encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

2
votes
1answer
597 views

Fast encryption for home directory with Scientific Linux (ala' RedHat)

I have a T61 with C2D T7300 CPU/4 GByte RAM. I has SL 6.3 on it, and I ticked the encrypt VG during install. If I start a "normal" windows xp on it, its ~slow.. so.. I need a little performance boost ...
12
votes
3answers
10k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
3
votes
0answers
321 views

How to set up an encrypted directory to be mounted only during samba access?

(This is not about restricting client access, for which ext3 permissions do the trick) I'd like to encrypt the data on my NAS drive (Buffalo LinkStation Pro with SSH access enabled, if that matters) ...
1
vote
1answer
391 views

Which filesystem to use when a samba share should allow for NTFS encryption?

I'm using a NAS (Buffalo LinkStation Pro with SSH access, if that matters) which runs Linux (2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux, with smbd --version = Version ...
1
vote
2answers
128 views

Encrypt IP payload + URL

I need to encrypt IP payload + request URL so that my ISP can't understand my requests. Do you know any project such as zebedee except VPNs? Tor doesn't work with my ISP, because SSL was banned, so ...
2
votes
1answer
266 views

How do I specify the keyserver with GPG?

Tutorials online say to use the option --keyserver, like this: gpg --send-keys <keyID> --keyserver 'hkp://keyserver.ubuntu.com:11371' but gpg doesn't recognise the option --keyserver. What ...
3
votes
1answer
214 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
233 views

Encrypt boot file system

I just tried to set up Debian in a VM (just testing, before installing it on a real system). I have set up 4 drives in total. 2 drives that simulate pen drives, on which I want to install the boot ...
2
votes
1answer
461 views

Is it *really* possible to directly steal a private key if it uses no passphrase?

I've read in various places, such as in this question that using an ssh key pair without a passphrase allows attackers to steal your private key if they gain access to your account. I assumed that by ...
4
votes
1answer
1k views

How to decrypt single EncFS encrypted files?

Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created? With a little help from google I found ...
6
votes
3answers
416 views

E-Mail client in linux which allows to search encrypted mail

Is there an E-Mail client for linux which allows to search old gpg encrypted mails (i.e. find all mails which contain a particular keyword in the body, including the encrypted ones).
5
votes
1answer
677 views

How to edit a .gpg file with vi?

So I created a gpg encrypted file with password: gpg -c passwords.txt.gpg how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted ...
-1
votes
3answers
850 views

How to create an encrypted container (dynamically expandable) on OpenBSD

On OpenBSD, how/with what I can create an encrypted container that can later be dynamically expanded? Can I do it with GPG? (password protection is enough) So, if I open this container and put files ...
6
votes
1answer
2k views

LVM + LUKS + SSD + Gentoo — making it all work together

I'm finding a lot of conflicting information out there, and as of yet haven't found anyone trying to pull together all of the components that I'm trying to do, so I'm hoping someone who understands ...
4
votes
4answers
2k views

Recovering overwritten LVM metadata

Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone). Now I wasn't able to fix it and didn't have a lot of time, so I ...
4
votes
4answers
1k views

Best way to make encrypted backups while preserving permissions to a windows file system

For my home network I wanted to buy a NAS which supports disk encryption and NFS since it is important for me that the backup is encrypted but also that it preserves owner, groups and permissions ...
3
votes
3answers
614 views

Encrypt a password the same way mysql does

I've created a user ... but forgotten the password mysql> create user 'blayo'@'%' identified by 'right'; Which Linux command line tool can encrypt the password the same way mysql 5.5 does ? ...
8
votes
3answers
2k views

Encrypt OfflineIMAP Password

I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process). From the documentation, it seems the only way to ...
1
vote
2answers
747 views

Prevent lots of writes on Ubuntu Server running from flash drive

I would like to have a setting, where Ubuntu Server is installed and booting from a flash drive (SanDisk Cruzer Fit 8GB), with two HDDs running in RAID1 and 4 drives running with RAID0 (only 1 drive ...
4
votes
2answers
303 views

Password protecting a system file? (e.g. /etc/resolv.conf)

I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the ...
1
vote
0answers
261 views

Multiple distros in VM with encrypted disk

I want to have a GNU/Linux setup on my computer, where I could use different distributions and isolated environments inside an operating system-level virtual machine. Then I also want to share my ...
6
votes
2answers
670 views

Optimize performance for encrypted disk

Recently I tried to copy 200GB to a 1TB external / USB2 / encrypted disk and it took 36 hours. The same copy when the disk was not encrypted took no longer than 1 hour. I am using dm-crypt (LUKS) ...
3
votes
1answer
408 views

Followed SSD-optimization advice, now root partition won't mount rw

Tonight I decided I wanted to tweak the configuration of my Debian install on my netbook (Ideapad S10-2) to work better with the SSD I put in it. I have done this before and never had any issues but ...
3
votes
1answer
264 views

How to disable timeout of password prompt for partition decryption during boot?

I have a computer running OpenSUSE 12.1, 64-bit, default install. How it works currently: I turn on the computer It goes through the boot process At some point during boot, I am asked for password ...
6
votes
2answers
2k views

Which partitions should I encrypt?

My laptop is currently running Windows and Fedora, but I'm planning to install Arch Linux as my sole OS soon. This current setup is using whole disk encryption through TrueCrypt, but I'm unsure if it ...
1
vote
2answers
196 views

File encryption and decryption on Linux using ucrypt

A few years back, I was using the ucrypt utility on CentOS 5. Now I am using Fedora 11 and need ucrypt for file encryption and decryption, but I don't have a backup of the old system. Where can I find ...
2
votes
0answers
165 views

How do create an encrypted system with multiple Linux distributions?

A few weeks ago I created a completely encrypted system on a notebook and must say I like the idea. It's a little bit annoying to enter the password on every boot, but it's nice to know even if I ...
3
votes
1answer
5k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
6
votes
2answers
544 views

How does pre-boot authentication with disk encryption work technically?

I'm looking for a solution to fully encrypt my dual-boot SSD drive (it's still new and empty, and I want to set up encryption before I put anything on it). While there's a lot of chaos on the web ...
1
vote
1answer
814 views

AES-NI accelerated ZFS v31 encryption in Solaris 11

I'm not quite sure if this is the right place to ask this, if not, feel free to migrate it to wherever it fits in. I'm testing the encryption feature in ZFS v31 in a Solaris 11.11.11 VM under ESXi ...
3
votes
1answer
84 views

Encryption of home directory for securing data after harddisk corruption

Always when I install Linux OS (e.g. Ubuntu), there is a possibility to encrypt the home directory. I was asking myself why is this useful. Is it good in the case when my harddrive is corrupted and I ...
3
votes
2answers
730 views

On Mac OS X, how to encrypt a small folder and copy that to Google Drive or DropBox?

On Mac OS X, right now I use the following to back up a small project folder to a USB Flash drive: alias a='alias' a dateseq='date "+%Y-%m-%d %H:%M:%S"' a backup_proj='cp -a ~/code/MyProj ...
0
votes
1answer
731 views

What is the default encryption type of the ssh-keygen?

When generating private/public keys with ssh-keygen what types of keys will it generate if I wont pass -t option followed with the encryption type like rsa?
2
votes
3answers
642 views

Is there a good way to encrypt and store a mailbox while still being able to quickly access and search it?

I am wondering if it is possible to : Store a mailbox in a way that the system administrator (ie: root) cannot see it User(s) with the valid credentials would be able to see it AND be able to search ...
7
votes
3answers
894 views

Any reason for encrypted /?

I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
4
votes
2answers
536 views

Are there more advanced LUKS key schemes, e.g. 2 of 3 keys needed?

It seems like the two main LUKS encryption options are: USB keyfile (see http://superuser.com/questions/149578/how-can-i-use-a-keyfile-on-a-removable-usb-drive-for-my-encrypted-root-in-debian) ...
1
vote
1answer
3k views

Install Backtrack 5 r2 into running LUKS setup installed with ubuntu

One Harddisk (sda) Two Partions. With a working ubuntu running. 1) /boot 2) LVM with this virtual volumes/partions/ or whatever they are called inside: Swap Ubuntu Home Prepared for Backtrack Of ...
2
votes
1answer
226 views

dm-crypt and LUKS password rotation

How do you protect the master key, and distribute multiple passwords for admin access? Is there a 3rd party user management tool or is this native?
3
votes
1answer
2k views

Uninstall the Encrypted LVM function to remove the prompted password entry during Ubuntu Boot

When I installed Ubuntu 11.04 and I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt the LVM. ...
4
votes
1answer
2k views

Linux: LUKS and multiple hard drives

I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM). I think the basic ...
5
votes
3answers
3k views

FreeBSD + ZFS + Encryption ? Alternatives ? Suggestions?

I would like to create a dedicated physical server which will work as a NAS & fileserver inside my LAN (as well as through VPN). However I need to fully encrypt the drives (both the system ones ...
4
votes
2answers
378 views

How to mount an IronKey in OpenBSD?

Being that it's proprietary, maybe this isn't possible but I was wondering if anybody was successful at mounting one of these in OpenBSD. I mounted the two partitions the USB drive creates which are ...
2
votes
2answers
811 views

How to understand the filesystem concepts used by encfs?

I do not hold a deep understanding of computer science concepts but would like to learn more about how the utility encfs works. I have a few question regarding the concept of filesystem in regards to ...
8
votes
3answers
4k views

Simplest way to password protect a directory and its contents without having to create new files?

I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
3
votes
2answers
547 views

Emacs auto encryption and gpg

Emacs encrypts/decrypts .gpg files automatically. But recently I have lost the ability to decrypt files encrypted by the Linux gpg tool and vice versa. I use: passphrase symmetric encryption gnupg ...
10
votes
3answers
6k views

Encrypting file only with SSH -priv-key?

Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
4
votes
2answers
1k views

RHEL6 LUKS with TPM support?

I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide ...
4
votes
3answers
765 views

I want to use a bluetooth keyboard during initram

I use encryption on my hard drive. To boot I need to type a password during initram to decrypt the root partition. I'm running Archlinux on a tablet PC without physical keyboard (only Bluetooth). For ...
7
votes
2answers
135 views

Signing/Checksumming the kernel to prevent/detect manipulation

All my partitions are encrypted (/ and /home), but the /boot partition has to remain unencrypted and is open for manipulation. I was thinking about hashing the kernel on bootup and checking the result ...
2
votes
1answer
1k views

Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?

I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...