encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

4
votes
1answer
945 views

anonymous url navigation in command line?

Is there any way to anonymize http requests through the command line? In other words, is it possible to wget a page without the requester's IP showing up?
4
votes
2answers
741 views

Decrypting a file encrypted on a different system

My home server runs OpenBSD 5.3 with Samba serving files to several Windows machines. I wrote a script to backup video files by encrypting each file with openssl enc -aes-256-cbc and uploading it to ...
0
votes
0answers
23 views

Reasons to partition an encrypted ssd [duplicate]

I am just setting up a new system with Lubuntu 13.04. I have an SSD and the whole system will be encrypted with the standard LVM + dm-crypt method (as offered by the lubuntu installer). In the past I ...
4
votes
1answer
119 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
3
votes
2answers
612 views

WeeChat decryption fails while reading from data socket

I'm using WeeChat for quite a while on different machines now. All instances are using the same settings over and over again. When I connect, everything is fine, like this output from WeeChat, just ...
2
votes
0answers
80 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
0
votes
1answer
159 views

How to get my files from my encrypted home folder on Ubuntu 12.04?

Last night there was a power outage and now my computer will not boot up. After pushing the power button and seeing the BIOS I only see a black screen with a white cursor at the top left of the ...
4
votes
1answer
98 views

Editing Truecrypt Hidden Volume's Outer Volume?

I just created a tor hidden (plausible deniability) volume. I used a 32GB USB flash drive, for the outer volume, and made the inner volume 20GB. Does this mean that I can safely add another ~12GB of ...
1
vote
1answer
80 views

mount other encrypted volume on wrong password entry

I have fully encrypted my laptop using dm-crypt and luks. So If I start my laptop I was prompted for a password before init will start. This works just fine. The problem A possible attacker will ...
1
vote
1answer
140 views

securing a file on disk with password protection usig strong ssl cipher and view the file in more secured way

I was trying to decrypt a file to standardout and piped its content to a given command. for example cat comand, wc command etc. However I felt the following command can be simplified, any further ...
1
vote
1answer
833 views

Batch encryption using a public GPG key

I've written a little script for my Clonezilla USB stick which will allow me to quickly back everything up without entering any options by simply running the script. Next, I'd like to store my public ...
1
vote
0answers
128 views

Reverse ssh-agent forwarding and unlocking remote keys with your local keys

So the following two things should both be possible to do with ssh the question is just how difficult they would be and I'm hoping someone can give me an easy answer. 1) Suppose I have several ...
2
votes
1answer
3k views

net.ipv4.conf.all.mc_forwarding: why is my access denied?

On Debian 12.04 LTS I am trying to access the key net.ipv4.conf.all.mc_forwarding by doing : sudo sysctl -w net.ipv4.conf.all.mc_forwarding=1 But every time I am doing this, I get the message ...
0
votes
1answer
103 views

Execute in Place an encrypted ram drive

I have found a few old posts claiming that tmpfs can execute in place. Is this true? If so, how? If not, is there a ram drive alternative? Can this be done with a ram drive that is encrypted? If ...
0
votes
2answers
101 views

are daemon tmpfs executables copied unencrypted to memory upon execution? (prevent if so?)

When a daemon is executed, is the executable copied to memory? If so, can it be copied encrypted? If not, is there a way to prevent the executable from being copied to memory? The executable is ...
3
votes
3answers
1k views

Encrypting loopback images without using a loopback device

I'm trying to design a firmware update system for an embedded Linux system. My plan is to send an image that can be mounted on the target system, so I don't need to unpack the entire file. I also want ...
3
votes
1answer
71 views

stat on an encrypted volume in osx takes a long time

My workstation is a MacBook Pro with an SSD. For security reasons, my main volume is encrypted. I ran this command on a folder: time find . -exec stat {} + >/dev/null real 0m5.205s user ...
1
vote
1answer
650 views

How can I create an encrypted, file-system–agnostic, mountable volume?

At work, we have an iMac (running OS X) that shares a partitioned hard drive over the network. I'd like to back up to my partition from my Linux machine. I've attempted connecting via cifs, then ...
2
votes
1answer
118 views

Debian Live 3.x with encrypted root filesystem

I'd like to build a Debian Live system based on sid with an encrypted root filesystem. It's quite easy to install a Debian system with a rootfs encrypted with dm-crypt/LUKS, so I suppose it's also ...
3
votes
1answer
2k views

What's the easiest way to decrypt a disk partition?

I made a mistake of encrypting the entire LVM physical volume (contains both home, root, and swap) when installing a CentOS 6.4 (2.6.32-358.6.1.el6.x86_64) box. I soon came to realize that moving ...
2
votes
1answer
103 views

Checking if a passphrase is able to decrypt symmetrically encrypted files

I have about twenty files symmetrically encrypted with CAST5. I have a single passphrase that is meant to work with all of the files and I wish to confirm that it does. I wrote a script to perform a ...
1
vote
1answer
115 views

How to add RAID5 to existing crypto-LVM?

I recently installed Debian Wheezy and let the installer guide partition the disk using a whole partition with encryption (LVM). Later on I've added four disks and setup RAID5 on them (using mdadm). ...
3
votes
2answers
388 views

How to encrypt my system such that suspend to RAM works and is also encrypted

How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
1
vote
1answer
638 views

Booting encrypted root partion fails after system update

I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
2
votes
1answer
1k views

Does encrypting my whole Lubuntu slow running programs down?

During the installation of Lubuntu I chose to encrypt my whole HDD (not just the /home folder). Now it feels like my system has slowed down a lot. Especially the startup time of programs increased. ...
1
vote
1answer
272 views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
3
votes
4answers
2k views

Fast Way to Randomize HD?

I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
3
votes
1answer
176 views

Protecting file system contents with TPM and Encrypted File System

I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
2
votes
2answers
255 views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
2
votes
1answer
441 views

Grub2 keyboard layout when decrypting partition

According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout". Is there really no way to change the keyboard layout used when ...
1
vote
2answers
145 views

Encrypted disk filesystem compatibilities

On my Debian Linux system during the install I decided to use disk encryption (the one offered during a regulard Debian install). When the system boots up I need to enter a password and then the ...
2
votes
1answer
525 views

Best way to encrypt my system on an ssd

I consider to buy an ssd for my laptop (something like Samsung 830 or 840) to make the system more responsive. I want my system (at least my home partition) to be encrypted. However I know about ...
1
vote
1answer
118 views

backup / on ntfs filesystem encrypted

I was about to backup my archlinux, following this guide to my FritzBox, (which enforces a NTFS system that I mounted via samba) as I remembered, that NTFS is not capable to keep permissions and other ...
2
votes
1answer
407 views

Will using a compressed filesystem over an encrypted volume improve performance?

Encryption/decryption is often the main bottleneck when accessing an encrypted volume. Would using a filesystem with a fast transparent compression (such as BTRFS + LZO) help? The idea is that there ...
1
vote
0answers
33 views

How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?

I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
1
vote
1answer
103 views

Which packages contain IPsec implementations and algorithms that use it for encryption?

Which package contains the implementation of IPsec and which package contains the implementation of encryption algorithms that IPsec uses for encryption? I need to use custom crytographic algorithms ...
3
votes
1answer
2k views

LUKS storing keyfile in encrypted usb drive

I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives. Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
3
votes
2answers
3k views

How do I configure systemd to activate an encrypted swap file?

My previous question produced the commands to add an encrypted swap file: # One-time setup: fallocate -l 4G /root/swapfile.crypt chmod 600 /root/swapfile.crypt # On every boot: loop=$(losetup -f) ...
0
votes
0answers
56 views

Boot disk unavailable

Background I've got one 32GB SSD that I have Ubuntu 12.10 installed on (this drive is encrypted), and two 1.5TB drives that will serve as storage and backup respectively. I have formated both drives ...
6
votes
1answer
1k views

How do I set up an encrypted swap file in Linux?

How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
1
vote
1answer
172 views

Overwriting disk before encryption

I'm going to create encrypted lvm on my disk. As a encryption mechanism I choose dmcrypt with LUKS. Here's my question - should I overwrite (for security reasons) whole disk before creating encrypted ...
0
votes
1answer
165 views

Encrypted USB 2.5“ to unencrypted internal 3.5” hard drive copy speed

I am moving data from an external USB 2.5" hard drive (encrypted with cryptsetup) to an unencrypted internal 1TB 3.5" hard drive on a GNU/Linux quad-core headless server with 2GB RAM, using Midnight ...
1
vote
3answers
290 views

Can a mounted encrypted filesystem be safe from root?

I have access to a shared remote computer from which I would like to run some code I have written which uses an interpreter (not a compiled code). I would like to protect this source code from other ...
2
votes
0answers
291 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
5
votes
1answer
6k views

How to remove LUKS encryption?

I tried removing LUKS encryption on my home directory using the following command: cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd But it gives me an error saying: ...
1
vote
1answer
532 views

Use Linux to read contents of Windows encrypted folder

Windows allows the selective encrypting of certain files or folders. I currently have a Windows folder that is set to "encrypt contents to secure data". (The Windows partition is NTFS.) If I mount ...
0
votes
1answer
574 views

setup filename encryption for encrypted home folder in eCryptfs

I used ecryptfs-migrate-home to encrypt my home folder on my Debian (Testing) system. As I am a complete encryption-greenhorn, I don't know yet how to check, if the encryption succeeded. However, I ...
4
votes
2answers
681 views

conceal home folder completely - is ecryptfs the right choice?

On my Debian-Testing-System, I want to completely conceal the home folders. That means, I not only want the data to be encrypted, but I also want to preclude determining any (or most) information from ...
4
votes
2answers
376 views

How to lock a directory?

I want to block any kind of access to a certain directory unless a password is provided. It could be my root or account password. The directory is residing on an NTFS partition, and this method needs ...
1
vote
0answers
141 views

Installing IPSEC on FreeBSD

how to install IPSEC on two FreeBSD 9.0 machines to can send an encrypted packets between them , and let them read the encrypted packets .