encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

1
vote
0answers
65 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
3
votes
0answers
175 views

Add disks to encrypted LVM partition

If I increase my current encrypted (dm-crypt)LVM partition by adding another disk to it, is the new disk also encrypted or do I need to setup dm-crypt on it as well?
0
votes
1answer
415 views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ? Quite a noob question, I need to be sure. ...
1
vote
1answer
355 views

Encrypt existing disk with LUKS?

I have get informed on how prepare a LUKS system & partitions, giving a key/passphrase, etc. But for a new fresh install of linux. How to encrypt an already installed/configured linux system ? ...
1
vote
1answer
283 views

How to deallocate extents of physical volume? lvm, encrypted

I just install Debian 8.1. I allocated almost all disk 300 GiB to encrypted partition and a little bit for boot. I want to make smaller 50GiB encrypted physical volume and install different xen OS to ...
0
votes
1answer
70 views

How do I test or verify ZFS encryption is working?

How do I test or verify that the ZFS encryption is working, especially when running as a Samba share? Like if I create a ZFS pool with encryption=on, how can I tell whether a file is being properly ...
1
vote
1answer
311 views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen /...
1
vote
1answer
413 views

auto mount encrypted USB

I've actually just started dabbling in the raspeberry pi but no stranger to hacking around these controllers. Having said that, my knowledge is lacking in a few areas. A little about what I want to ...
0
votes
0answers
27 views

Strategy about cloning crypted (LUKS) systems

For a while, I ve being discussing here how to manage to clone one encrypted system on others. My plan is to build a Mint system, then to encrypt it, then to clone it. Here is my process for ...
1
vote
1answer
199 views

How to decrypt and copy home folder from laptop to external hard drive through live usb GUI?

I am a fairly new user to Linux and have been using Elementary OS for the last 2 weeks. Everything was working alright until just two days ago when I decided to set the default brightness level ...
0
votes
1answer
52 views

LUKS encryption full disk, how many RAM?

If I encrypt (dm crypt, LUKS) my whole system, how many RAM should I provide ? I've understood that LUKS volume is mounted RAM, ... If my system is 10 Gb, should I have something like RAM 12 Go ?
0
votes
2answers
95 views

Linux LUKS encrypt and cloning machines

I'm working a prototype based on Mint. Mint installed + installed and configured packages. This proprotype is built on a rasp-like computer. I plan : to clone disk on several other rasp-like ...
1
vote
1answer
32 views

install already built Linux environment

I have configured aMint-based environment : openVpn, hostapd, and a bunch of other configured package. This is done on a rasp-like computer (OEM). I planned to clone my disk on other machines. I dont ...
0
votes
0answers
58 views

Encrypt some folder and hide key in Linux

I work on a Debian system (Mint actually). I'd like to encrypt some folders and files, for instance: the one with OpenVPN configuration and keys, and be able to decrypt it on the fly. My problem: ...
0
votes
0answers
78 views

Encryption Linux system after installation

Is it possible to encrypt a Linux system (Mint, Debian based) after installation? For an "on the fly" usage. My system is both : a client (www, ethernet), a local server (wifi). I am working on a ...
1
vote
1answer
87 views

Encrypt Debian-based system

I have a kind-of-raspberries park, all connected via VPN to a single one server. I'd like to encrypt each rasp', in order to avoid intrusions, if one is stolen/thieft. Each rasp' has already a system ...
3
votes
1answer
167 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
2
votes
2answers
349 views

Encrypting directories with gpg [duplicate]

I want to use GPG for local encryption only, and after reading the man file, I'm doing the following in order to encrypt a whole directory: I zip the directory with a password "zip -r -e foo foo", ...
0
votes
1answer
95 views

OpenVPN client config :: why is needed ca.crt?

I configured a VPN (OpenVPN, mode: multiclients-1server), CentOS Server, multiple Rasp's clients. CA.crt is needed by each client, in addition of the client.crt & client.key . I wonder... why ? ...
1
vote
2answers
206 views

OpenVPN : protect your clients key/cert/conf from being stolen?

I have configured an OpenVPN install. Mode: multiclients 1server. Clients are raspberries. I note how easy it is to steal a rasp, and look in HDD to get key+cert+conf. Copy it on your laptop, and ...
0
votes
1answer
669 views

CentOS 7 - while installing i set disk encrypted with password, but on reboot always it asking password

While installing CentOS 7, i put password for disk encrypt. Now while working remotely on that machine and doing reboot it always ask password to be inserted on-site. Is this normal? or there is a ...
1
vote
1answer
4k views

“no matching cipher found” error in `rsync`

I am trying to copy a directory from one system to another with rsync; but it erred. Can you please advise me on what to check? Command: [M root@aMachine ~]# rsync -e "ssh -c blowfish" -v -a /home/...
4
votes
1answer
729 views

cryptsetup: dm-crypt plain mode using keyfile AND passphrase

I feel a keyfile and a passphrase provide different benefits. They can not be obtained in the same way (one you need to physically acquire, the other one you need to know). Thus, I think there is ...
2
votes
1answer
115 views

Backup on a remote server in an encrypted folder

Is there an easy way to backup your home directory on an online server in an encrypted folder? I heard of obnam which should be able to store encrypted with a GPG key somehow. What would be the ...
1
vote
2answers
236 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
-1
votes
1answer
144 views

Encrypt PHP script to a domain (RSA)

I have a php script I want to share with someone but only limit them to be able to use it on one domain. I have found http://phpseclib.sourceforge.net/ - I think I can do this with RSA encryption but ...
2
votes
1answer
3k views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
5
votes
1answer
80 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
1
vote
1answer
800 views

Mounting SMB3 share with encryption fails: mount error(13): Permission denied (Synology)

Everything works fine until I add encryption on my synology, from that point on I only get mount error(13): Permission denied I've tried this command: mount -t cifs //192.168.178.22/Filme /home/...
1
vote
1answer
199 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...
1
vote
0answers
135 views

How do I encrypt (password protect) a PDF without encrypting the metadata?

It seems that the encryption provided by pdftk(1) is the level supported by Acrobat 5 (I added a password to a PDF file using pdftk then opened it in Acrobat Pro 9 and examined the security settings; "...
4
votes
2answers
99 views

Does secure delete files on an encrypted partition make sense?

I have an encrypted partition that I mount with cryptsetup at every boot. Does secure delete (e.g. with srm) a file into this partition make sense? I know that from an external point of view an ...
0
votes
1answer
286 views

crypto kernel module not available on Raspberry pi 2 (linux 3.18.11)

I'm trying to use dm-crypt on my Raspberry Pi 2 with Raspbian (debian) to open a trueCrypt volume, but i get Required kernel crypto interface not available. Ensure you have algif_skcipher kernel ...
3
votes
2answers
253 views

Is there a way to edit a password-protected file without having to retype the password all the time?

I want to encrypt a text file using a password and a way to safely edit that file. The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
4
votes
0answers
241 views

How to use AES hardware encryption of LTO tape drives on Linux?

How to use AES hardware encryption of LTO tape drives on Linux? I expect the LTO AES encryption to be faster than software solutions. A quick benchmark of aespipe on i7 CPU gives an impression on the ...
0
votes
0answers
121 views

What could be the output of command `lsblk -f -r | grep ' /' | grep -v ' /boot'` on encrypted drives?

Suppose we have drives which are encrypted, what could be the output of following command in Debian based (specially Ubuntu OS)? lsblk -f -r | grep ' /' | grep -v ' /boot'
4
votes
2answers
405 views

Debian Wheezy, ejabberd and forward secrecy

After validating of my public XMPP service on xmpp.net, I've got the error: Warning: Server offers no forward-secret ciphers. Grade capped to A-. Is there an easy way to enable these ciphers? As ...
2
votes
1answer
256 views

Cloning a root partition onto a dm-crypt encrypted one

I have Gentoo Linux installed on a 25.93GB/62.43GB partition /dev/sda4. The other partitions on the disk are 150MB /boot on /dev/sda1 and 56,66GB unused space on other two partitions. I am planning ...
2
votes
0answers
307 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
1
vote
5answers
157 views

Prevent encrypted partition from running on other PC

Concise question: Is it possible to somehow bind partition encryption to hardware so it is impossible(very hard) to copy system to another PC and run there? Full story: We have a small embedded PC ...
2
votes
2answers
431 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
2
votes
1answer
137 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
2
votes
2answers
93 views

Encrypted FileSystem in VirtualBox

I'm looking for any information regarding how secure an encrypted Linux file system is when contained in a VirtualBox virtual drive on a Windows host? Specifically I'm looking for answers to the ...
1
vote
1answer
443 views

FreeBSD 10: Disable ZFS full disk encryption

I installed FreeBSD 10.1 and chose to encrypt the ZFS root volume and Swap during install. I'm now realizing that on the remote KVM vserver I'm on the encryption makes rebooting harder and probably ...
0
votes
2answers
255 views

FreeBSD 10 and ZFS: Methods for encrypting files

I'm in the process of setting up a FreeBSD 10 server on a KVM vserver. I'm really new to FreeBSD in general (coming from Debian Linux). I installed the system choosing ZFS with encrypted root volume ...
3
votes
2answers
3k views

How to set password for pdf files?

I need to password protect my PDF file(s), because I am going to send them through email and I want anyone who would view my PDF file(s) to be prompted for a password. How can I add a password to a ...
5
votes
2answers
560 views

Encrypt a single file and read/edit on-the-fly

I have a single text file I want to encrypt. I can easily do so with any common software. But then, I want to be able to click on it, provide a password, and be able to read, edit, and close it. All ...
1
vote
0answers
241 views

fopen problem when mounting ecryptfs filesystem

After an unrecoverable fsck problem the mount of my encrypted /home/me filesystem isn't possible any more. The visible effects are: a) logging in though most of the selectable GUI window managers ...
2
votes
4answers
370 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
6
votes
2answers
191 views

How do I layer compression on top of encryption on top of BtrFS, per-file?

BtrFS should support this really, but it doesn't. So ECryptFS looks like it will fill the gap. The only thing is, how would I layer compression on top of this? Reasons for compression on top of ...