Questions tagged [encryption]
encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
873
questions
5
votes
1
answer
5k
views
cryptsetup: dm-crypt plain mode using keyfile AND passphrase
I feel a keyfile and a passphrase provide different benefits. They can not be obtained in the same way (one you need to physically acquire, the other one you need to know). Thus, I think there is ...
- 1,005
5
votes
1
answer
14k
views
Uninstall the Encrypted LVM function to remove the prompted password entry during Ubuntu Boot
When I installed Ubuntu 11.04 and I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt the LVM.
Now,...
- 1,033
5
votes
2
answers
7k
views
gpg cannot unlock passphrase-less key: "gpg: public key decryption failed: No passphrase given"
I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
- 141
5
votes
3
answers
2k
views
How can I encrypt a folder in linux using only the command line?
I need to encrypt a folder with documents (about 560kb if that makes any difference) and I was wondering whether it was possible to accomplish that using the command line?
I am searching for ...
- 153
5
votes
1
answer
744
views
Is there an unencrypted but signed filesystems?
I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed.
I suspect the answer ...
- 253
5
votes
2
answers
4k
views
Encrypt a single file and read/edit on-the-fly
I have a single text file I want to encrypt.
I can easily do so with any common software. But then, I want to be able to click on it, provide a password, and be able to read, edit, and close it. All ...
- 818
5
votes
3
answers
6k
views
Creating a GnuPG keyring for apache
Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...
- 153
5
votes
3
answers
5k
views
How much storage overhead comes along with cryptsetup and ext4?
I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
- 188
5
votes
1
answer
8k
views
Booting encrypted root partion fails after system update
I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
- 105
5
votes
1
answer
8k
views
How can I disable VNC encryption in default/built-in "Screen Sharing" on Fedora 31 Desktop?
I cannot connect to my Fedora 31 Workstation GUI via "Screen Sharing" from any other (non-Linux) machine. I am almost certain this is due to the encryption that the VNC server for "...
- 153
5
votes
1
answer
23k
views
Exporting public keys using gpg
In this web page GNU, it says that exporting public key using the command below will generate a public key without the secret key.
gpg --armor --export [email protected] > mykey.asc
If person B will ...
- 1,161
5
votes
2
answers
1k
views
Is there a way to edit a password-protected file without having to retype the password all the time?
I want to encrypt a text file using a password and a way to safely edit that file.
The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
- 5,777
5
votes
2
answers
2k
views
How can I store an encrypted rdesktop password for easier sign-in?
I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc:
alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K'
So I ...
5
votes
1
answer
3k
views
How to set laptop screen brightness just after boot with full disk encryption
my girlfriend bought Lenovo Essential G500 i5-3230 and I installed Linux Mint 16 on it with full disk encryption. It is standard installation with encryption using dmcrypt and LUKS. But there is a ...
- 569
5
votes
2
answers
979
views
QNAP eCryptFS Filesystem Broken Permissions
Following an issue with my QNAP device I've had to do a whole load of manual recovery of data and only getting at my encrypted data remains.
It seems that QNAP use eCryptFS to do this. I've managed ...
- 1,121
5
votes
1
answer
20k
views
gpg: "secret key not available" when sec & pub key are in keyring
I received an file encrypted with the public key I generated but I can't get it to decrypt.
Steps:
gpg --gen-key default options
gpg --export -a <email> > pub.key
sent the pub.key
received ...
- 53
5
votes
2
answers
3k
views
Is there any shared filesystem based on public key authentication?
I normally use NFS, however I am not so comfortable with the security as basically a root user can just change his UID to an arbitrarily one in order to obtain access to a shared folder.
Moreover, ...
- 265
5
votes
1
answer
3k
views
Automatically mount encrypted home folder on login
I'm looking into encrypting my home folder with Truecrypt, and mounting it after I've logged in, which should be pretty straightforward. However, it occurred to me that it should be theoretically ...
- 93.2k
5
votes
1
answer
2k
views
How do I automatically import a non-root encrypted ZFS pool on boot-up?
I’m running an updated version of Arch Linux with the stock kernel, version 4.9.6, and ZoL version 0.7.0, and I want to import an encrypted non-root pool on boot. The pool is a raid 1 mirror.
The ...
- 719
5
votes
2
answers
1k
views
Verify that partition is encrypted
I just installed Debian and as far as I can remember I encrypted my home-partition using LVM. During the boot process I haven't been asked to enter the password.
Is there any way to check whether ...
- 302
5
votes
1
answer
6k
views
How to decrypt single EncFS encrypted files?
Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created?
With a little help from google I found ...
- 121
5
votes
0
answers
309
views
dm-crypt: Try multiple possible cryptkey entries
I'm using dm-crypt (LUKS) on my Arch Linux machine to encrypt my root partition.
I added the cryptkey entry to the kernel parameters in the bootloader entry to automatically decrypt my device if a ...
- 51
5
votes
0
answers
3k
views
Password for full disk encryption not accepted on boot
I'm dual booting Windows 10 and Ubuntu 16.04. My Ubuntu partition is encrypted, and I have a separate boot partition.
A Windows update wiped out GRUB, so I used boot-repair to reinstall it. I got a ...
- 51
5
votes
0
answers
3k
views
Cryptsetup hanging after passphrase entered
I am currently looking to recover some data for a friend from an internal HDD removed from a laptop that they had encrypted using LUKS. They can't really tell me much more else as somebody else ...
- 151
5
votes
1
answer
312
views
Encrypt External HardDrive that contain Data
Is there an easy way to encrypt my 2To hard-drive that is completely full, without having to buy another one format / encrypt the drive, and then finally transfer all the data over ?
- 181
5
votes
0
answers
2k
views
LVM Encrypted Partition without Partition Table
I have the following Problem. My Laptop is fully encrypted with LVM I know the Passphrase, but the partition table is broken. I booted from an USB Stick in this Case sdb1. Is there any hope to get /...
- 173
5
votes
2
answers
2k
views
How to lock a directory?
I want to block any kind of access to a certain directory unless a password is provided. It could be my root or account password.
The directory is residing on an NTFS partition, and this method needs ...
- 3,884
4
votes
2
answers
913
views
Is a journaling filesystem a good idea with a dm-crypt encrypted drive?
I was looking at dm-crypt and have seen that you can use whatever filesystem you like on top of the encrypted drive. So I was wondering if a journaled filesystem is a good idea as opposed to a non-...
- 4,337
4
votes
3
answers
14k
views
How can I keep rsync from using encryption and compression for the file transfers after the connection is authorized?
I understand that a secure connection (i.e. ssh) is needed to authorize a connection to the remote server. But after that is authorized can the data be transmitted without encryption and compression ...
- 7,531
4
votes
2
answers
4k
views
Encrypting directories with gpg [duplicate]
I want to use GPG for local encryption only, and after reading the man file, I'm doing the following in order to encrypt a whole directory:
I zip the directory with a password "zip -r -e foo foo", ...
- 3,101
4
votes
1
answer
963
views
Sensitive data in process substitution
Let's say I do:
#!/bin/bash
content="foo"
pass="secret-password"
echo $content | ccrypt -f -k <(echo -n $pass)
Can the permission set on the process substition /dev/fd/* ...
- 729
4
votes
3
answers
7k
views
Non-interactive ecryptfs directory encrypt/decrypt
Can I decrypt an ecryptfs Private directory from a script?
My basic use case for this type of activity is for doing remote backups. Imagine you have a machine (call it privatebox) with an encrypted ...
- 237
4
votes
2
answers
2k
views
How to use pv to show progress of openssl encryption / decryption?
I need to encrypt and be able to decrypt files with openssl, currently I do this simply with:
openssl enc -aes-256-cbc -salt -in "$input_filename" -out "$output_filename"
and the decryption with:
...
- 28.5k
4
votes
3
answers
2k
views
Does *BSD have the ability to encrypt a system partition with full disk encryption?
Does FreeBSD, NetBSD, or OpenBSD have an encryption feature like Linux's dm-crypt?
And will it work for a system partition?
user431493
4
votes
2
answers
22k
views
mount fail unknown filesystem type crypto_LUKS
I am facing a problem where I cannot mount a filesystem following decryption. All online searches for advice I have seen basically lead me to do what I have already - Anyone got any ideas?
My initial ...
- 41
4
votes
1
answer
3k
views
Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?
I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...
4
votes
1
answer
2k
views
Does OpenBSD use bcrypt by default?
http://codahale.com/how-to-safely-store-a-password/
with what does OpenBSD store the password by default?
They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
- 40.2k
4
votes
1
answer
845
views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
- 275
4
votes
1
answer
7k
views
Read key properties
I have multiple keys (some private, some public) and I want to get information about them (their length, their type, anything else). Is that possible?
- 65
4
votes
2
answers
12k
views
Can I decrypt EncFS files without the .encfs6.xml?
This actually happened on Mac OS X, but I believe I can get the answer here rather than on http://apple.stackexchange.com
I have a directory encrypted with encfs. I accidentally deleted .encfs6.xml ...
- 141
4
votes
2
answers
7k
views
How to encyrpt a message using someone's SSL smime.p7s file
I need to send a private key file to someone (a trusted sysadmin) securely. I suggested a couple options, but he replied as follows:
Hi, I don't have neither LastPass nor GnuPGP but I'm using ssl
...
- 18k
4
votes
2
answers
526
views
Password protecting a system file? (e.g. /etc/resolv.conf)
I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the /etc/resolv....
- 1,399
4
votes
1
answer
4k
views
How to restore GnuPG key after reinstall?
I know that GnuPG is all about security, thus it's not giving many chance of retrieve private keys (otherwise anyone could do it) but I've got a private key, and my own rev.asc file.
I had to ...
- 241
4
votes
1
answer
12k
views
What is an encrypted LVM?
If I install Debian, I can choose to set up the disk using an encrypted LVM. But what exactly does this set up? Is just the partition table encrypted, or are all files on all partitions encrypted?
- 175
4
votes
1
answer
3k
views
How to know if a AMD cpu's SME feature is enabled?
More recent AMD CPUs have a feature named Secure Memory Encryption SME which if available can be explicitly be enabled by adding this parameter to linux' command line.
mem_encrypt=on
(according to ...
- 797
4
votes
1
answer
5k
views
Safe way to automount VeraCrypt container without showing password?
I have a Raspberry Pi 4 (4GB) running Nextcloud on it. Because all my data and backups are saved on external USB drives I will encrypt them with a VeraCrypt container. Mounting and dismounting the ...
- 41
4
votes
1
answer
2k
views
Encrypt & obfuscate filenames
I am looking for a backup solution and while trying to anonymize and protect my data one of the problems I've found is that the filenames leak a lot of information.
I am looking for a piece of ...
- 41
4
votes
1
answer
4k
views
Enable ed25519 in Debian wheezy
In Debian 7 it seems like ssh doesn't accept ed25519 keys.
support for ECDSA was not added until end of 2013, but wheezy is older
How do I enable this in Debian 7?
- 29k
4
votes
1
answer
497
views
custom prompt for system encryption password entry on startup
I have full disk encryption on my arch linux laptop. When i power on the machine it prompts me for my disk password. My system is encrypted by following the LVM on luks archwiki page.
the prompt says ...
- 81
4
votes
1
answer
373
views
Visualizing encrypted image without saving decrypted version
I am learning how to decrypt secret image files using gpg.
In the example below I am encrypting (and then visualizing) a photo called kermit.png.
So far I was able to do this as follows:
gpg -d kermit....
- 173