encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

1
vote
1answer
278 views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen /...
1
vote
1answer
385 views

auto mount encrypted USB

I've actually just started dabbling in the raspeberry pi but no stranger to hacking around these controllers. Having said that, my knowledge is lacking in a few areas. A little about what I want to ...
0
votes
0answers
27 views

Strategy about cloning crypted (LUKS) systems

For a while, I ve being discussing here how to manage to clone one encrypted system on others. My plan is to build a Mint system, then to encrypt it, then to clone it. Here is my process for ...
1
vote
1answer
185 views

How to decrypt and copy home folder from laptop to external hard drive through live usb GUI?

I am a fairly new user to Linux and have been using Elementary OS for the last 2 weeks. Everything was working alright until just two days ago when I decided to set the default brightness level ...
0
votes
1answer
50 views

LUKS encryption full disk, how many RAM?

If I encrypt (dm crypt, LUKS) my whole system, how many RAM should I provide ? I've understood that LUKS volume is mounted RAM, ... If my system is 10 Gb, should I have something like RAM 12 Go ?
0
votes
2answers
92 views

Linux LUKS encrypt and cloning machines

I'm working a prototype based on Mint. Mint installed + installed and configured packages. This proprotype is built on a rasp-like computer. I plan : to clone disk on several other rasp-like ...
1
vote
1answer
32 views

install already built Linux environment

I have configured aMint-based environment : openVpn, hostapd, and a bunch of other configured package. This is done on a rasp-like computer (OEM). I planned to clone my disk on other machines. I dont ...
0
votes
0answers
57 views

Encrypt some folder and hide key in Linux

I work on a Debian system (Mint actually). I'd like to encrypt some folders and files, for instance: the one with OpenVPN configuration and keys, and be able to decrypt it on the fly. My problem: ...
0
votes
0answers
75 views

Encryption Linux system after installation

Is it possible to encrypt a Linux system (Mint, Debian based) after installation? For an "on the fly" usage. My system is both : a client (www, ethernet), a local server (wifi). I am working on a ...
1
vote
1answer
79 views

Encrypt Debian-based system

I have a kind-of-raspberries park, all connected via VPN to a single one server. I'd like to encrypt each rasp', in order to avoid intrusions, if one is stolen/thieft. Each rasp' has already a system ...
3
votes
1answer
164 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
2
votes
2answers
324 views

Encrypting directories with gpg [duplicate]

I want to use GPG for local encryption only, and after reading the man file, I'm doing the following in order to encrypt a whole directory: I zip the directory with a password "zip -r -e foo foo", ...
0
votes
1answer
95 views

OpenVPN client config :: why is needed ca.crt?

I configured a VPN (OpenVPN, mode: multiclients-1server), CentOS Server, multiple Rasp's clients. CA.crt is needed by each client, in addition of the client.crt & client.key . I wonder... why ? ...
1
vote
2answers
193 views

OpenVPN : protect your clients key/cert/conf from being stolen?

I have configured an OpenVPN install. Mode: multiclients 1server. Clients are raspberries. I note how easy it is to steal a rasp, and look in HDD to get key+cert+conf. Copy it on your laptop, and ...
0
votes
1answer
603 views

CentOS 7 - while installing i set disk encrypted with password, but on reboot always it asking password

While installing CentOS 7, i put password for disk encrypt. Now while working remotely on that machine and doing reboot it always ask password to be inserted on-site. Is this normal? or there is a ...
1
vote
1answer
3k views

“no matching cipher found” error in `rsync`

I am trying to copy a directory from one system to another with rsync; but it erred. Can you please advise me on what to check? Command: [M root@aMachine ~]# rsync -e "ssh -c blowfish" -v -a /home/...
3
votes
1answer
687 views

cryptsetup: dm-crypt plain mode using keyfile AND passphrase

I feel a keyfile and a passphrase provide different benefits. They can not be obtained in the same way (one you need to physically acquire, the other one you need to know). Thus, I think there is ...
2
votes
1answer
113 views

Backup on a remote server in an encrypted folder

Is there an easy way to backup your home directory on an online server in an encrypted folder? I heard of obnam which should be able to store encrypted with a GPG key somehow. What would be the ...
1
vote
2answers
222 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
-1
votes
1answer
139 views

Encrypt PHP script to a domain (RSA)

I have a php script I want to share with someone but only limit them to be able to use it on one domain. I have found http://phpseclib.sourceforge.net/ - I think I can do this with RSA encryption but ...
2
votes
1answer
2k views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
5
votes
1answer
72 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
1
vote
1answer
735 views

Mounting SMB3 share with encryption fails: mount error(13): Permission denied (Synology)

Everything works fine until I add encryption on my synology, from that point on I only get mount error(13): Permission denied I've tried this command: mount -t cifs //192.168.178.22/Filme /home/...
1
vote
1answer
196 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...
1
vote
0answers
134 views

How do I encrypt (password protect) a PDF without encrypting the metadata?

It seems that the encryption provided by pdftk(1) is the level supported by Acrobat 5 (I added a password to a PDF file using pdftk then opened it in Acrobat Pro 9 and examined the security settings; "...
4
votes
2answers
97 views

Does secure delete files on an encrypted partition make sense?

I have an encrypted partition that I mount with cryptsetup at every boot. Does secure delete (e.g. with srm) a file into this partition make sense? I know that from an external point of view an ...
0
votes
1answer
282 views

crypto kernel module not available on Raspberry pi 2 (linux 3.18.11)

I'm trying to use dm-crypt on my Raspberry Pi 2 with Raspbian (debian) to open a trueCrypt volume, but i get Required kernel crypto interface not available. Ensure you have algif_skcipher kernel ...
3
votes
2answers
235 views

Is there a way to edit a password-protected file without having to retype the password all the time?

I want to encrypt a text file using a password and a way to safely edit that file. The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
4
votes
0answers
230 views

How to use AES hardware encryption of LTO tape drives on Linux?

How to use AES hardware encryption of LTO tape drives on Linux? I expect the LTO AES encryption to be faster than software solutions. A quick benchmark of aespipe on i7 CPU gives an impression on the ...
0
votes
0answers
117 views

What could be the output of command `lsblk -f -r | grep ' /' | grep -v ' /boot'` on encrypted drives?

Suppose we have drives which are encrypted, what could be the output of following command in Debian based (specially Ubuntu OS)? lsblk -f -r | grep ' /' | grep -v ' /boot'
4
votes
2answers
402 views

Debian Wheezy, ejabberd and forward secrecy

After validating of my public XMPP service on xmpp.net, I've got the error: Warning: Server offers no forward-secret ciphers. Grade capped to A-. Is there an easy way to enable these ciphers? As ...
2
votes
1answer
253 views

Cloning a root partition onto a dm-crypt encrypted one

I have Gentoo Linux installed on a 25.93GB/62.43GB partition /dev/sda4. The other partitions on the disk are 150MB /boot on /dev/sda1 and 56,66GB unused space on other two partitions. I am planning ...
2
votes
0answers
294 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
1
vote
5answers
153 views

Prevent encrypted partition from running on other PC

Concise question: Is it possible to somehow bind partition encryption to hardware so it is impossible(very hard) to copy system to another PC and run there? Full story: We have a small embedded PC ...
2
votes
2answers
398 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
2
votes
1answer
131 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
2
votes
2answers
93 views

Encrypted FileSystem in VirtualBox

I'm looking for any information regarding how secure an encrypted Linux file system is when contained in a VirtualBox virtual drive on a Windows host? Specifically I'm looking for answers to the ...
1
vote
1answer
428 views

FreeBSD 10: Disable ZFS full disk encryption

I installed FreeBSD 10.1 and chose to encrypt the ZFS root volume and Swap during install. I'm now realizing that on the remote KVM vserver I'm on the encryption makes rebooting harder and probably ...
0
votes
2answers
241 views

FreeBSD 10 and ZFS: Methods for encrypting files

I'm in the process of setting up a FreeBSD 10 server on a KVM vserver. I'm really new to FreeBSD in general (coming from Debian Linux). I installed the system choosing ZFS with encrypted root volume ...
3
votes
2answers
3k views

How to set password for pdf files?

I need to password protect my PDF file(s), because I am going to send them through email and I want anyone who would view my PDF file(s) to be prompted for a password. How can I add a password to a ...
5
votes
2answers
536 views

Encrypt a single file and read/edit on-the-fly

I have a single text file I want to encrypt. I can easily do so with any common software. But then, I want to be able to click on it, provide a password, and be able to read, edit, and close it. All ...
1
vote
0answers
226 views

fopen problem when mounting ecryptfs filesystem

After an unrecoverable fsck problem the mount of my encrypted /home/me filesystem isn't possible any more. The visible effects are: a) logging in though most of the selectable GUI window managers ...
2
votes
4answers
358 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
6
votes
2answers
181 views

How do I layer compression on top of encryption on top of BtrFS, per-file?

BtrFS should support this really, but it doesn't. So ECryptFS looks like it will fill the gap. The only thing is, how would I layer compression on top of this? Reasons for compression on top of ...
1
vote
2answers
981 views

Non-interactive ecryptfs directory encrypt/decrypt

Can I decrypt an ecryptfs Private directory from a script? My basic use case for this type of activity is for doing remote backups. Imagine you have a machine (call it privatebox) with an encrypted ...
10
votes
4answers
190 views

Can swapping be disabled on the application level?

I'm currently using thunderbird with gnupg to read encrypted emails. If I understand the swapping behavior correctly, the memory pages containing the decrypted emails might be swapped out and leave ...
0
votes
1answer
167 views

Mounting Encfs Container

I have an encfs container in my home directory. I had been using Cryptkeeper to open the container, but since updating to Linux Mint 17 from 16 it's not working any more. Gnome Encfs manager doesn't ...
1
vote
3answers
886 views

cannot change my login screen background

I cannot change my login screen background to the desktop background in my elementary os which is based on ubuntu. I have decrypted my home folder according to this link: http://www.howtogeek.com/...
0
votes
2answers
2k views

Can I decrypt EncFS files without the .encfs6.xml?

This actually happened on Mac OS X, but I believe I can get the answer here rather than on http://apple.stackexchange.com I have a directory encrypted with encfs. I accidentally deleted .encfs6.xml ...
1
vote
0answers
144 views

Why doesn't Linux IPSec implementation support fragmentation before encryption?

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...