encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

3
votes
2answers
302 views

How to encrypt my system such that suspend to RAM works and is also encrypted

How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
1
vote
1answer
423 views

Booting encrypted root partion fails after system update

I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
2
votes
1answer
867 views

Does encrypting my whole Lubuntu slow running programs down?

During the installation of Lubuntu I chose to encrypt my whole HDD (not just the /home folder). Now it feels like my system has slowed down a lot. Especially the startup time of programs increased. ...
1
vote
1answer
245 views

Dm-Crypt system encryption with different keys per user

I have found the following example configuration for a system encryption: Example 5: paranoid system encryption • whole hard drive encrypted with dm-crypt+LUKS └──> unlocked before boot, ...
3
votes
3answers
1k views

Fast Way to Randomize HD?

I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
3
votes
1answer
141 views

Protecting file system contents with TPM and Encrypted File System

I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
2
votes
2answers
198 views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
2
votes
1answer
315 views

Grub2 keyboard layout when decrypting partition

According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout". Is there really no way to change the keyboard layout used when ...
1
vote
2answers
127 views

Encrypted disk filesystem compatibilities

On my Debian Linux system during the install I decided to use disk encryption (the one offered during a regulard Debian install). When the system boots up I need to enter a password and then the ...
2
votes
1answer
458 views

Best way to encrypt my system on an ssd

I consider to buy an ssd for my laptop (something like Samsung 830 or 840) to make the system more responsive. I want my system (at least my home partition) to be encrypted. However I know about ...
1
vote
1answer
112 views

backup / on ntfs filesystem encrypted

I was about to backup my archlinux, following this guide to my FritzBox, (which enforces a NTFS system that I mounted via samba) as I remembered, that NTFS is not capable to keep permissions and other ...
2
votes
1answer
339 views

Will using a compressed filesystem over an encrypted volume improve performance?

Encryption/decryption is often the main bottleneck when accessing an encrypted volume. Would using a filesystem with a fast transparent compression (such as BTRFS + LZO) help? The idea is that there ...
1
vote
0answers
30 views

How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?

I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
1
vote
1answer
96 views

Which packages contain IPsec implementations and algorithms that use it for encryption?

Which package contains the implementation of IPsec and which package contains the implementation of encryption algorithms that IPsec uses for encryption? I need to use custom crytographic algorithms ...
3
votes
1answer
2k views

LUKS storing keyfile in encrypted usb drive

I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives. Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
2
votes
2answers
2k views

How do I configure systemd to activate an encrypted swap file?

My previous question produced the commands to add an encrypted swap file: # One-time setup: fallocate -l 4G /root/swapfile.crypt chmod 600 /root/swapfile.crypt # On every boot: loop=$(losetup -f) ...
0
votes
0answers
55 views

Boot disk unavailable

Background I've got one 32GB SSD that I have Ubuntu 12.10 installed on (this drive is encrypted), and two 1.5TB drives that will serve as storage and backup respectively. I have formated both drives ...
6
votes
1answer
1k views

How do I set up an encrypted swap file in Linux?

How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
1
vote
1answer
160 views

Overwriting disk before encryption

I'm going to create encrypted lvm on my disk. As a encryption mechanism I choose dmcrypt with LUKS. Here's my question - should I overwrite (for security reasons) whole disk before creating encrypted ...
0
votes
1answer
157 views

Encrypted USB 2.5“ to unencrypted internal 3.5” hard drive copy speed

I am moving data from an external USB 2.5" hard drive (encrypted with cryptsetup) to an unencrypted internal 1TB 3.5" hard drive on a GNU/Linux quad-core headless server with 2GB RAM, using Midnight ...
1
vote
3answers
254 views

Can a mounted encrypted filesystem be safe from root?

I have access to a shared remote computer from which I would like to run some code I have written which uses an interpreter (not a compiled code). I would like to protect this source code from other ...
2
votes
0answers
248 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
3
votes
1answer
4k views

How to remove LUKS encryption?

I tried removing LUKS encryption on my home directory using the following command: cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd But it gives me an error saying: ...
1
vote
1answer
445 views

Use Linux to read contents of Windows encrypted folder

Windows allows the selective encrypting of certain files or folders. I currently have a Windows folder that is set to "encrypt contents to secure data". (The Windows partition is NTFS.) If I mount ...
0
votes
1answer
459 views

setup filename encryption for encrypted home folder in eCryptfs

I used ecryptfs-migrate-home to encrypt my home folder on my Debian (Testing) system. As I am a complete encryption-greenhorn, I don't know yet how to check, if the encryption succeeded. However, I ...
4
votes
2answers
621 views

conceal home folder completely - is ecryptfs the right choice?

On my Debian-Testing-System, I want to completely conceal the home folders. That means, I not only want the data to be encrypted, but I also want to preclude determining any (or most) information from ...
4
votes
2answers
322 views

How to lock a directory?

I want to block any kind of access to a certain directory unless a password is provided. It could be my root or account password. The directory is residing on an NTFS partition, and this method needs ...
1
vote
0answers
138 views

Installing IPSEC on FreeBSD

how to install IPSEC on two FreeBSD 9.0 machines to can send an encrypted packets between them , and let them read the encrypted packets .
4
votes
1answer
380 views

Encrypt word X to /etc/shadow encryption

I've changed my password to X and the shadow file has changed to: ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7::: I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
0
votes
0answers
1k views

How to bypass WD MyBook Essential external HDD hardware lock?

I have a Western Digital Mybook Essential external HDD 2TB which is password locked. Well with my old OS it showed me that is unlocked, but as I changed the OS it's showing that is locked, I've ...
1
vote
1answer
231 views

How to export a private PGP email key

I have made a keypair for my email address using gnupg. I thought that I should probably keep a backup of it so that if I lose my desktop computer I can continue using the same key. Is this the ...
3
votes
3answers
2k views

RAID5 recovery trying with “mdadm --create … missing”

First how I got in this situation: I had an RAID5 array with disks each 2TB (external USB-disks), I then wanted to create a larger encrypted array. Therefore I got 2 additional disks (also 2 TB each) ...
2
votes
1answer
683 views

Fast encryption for home directory with Scientific Linux (ala' RedHat)

I have a T61 with C2D T7300 CPU/4 GByte RAM. I has SL 6.3 on it, and I ticked the encrypt VG during install. If I start a "normal" windows xp on it, its ~slow.. so.. I need a little performance boost ...
16
votes
4answers
18k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
3
votes
0answers
386 views

How to set up an encrypted directory to be mounted only during samba access?

(This is not about restricting client access, for which ext3 permissions do the trick) I'd like to encrypt the data on my NAS drive (Buffalo LinkStation Pro with SSH access enabled, if that matters) ...
1
vote
1answer
441 views

Which filesystem to use when a samba share should allow for NTFS encryption?

I'm using a NAS (Buffalo LinkStation Pro with SSH access, if that matters) which runs Linux (2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux, with smbd --version = Version ...
1
vote
2answers
131 views

Encrypt IP payload + URL

I need to encrypt IP payload + request URL so that my ISP can't understand my requests. Do you know any project such as zebedee except VPNs? Tor doesn't work with my ISP, because SSL was banned, so ...
2
votes
1answer
281 views

How do I specify the keyserver with GPG?

Tutorials online say to use the option --keyserver, like this: gpg --send-keys <keyID> --keyserver 'hkp://keyserver.ubuntu.com:11371' but gpg doesn't recognise the option --keyserver. What ...
3
votes
1answer
244 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
258 views

Encrypt boot file system

I just tried to set up Debian in a VM (just testing, before installing it on a real system). I have set up 4 drives in total. 2 drives that simulate pen drives, on which I want to install the boot ...
2
votes
1answer
525 views

Is it *really* possible to directly steal a private key if it uses no passphrase?

I've read in various places, such as in this question that using an ssh key pair without a passphrase allows attackers to steal your private key if they gain access to your account. I assumed that by ...
4
votes
1answer
2k views

How to decrypt single EncFS encrypted files?

Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created? With a little help from google I found ...
6
votes
3answers
473 views

E-Mail client in linux which allows to search encrypted mail

Is there an E-Mail client for linux which allows to search old gpg encrypted mails (i.e. find all mails which contain a particular keyword in the body, including the encrypted ones).
5
votes
1answer
774 views

How to edit a .gpg file with vi?

So I created a gpg encrypted file with password: gpg -c passwords.txt.gpg how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted ...
-1
votes
3answers
1k views

How to create an encrypted container (dynamically expandable) on OpenBSD

On OpenBSD, how/with what I can create an encrypted container that can later be dynamically expanded? Can I do it with GPG? (password protection is enough) So, if I open this container and put files ...
7
votes
1answer
2k views

LVM + LUKS + SSD + Gentoo — making it all work together

I'm finding a lot of conflicting information out there, and as of yet haven't found anyone trying to pull together all of the components that I'm trying to do, so I'm hoping someone who understands ...
4
votes
4answers
2k views

Recovering overwritten LVM metadata

Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone). Now I wasn't able to fix it and didn't have a lot of time, so I ...
4
votes
4answers
1k views

Best way to make encrypted backups while preserving permissions to a windows file system

For my home network I wanted to buy a NAS which supports disk encryption and NFS since it is important for me that the backup is encrypted but also that it preserves owner, groups and permissions ...
3
votes
3answers
841 views

Encrypt a password the same way mysql does

I've created a user ... but forgotten the password mysql> create user 'blayo'@'%' identified by 'right'; Which Linux command line tool can encrypt the password the same way mysql 5.5 does ? ...
9
votes
3answers
3k views

Encrypt OfflineIMAP Password

I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process). From the documentation, it seems the only way to ...