptdisks_start ...
2
votes
1answer
203 views

Why do NoMachine NXclient docs instruct to copy over the server's private key?

Working to set up the GnuPG keymanager for SSH and now FreeNX server on CentOS 6 and NoMachine NXclient on my new install of ArchLinux I've been reading more about keys than I've ever read before. I'm ...
2
votes
2answers
123 views

Any reason not to use LUKS on a backup drive?

I have my hard disk encrypted with LUKS, but I make regular backups to an unencrypted external harddrive. Is there any reason I shouldn't setup LUKS on my backup drive as well? Obviously, the big ...
2
votes
1answer
400 views

Using GPG to decrypt Symantec PGP encrypted files?

Is this possible? I had an old HD encrypted with Symantec PGP. I attempted to decrypt the disk with Symantec's boot time recovery tool. It stalled 18% in, I let it sit for 16 hours, and the machine ...
2
votes
2answers
102 views

How to install Debian with encrypted / and passphrase required before login-screen?

I'm trying to install Debian in my Dell inspiron 8GB ram + 500GB HD. Althought I could install it without any problems with the regular install and even with a few modifications, I'm trying to ...
1
vote
1answer
184 views

Public key for git-…rpm is not installed

When attempting to install git (and probably other packages), I get this error: $ sudo yum -y install git Installing: git x86_64 1.7.11.3-1.el6.rfx ...
3
votes
1answer
1k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
3
votes
2answers
633 views

how to know the type of symmetric encryption used by ssh?

I want to know the type of symmetric encryption (after authentication) used by ssh in a connection client-server. I'm not sure who determines the encryption. Client or Server?. I have looked in ...
0
votes
1answer
96 views

Errors when booting with encrypted LVM

When I boot my computer and I have to enter the password of the encrypted lvm, there are always a bunch of annyoing messages like: "usb string descriptor 0 read error: -22". How can I fix that? my ...
3
votes
1answer
504 views

anonymous url navigation in command line?

Is there any way to anonymize http requests through the command line? In other words, is it possible to wget a page without the requester's IP showing up?
4
votes
2answers
386 views

Decrypting a file encrypted on a different system

My home server runs OpenBSD 5.3 with Samba serving files to several Windows machines. I wrote a script to backup video files by encrypting each file with openssl enc -aes-256-cbc and uploading it to ...
0
votes
0answers
23 views

Reasons to partition an encrypted ssd [duplicate]

I am just setting up a new system with Lubuntu 13.04. I have an SSD and the whole system will be encrypted with the standard LVM + dm-crypt method (as offered by the lubuntu installer). In the past I ...
4
votes
1answer
90 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
2
votes
2answers
396 views

WeeChat decryption fails while reading from data socket

I'm using WeeChat for quite a while on different machines now. All instances are using the same settings over and over again. When I connect, everything is fine, like this output from WeeChat, just ...
2
votes
0answers
71 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
0
votes
1answer
139 views

How to get my files from my encrypted home folder on Ubuntu 12.04?

Last night there was a power outage and now my computer will not boot up. After pushing the power button and seeing the BIOS I only see a black screen with a white cursor at the top left of the ...
4
votes
1answer
81 views

Editing Truecrypt Hidden Volume's Outer Volume?

I just created a tor hidden (plausible deniability) volume. I used a 32GB USB flash drive, for the outer volume, and made the inner volume 20GB. Does this mean that I can safely add another ~12GB of ...
1
vote
1answer
70 views

mount other encrypted volume on wrong password entry

I have fully encrypted my laptop using dm-crypt and luks. So If I start my laptop I was prompted for a password before init will start. This works just fine. The problem A possible attacker will ...
1
vote
1answer
94 views

securing a file on disk with password protection usig strong ssl cipher and view the file in more secured way

I was trying to decrypt a file to standardout and piped its content to a given command. for example cat comand, wc command etc. However I felt the following command can be simplified, any further ...
1
vote
1answer
523 views

Batch encryption using a public GPG key

I've written a little script for my Clonezilla USB stick which will allow me to quickly back everything up without entering any options by simply running the script. Next, I'd like to store my public ...
1
vote
0answers
105 views

Reverse ssh-agent forwarding and unlocking remote keys with your local keys

So the following two things should both be possible to do with ssh the question is just how difficult they would be and I'm hoping someone can give me an easy answer. 1) Suppose I have several ...
1
vote
1answer
2k views

net.ipv4.conf.all.mc_forwarding: why is my access denied?

On Debian 12.04 LTS I am trying to access the key net.ipv4.conf.all.mc_forwarding by doing : sudo sysctl -w net.ipv4.conf.all.mc_forwarding=1 But every time I am doing this, I get the message ...
0
votes
1answer
97 views

Execute in Place an encrypted ram drive

I have found a few old posts claiming that tmpfs can execute in place. Is this true? If so, how? If not, is there a ram drive alternative? Can this be done with a ram drive that is encrypted? If ...
0
votes
2answers
91 views

are daemon tmpfs executables copied unencrypted to memory upon execution? (prevent if so?)

When a daemon is executed, is the executable copied to memory? If so, can it be copied encrypted? If not, is there a way to prevent the executable from being copied to memory? The executable is ...
3
votes
3answers
788 views

Encrypting loopback images without using a loopback device

I'm trying to design a firmware update system for an embedded Linux system. My plan is to send an image that can be mounted on the target system, so I don't need to unpack the entire file. I also want ...
3
votes
1answer
67 views

stat on an encrypted volume in osx takes a long time

My workstation is a MacBook Pro with an SSD. For security reasons, my main volume is encrypted. I ran this command on a folder: time find . -exec stat {} + >/dev/null real 0m5.205s user ...
1
vote
1answer
325 views

How can I create an encrypted, file-system–agnostic, mountable volume?

At work, we have an iMac (running OS X) that shares a partitioned hard drive over the network. I'd like to back up to my partition from my Linux machine. I've attempted connecting via cifs, then ...
2
votes
0answers
100 views

Debian Live 3.x with encrypted root filesystem

I'd like to build a Debian Live system based on sid with an encrypted root filesystem. It's quite easy to install a Debian system with a rootfs encrypted with dm-crypt/LUKS, so I suppose it's also ...
3
votes
1answer
1k views

What's the easiest way to decrypt a disk partition?

I made a mistake of encrypting the entire LVM physical volume (contains both home, root, and swap) when installing a CentOS 6.4 (2.6.32-358.6.1.el6.x86_64) box. I soon came to realize that moving ...
2
votes
1answer
84 views

Checking if a passphrase is able to decrypt symmetrically encrypted files

I have about twenty files symmetrically encrypted with CAST5. I have a single passphrase that is meant to work with all of the files and I wish to confirm that it does. I wrote a script to perform a ...
1
vote
1answer
99 views

How to add RAID5 to existing crypto-LVM?

I recently installed Debian Wheezy and let the installer guide partition the disk using a whole partition with encryption (LVM). Later on I've added four disks and setup RAID5 on them (using mdadm). ...
3
votes
2answers
291 views

How to encrypt my system such that suspend to RAM works and is also encrypted

How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
1
vote
1answer
400 views

Booting encrypted root partion fails after system update

I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
2
votes
1answer
799 views

Does encrypting my whole Lubuntu slow running programs down?

During the installation of Lubuntu I chose to encrypt my whole HDD (not just the /home folder). Now it feels like my system has slowed down a lot. Especially the startup time of programs increased. ...
1
vote
1answer
238 views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
3
votes
3answers
1k views

Fast Way to Randomize HD?

I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
3
votes
1answer
131 views

Protecting file system contents with TPM and Encrypted File System

I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
2
votes
2answers
191 views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
1
vote
1answer
300 views

Grub2 keyboard layout when decrypting partition

According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout". Is there really no way to change the keyboard layout used when ...