encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

3
votes
1answer
434 views

Followed SSD-optimization advice, now root partition won't mount rw

Tonight I decided I wanted to tweak the configuration of my Debian install on my netbook (Ideapad S10-2) to work better with the SSD I put in it. I have done this before and never had any issues but ...
3
votes
1answer
284 views

How to disable timeout of password prompt for partition decryption during boot?

I have a computer running OpenSUSE 12.1, 64-bit, default install. How it works currently: I turn on the computer It goes through the boot process At some point during boot, I am asked for password ...
6
votes
2answers
2k views

Which partitions should I encrypt?

My laptop is currently running Windows and Fedora, but I'm planning to install Arch Linux as my sole OS soon. This current setup is using whole disk encryption through TrueCrypt, but I'm unsure if it ...
1
vote
2answers
230 views

File encryption and decryption on Linux using ucrypt

A few years back, I was using the ucrypt utility on CentOS 5. Now I am using Fedora 11 and need ucrypt for file encryption and decryption, but I don't have a backup of the old system. Where can I find ...
2
votes
0answers
181 views

How do create an encrypted system with multiple Linux distributions?

A few weeks ago I created a completely encrypted system on a notebook and must say I like the idea. It's a little bit annoying to enter the password on every boot, but it's nice to know even if I ...
3
votes
1answer
6k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
6
votes
2answers
603 views

How does pre-boot authentication with disk encryption work technically?

I'm looking for a solution to fully encrypt my dual-boot SSD drive (it's still new and empty, and I want to set up encryption before I put anything on it). While there's a lot of chaos on the web ...
1
vote
1answer
859 views

AES-NI accelerated ZFS v31 encryption in Solaris 11

I'm not quite sure if this is the right place to ask this, if not, feel free to migrate it to wherever it fits in. I'm testing the encryption feature in ZFS v31 in a Solaris 11.11.11 VM under ESXi ...
3
votes
1answer
86 views

Encryption of home directory for securing data after harddisk corruption

Always when I install Linux OS (e.g. Ubuntu), there is a possibility to encrypt the home directory. I was asking myself why is this useful. Is it good in the case when my harddrive is corrupted and I ...
4
votes
2answers
847 views

On Mac OS X, how to encrypt a small folder and copy that to Google Drive or DropBox?

On Mac OS X, right now I use the following to back up a small project folder to a USB Flash drive: alias a='alias' a dateseq='date "+%Y-%m-%d %H:%M:%S"' a backup_proj='cp -a ~/code/MyProj ...
0
votes
1answer
858 views

What is the default encryption type of the ssh-keygen?

When generating private/public keys with ssh-keygen what types of keys will it generate if I wont pass -t option followed with the encryption type like rsa?
2
votes
3answers
704 views

Is there a good way to encrypt and store a mailbox while still being able to quickly access and search it?

I am wondering if it is possible to : Store a mailbox in a way that the system administrator (ie: root) cannot see it User(s) with the valid credentials would be able to see it AND be able to search ...
7
votes
3answers
976 views

Any reason for encrypted /?

I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
4
votes
2answers
624 views

Are there more advanced LUKS key schemes, e.g. 2 of 3 keys needed?

It seems like the two main LUKS encryption options are: USB keyfile (see http://superuser.com/questions/149578/how-can-i-use-a-keyfile-on-a-removable-usb-drive-for-my-encrypted-root-in-debian) ...
1
vote
1answer
3k views

Install Backtrack 5 r2 into running LUKS setup installed with ubuntu

One Harddisk (sda) Two Partions. With a working ubuntu running. 1) /boot 2) LVM with this virtual volumes/partions/ or whatever they are called inside: Swap Ubuntu Home Prepared for Backtrack Of ...
2
votes
1answer
236 views

dm-crypt and LUKS password rotation

How do you protect the master key, and distribute multiple passwords for admin access? Is there a 3rd party user management tool or is this native?
3
votes
1answer
3k views

Uninstall the Encrypted LVM function to remove the prompted password entry during Ubuntu Boot

When I installed Ubuntu 11.04 and I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt the LVM. ...
5
votes
1answer
2k views

Linux: LUKS and multiple hard drives

I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM). I think the basic ...
6
votes
4answers
4k views

FreeBSD + ZFS + Encryption ? Alternatives ? Suggestions?

I would like to create a dedicated physical server which will work as a NAS & fileserver inside my LAN (as well as through VPN). However I need to fully encrypt the drives (both the system ones ...
4
votes
2answers
423 views

How to mount an IronKey in OpenBSD?

Being that it's proprietary, maybe this isn't possible but I was wondering if anybody was successful at mounting one of these in OpenBSD. I mounted the two partitions the USB drive creates which are ...
2
votes
2answers
884 views

How to understand the filesystem concepts used by encfs?

I do not hold a deep understanding of computer science concepts but would like to learn more about how the utility encfs works. I have a few question regarding the concept of filesystem in regards to ...
9
votes
3answers
4k views

Simplest way to password protect a directory and its contents without having to create new files?

I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
3
votes
2answers
616 views

Emacs auto encryption and gpg

Emacs encrypts/decrypts .gpg files automatically. But recently I have lost the ability to decrypt files encrypted by the Linux gpg tool and vice versa. I use: passphrase symmetric encryption gnupg ...
12
votes
3answers
7k views

Encrypting file only with SSH -priv-key?

Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
4
votes
2answers
1k views

RHEL6 LUKS with TPM support?

I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide ...
4
votes
3answers
921 views

I want to use a bluetooth keyboard during initram

I use encryption on my hard drive. To boot I need to type a password during initram to decrypt the root partition. I'm running Archlinux on a tablet PC without physical keyboard (only Bluetooth). For ...
7
votes
2answers
137 views

Signing/Checksumming the kernel to prevent/detect manipulation

All my partitions are encrypted (/ and /home), but the /boot partition has to remain unencrypted and is open for manipulation. I was thinking about hashing the kernel on bootup and checking the result ...
2
votes
1answer
2k views

Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?

I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...
0
votes
2answers
1k views

Grub MD5 Crypt algorithm

How does Grub's MD5 algorithm work? When you run grub-md5-crypt and enter the same password each time you get different results. Generally md5 is supposed to always return the same hash, so why does ...
1
vote
0answers
166 views

Implementation of eSTREAM ciphers available?

Is there a usable implementation of the eSTREAM stream cyphers available for Linux? I was thinking to use that for encrypting data stored on tape drives, using it with tar. Now, there are some basic ...
4
votes
2answers
245 views

LUKS encryption for tape media?

I was wondering, if it was possible to use LUKS encryption with tape drives, QIC for instance. I'm using LUKS for USB drives and internal disks, even DVDs and CDROMs. But I was thinking of maybe ...
0
votes
2answers
638 views

Is MSN chat encrypted or not? If not how can I make it encrypted?

How can I force pidgin to use only encrypted connections when using MSN chat? I'm on Ubuntu 10.04
7
votes
4answers
2k views

Receive Pop/IMAP email and then forward as encrypted to gmail

Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the ...
5
votes
1answer
690 views

How to use keyfiles,for ZFS whole disk encryption?

Does anyone have a working implementation using keyfiles, preferably on SD Card, instead of a prompt for ZFS? I know how to do this with linux LVM/LUKS. In my opinion the FreeBSD full disk ...
4
votes
1answer
3k views

How to check if my wireless connection uses AES or TKIP from a terminal?

I have a wireless router that has settings to use AES, TKIP or AES+TKIP encryption for wireless connections. My Linux-based device does not like AES (it drops out from time to time), my girlfriend's ...
4
votes
1answer
666 views

AES-NI not passed to guest in Virtualbox

I'm trying to use encryption inside a virtual machine. The problem is that the AES-NI doesn't seem to be passed to the guest virtual machine. I have Vt-x enabled. This is my host cpuinfo: processor ...
2
votes
1answer
509 views

How can I encrypt a device with loop-aes under Linux?

Using Fedora/Ubuntu, how can I do it?
1
vote
1answer
330 views

What encryption to use for good performance?

I will install Ubuntu 11.04 to an encrypted VolumeGroup with the installer: http://i.stack.imgur.com/Skil9.png AES Blowfish Serpent Which one is the fastest from these 3? Or Using AES with only a ...
0
votes
0answers
184 views

Is it possible to login via ssh to unlock LUKS drives? [duplicate]

Possible Duplicate: SSH to decrypt encrypted LVM during headless server boot? I have a large number of Ubuntu servers in co-location that I would like to use LUKS encrypted drives on. ...
0
votes
2answers
425 views

Is the VG encrypted with dm_crypt OR luks? How to find out?

A system is installed with an encrypted VG. How can I find out if they used dm_crypt or luks? It's running Fedora 14, so I think it's one of those. Or are they the same thing?
-1
votes
3answers
105 views

Does PGPDesktop supports OpenBSD or e.g. Fedora?

Does PGPDesktop support OpenBSD or e.g. Fedora, or can I only encrypt my whole hard drive when I use Windows?
4
votes
1answer
990 views

Use aes-ni in Debian

I am considering building a small home server. I'd like to encrypt some folders on this server, therefore using the instruction set aes-ni which is supported by newer (mostly Intel) chips would be ...
4
votes
3answers
792 views

slow media - disk cache tuning?

Is there any way to make the system more consistent when using LUKS? (or slow storage in general) as it is everything is snappy until the write buffer is full, then everything grinds to a halt as the ...
3
votes
1answer
1k views

Full disc encryption with GRUB2

Does anyone know of a good Howto on how to fully encrypt a HDD (even the /boot!) with GRUB2? Is it possible using fedora 14 or ubuntu 10.04?
4
votes
2answers
971 views

Migration from loop-aes to cryptsetup

I've upgraded my linux installation to kernel 2.6.38-2 (Debian testing). With the new kernel, loop-aes does not compile, so I cannot mount my encrypted volumes. I heared that it is possible to use ...
8
votes
1answer
336 views

Encrypted Booting

I want to boot the Linux from the /boot partition, and also want to encrypt this /boot partition. [ AFAIK, Grub is unable to find the kernel and initrd from an truecrypted partition or cryptsetup ...
1
vote
4answers
1k views

How to install Fedora&Ubuntu with encrypted VG's on one disk?

I installed Fedora 14 first, then Ubuntu 10.04. I installed them using dm_crypt/aes256/lvm, so I used encrypted VolumeGroups. At the end of the Ubuntu install it said it cannot install GRUB, so I had ...
2
votes
1answer
112 views

Is it safe to leave a enc folder mounted?

I was looking at this and ecryptfs seems cool. I'd like to use it on my server to encrypt git pushes. I dont want to ssh in everytime to mount/unmount the encrypted folder. However once in a while ...
2
votes
1answer
806 views

Does OpenBSD use bcrypt by default?

http://codahale.com/how-to-safely-store-a-password/ with what does OpenBSD store the password by default? They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
13
votes
3answers
6k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...