encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

2
votes
2answers
39 views

Debian Wheezy, ejabberd and forward secrecy

After validating of my public XMPP service on xmpp.net, I've got the error: Warning: Server offers no forward-secret ciphers. Grade capped to A-. Is there an easy way to enable these ciphers? As ...
2
votes
1answer
33 views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
1
vote
2answers
227 views

cannot change my login screen background

I cannot change my login screen background to the desktop background in my elementary os which is based on ubuntu. I have decrypted my home folder according to this link: ...
14
votes
3answers
10k views

Encrypting file only with SSH -priv-key?

Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
1
vote
2answers
67 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
-1
votes
1answer
28 views

Encrypt PHP script to a domain (RSA)

I have a php script I want to share with someone but only limit them to be able to use it on one domain. I have found http://phpseclib.sourceforge.net/ - I think I can do this with RSA encryption but ...
2
votes
2answers
91 views

Does the debian setup with lvm also encrypt the swap partition?

I'm planning a fresh debian install on my notebook and want to have full disk encryption. But I mainly hibernate, which is why I want my swap to be encrypted as well. During the graphical expert ...
0
votes
0answers
54 views

Mounting SMB3 share with encryption fails: mount error(13): Permission denied (Synology)

Everything works fine until I add encryption on my synology, from that point on I only get mount error(13): Permission denied I've tried this command: mount -t cifs //192.168.178.22/Filme ...
5
votes
1answer
30 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
1
vote
1answer
56 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...
1
vote
0answers
23 views

How do I encrypt (password protect) a PDF without encrypting the metadata?

It seems that the encryption provided by pdftk(1) is the level supported by Acrobat 5 (I added a password to a PDF file using pdftk then opened it in Acrobat Pro 9 and examined the security settings; ...
2
votes
2answers
54 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
3
votes
2answers
27 views

Does secure delete files on an encrypted partition make sense?

I have an encrypted partition that I mount with cryptsetup at every boot. Does secure delete (e.g. with srm) a file into this partition make sense? I know that from an external point of view an ...
3
votes
1answer
596 views

Grub2 keyboard layout when decrypting partition

According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout". Is there really no way to change the keyboard layout used when ...
9
votes
2answers
2k views

How do I set up an encrypted swap file in Linux?

How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
0
votes
1answer
36 views

crypto kernel module not available on Raspberry pi 2 (linux 3.18.11)

I'm trying to use dm-crypt on my Raspberry Pi 2 with Raspbian (debian) to open a trueCrypt volume, but i get Required kernel crypto interface not available. Ensure you have algif_skcipher kernel ...
1
vote
2answers
44 views

Is there a way to edit a password-protected file without having to retype the password all the time?

I want to encrypt a text file using a password and a way to safely edit that file. The problem I am having is that I haven't managed to find a simple way to do that while only requiring the password ...
3
votes
0answers
33 views

How to use AES hardware encryption of LTO tape drives on Linux?

How to use AES hardware encryption of LTO tape drives on Linux? I expect the LTO AES encryption to be faster than software solutions. A quick benchmark of aespipe on i7 CPU gives an impression on the ...
0
votes
0answers
27 views

What could be the output of command `lsblk -f -r | grep ' /' | grep -v ' /boot'` on encrypted drives?

Suppose we have drives which are encrypted, what could be the output of following command in Debian based (specially Ubuntu OS)? lsblk -f -r | grep ' /' | grep -v ' /boot'
0
votes
0answers
20 views

Gnome encfs Manager not working in linux mint 17

I have installed Gnome encfs Manager in linux mint.It opens fine after first installation.But after that when I want to open it,nothing happens.But in system monitor I can see it running.When I run it ...
9
votes
3answers
27k views

How to encrypt messages/text with RSA? (using openssl?)

I have Alice's public key. I want to send Alice an RSA encrypted message. How can I do it using the openssl command? The message is: Hi Alice! Please bring malacpörkölt for dinner!
2
votes
1answer
63 views

Cloning a root partition onto a dm-crypt encrypted one

I have Gentoo Linux installed on a 25.93GB/62.43GB partition /dev/sda4. The other partitions on the disk are 150MB /boot on /dev/sda1 and 56,66GB unused space on other two partitions. I am planning ...
3
votes
5answers
3k views

Fast Way to Randomize HD?

I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
0
votes
2answers
45 views

FreeBSD 10 and ZFS: Methods for encrypting files

I'm in the process of setting up a FreeBSD 10 server on a KVM vserver. I'm really new to FreeBSD in general (coming from Debian Linux). I installed the system choosing ZFS with encrypted root volume ...
1
vote
5answers
89 views

Prevent encrypted partition from running on other PC

Concise question: Is it possible to somehow bind partition encryption to hardware so it is impossible(very hard) to copy system to another PC and run there? Full story: We have a small embedded PC ...
1
vote
0answers
57 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
2
votes
2answers
51 views

Encrypted FileSystem in VirtualBox

I'm looking for any information regarding how secure an encrypted Linux file system is when contained in a VirtualBox virtual drive on a Windows host? Specifically I'm looking for answers to the ...
29
votes
7answers
18k views

SSH to decrypt encrypted LVM during headless server boot?

When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt ...
2
votes
1answer
55 views

Are encrypted volumes more vulnerable to power loss?

I have some encrypted volumes that I use with my Xubuntu machine. One volume is a container file that is mapped to /dev/loop0 and encrypted using plain dm-crypt; another volume is a USB hard drive ...
8
votes
2answers
450 views

Does QEMU/KVM use Intel AES instructions for encrypted qcow2 images if the host CPU has them?

The qcow2 image file format for KVM can use AES encryption. The encryption is applied at the cluster level: Each sector within each cluster is independently encrypted using AES Cipher Block ...
2
votes
2answers
964 views

Difficulty with EncFS on Debian

I created 2 test folders: mkdir /home/oshiro/Desktop/encrypted mkdir /home/oshiro/Desktop/decrypted oshiro@debian:~/Desktop$ ls -l total 8 drwxr-xr-x 2 oshiro oshiro 4096 Feb 15 20:34 decrypted ...
1
vote
1answer
71 views

FreeBSD 10: Disable ZFS full disk encryption

I installed FreeBSD 10.1 and chose to encrypt the ZFS root volume and Swap during install. I'm now realizing that on the remote KVM vserver I'm on the encryption makes rebooting harder and probably ...
5
votes
1answer
118 views

SHA512 salted hash code question

I'm puzzled by the hash (ASCII) code stored under Linux (Ubuntu) /etc/shadow. Taking a hypothetical case, let password be 'test', salt be 'Zem197T4'. By running following command, $ mkpasswd -m ...
0
votes
0answers
43 views

How do I decrypt this hard drive?

In 2011 I installed Ubuntu server edition on an old Dell that I had laying around. During the install process I was using the gui installer and opted to set disk encryption on the disk drive. During ...
1
vote
2answers
112 views

Non-interactive ecryptfs directory encrypt/decrypt

Can I decrypt an ecryptfs Private directory from a script? My basic use case for this type of activity is for doing remote backups. Imagine you have a machine (call it privatebox) with an encrypted ...
2
votes
2answers
187 views

How to set password for pdf files?

I need to password protect my PDF file(s), because I am going to send them through email and I want anyone who would view my PDF file(s) to be prompted for a password. How can I add a password to a ...
4
votes
2answers
80 views

Encrypt a single file and read/edit on-the-fly

I have a single text file I want to encrypt. I can easily do so with any common software. But then, I want to be able to click on it, provide a password, and be able to read, edit, and close it. All ...
2
votes
4answers
158 views

File encryption utility without key integrity check (symmetric key)

When encrypting a file with symmetric key, most common utilities (such as gpg, mcrypt, etc) store information in the encrypted message which can be used to verify integrity of the key during ...
1
vote
0answers
67 views

fopen problem when mounting ecryptfs filesystem

After an unrecoverable fsck problem the mount of my encrypted /home/me filesystem isn't possible any more. The visible effects are: a) logging in though most of the selectable GUI window managers ...
19
votes
7answers
11k views

Linux boot loaders supporting full disk encryption?

Are there any Linux boot loaders supporting full disk encryption (a la TrueCrypt). I know there was work towards adding encryption support to GRUB2, but this does not seem to be ready yet. Any other ...
2
votes
0answers
43 views

How do I layer compression on top of encryption on top of BtrFS, per-file?

BtrFS should support this really, but it doesn't. So ECryptFS looks like it will fill the gap. The only thing is, how would I layer compression on top of this? Reasons for compression on top of ...
10
votes
4answers
159 views

Can swapping be disabled on the application level?

I'm currently using thunderbird with gnupg to read encrypted emails. If I understand the swapping behavior correctly, the memory pages containing the decrypted emails might be swapped out and leave ...
0
votes
1answer
55 views

Mounting Encfs Container

I have an encfs container in my home directory. I had been using Cryptkeeper to open the container, but since updating to Linux Mint 17 from 16 it's not working any more. Gnome Encfs manager doesn't ...
0
votes
2answers
361 views

Can I decrypt EncFS files without the .encfs6.xml?

This actually happened on Mac OS X, but I believe I can get the answer here rather than on http://apple.stackexchange.com I have a directory encrypted with encfs. I accidentally deleted .encfs6.xml ...
0
votes
3answers
101 views

creating and sending a self-signed public key using GnuPG in CentOS 7

I know that I can create a GPG keypair from the CentOS 7 terminal by typing gpg --gen-key and following the resulting steps, but how can I make sure that the resulting public key is self-signed? And ...
1
vote
0answers
54 views

Why doesn't Linux IPSec implementation support fragmentation before encryption?

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
-2
votes
2answers
75 views

installing GnuGPG with Thunderbird on CentOS 7

How can I install GnuPG on my CentOS 7 system? I want to use GnuPG alongside Thunderbird and Enigmail to manage pgp keys, as per the instructions in this link. The problem is that the download ...
1
vote
1answer
89 views

How strong is the encryption of a zip file in Linux Mint

Zip encryption has had often a bad reputation of being weak, but some would argue that a zip file encrypted using certain algorithms (such as by using AES), together with strong password, is really ...
1
vote
1answer
336 views

Setting up encryption after debian wheezy install

How do you set up encryption on your home dir after the debian wheezy install. I missed the part in the graphical install that sets that up for you. I am using the automatic partition on the whole of ...
3
votes
3answers
2k views

Creating a GnuPG keyring for apache

Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...