Questions tagged [encryption]
encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
873
questions
2
votes
1
answer
5k
views
How to install Debian 12 with full disk (boot too) luks2 encryption grub2, lvm UEFI?
This is a laptop with an SSD. The Debian installer defaults are for luks2. Using these breaks the installation at the grub part, as the latest grub version doesn't support argon2id PBKDFs. argon2id is ...
- 2,712
2
votes
1
answer
3k
views
CentOS7 full disk encryption
I have one physical server and would like to configure full disk encryption for it.
First I was playing around with an virtual machines (CentOS7) and have enabled it during installation:
On reboot ...
CommunityBot
- 1
2
votes
1
answer
2k
views
Yubikey file encryption without using OpenPGP?
Is there a way to encrypt single files with a Yubikey that doesn't use OpenPGP?
I use my Yubikey for ssh logins and encrypting individual files (password stores.) The Yubikey is operating in CCID ...
CommunityBot
- 1
0
votes
1
answer
29
views
Is it possible to directly encrypt a drive using any card in a smart card reader (even credit card, perhaps?)
As I understand it, a credit card chip or smart card works by sending challenges to the tiny computer on the card, at which point it completes the challenge and replies back with the data. Is it ...
- 97.1k
2
votes
1
answer
4k
views
fingerprint-gui on Linux Mint 19 "Tara" cinnamon works but not on first boot or in software center
On my Lenovo Thinkpad X1 Carbon 3rd. Gen., fingerprint-gui works fine when locking the screen or requesting sudo in terminal.
It doesn't work when I freshly boot up the system at first login, and it ...
CommunityBot
- 1
1
vote
1
answer
36
views
ZFS dataset encryption on top of LUKS
There has been discussions about using ZFS on top of a LUKS-encrypted partition vs. using ZFS's native per-dataset encryption. However, they are always presented as either-or.
My question is about ...
- 845
2
votes
1
answer
294
views
How to circumvent "VeraCrypt is already running"
I'm running VeraCrypt which looks something like this:
I can close this window and open it again by using the system tray icon. However, sometimes my X server crashes and after restarting it, the ...
- 4,248
0
votes
0
answers
19
views
How do you decrypt an f2fs partition?
I have got an encrypted f2fs image, I know the password, I'm able to mount it via sudo mount -t f2fs mmcblk0p64.img /mnt/mmcblk0p64 so it doesn't appear broken or anything, and f2fscrypt recognizes ...
- 407
2
votes
1
answer
893
views
What is a TPM2 "object context"?
The man page for tpm2_load has the following example:
To load an object you first must create an object under a primary object. So the first step is to create the primary object.
tpm2_createprimary -...
- 121
0
votes
0
answers
34
views
Encrypt .deb content
I have a .deb package that I want to install in my customers devices. Currently I have these packages in a private repository that can only be accessed with a private key. But I also want to prevent ...
- 51
2
votes
1
answer
2k
views
How to decrypt Cryptcat (twofish) data?
I have some packets that are encrypted with Cryptcat tool and I want to decrypt them. I have the encryption password. I tried to use netcat with cryptcat, but every time I'm connecting from netcat to ...
CommunityBot
- 1
1
vote
1
answer
3k
views
USB key not mounting at boot to unlock LUKS system
I am running Debian Jessie. I have 2 hard drives with my various partitions spread across both (not RAID). Both of them are separately LUKS encrypted, and LVMs sit upon both of those. My /boot ...
CommunityBot
- 1
1
vote
1
answer
3k
views
Problem with booting a newly LUKS encrypted root partition
I didn't encrypt my root partition when I was installing my Ubuntu 18.04 when 18.04 first came out (first few months of it's release)
So for reasons I decided to encrypt it now.
I know this question ...
CommunityBot
- 1
1
vote
0
answers
185
views
Linux SMB Client Failed to Connect to SMB Server Forcing AES-256?
I'm trying to connect to SMB share on my TrueNAS from my Fedora. It works well until I decided to enable encryption of SMB data. I put following in the service config on TrueNAS (global settings)
unix ...
- 141
6
votes
1
answer
9k
views
NVMe performance hit when using LUKS encryption
I'm running all the commands on the Proxmox host, when I LUKS encrypt a disk I get about a 28% hit in read speeds and 66% hit in write speeds. I have aes-ni enabled and I should be getting good enough ...
- 171
6
votes
2
answers
11k
views
How do you mitigate the Terrapin SSH attack?
The Terrapin Attack on SSH details a "prefix truncation attack targeting the SSH protocol. More precisely, Terrapin breaks the integrity of SSH's secure channel. By carefully adjusting the ...
3
votes
1
answer
99
views
How to install cryptsetup-luks
I'm actually trying to setup LUKS on a Red Hat 9.2 Server.
Here is the problem : I can't do yum install cryptsetup-luks or dnf install cryptsetup-luks.
When I try to use one of these command I have ...
- 18.2k
0
votes
1
answer
2k
views
Encrypting home directory on Raspberry pi with password file on USB
I have been trying to follow this guide: https://www.howtoforge.com/tutorial/how-to-encrypt-directories-and-partitions-with-ecryptfs-on-debian/ to encrypt the home directory on my pi with out a ...
CommunityBot
- 1
1
vote
1
answer
50
views
Suse VM Full disk encryption, storing keys in Azure
We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
- 1,985
2
votes
1
answer
2k
views
Can't create encrypted partitions during Debian installation
I am using debian 7.4 cd.
When I set a partition as '/' during manual partition. It is fine.
However when I then try to use it as 'physical volume for encryption'...everything works fine it erases ...
CommunityBot
- 1
7
votes
2
answers
8k
views
How to disable weak HMAC Algorithms? Not found in ssh_config or sshd_config file
A vulnerability scan showed that in a Debian 10 system, insecure MAC algorithms are in use: [email protected],[email protected],[email protected],hmac-sha1
When I do ssh -Q mac, I get ...
- 121
1
vote
1
answer
67
views
erase hardware-encrypted SSD
Disclaimer
I'm not robbing someone, didn't rob someone in the past and don't plan to do so anytime soon.
Situation
Imagine I own a Samsung 2.5" SSD (850, 860 or the like) which is encrypted.
If ...
8
votes
1
answer
4k
views
Encryption of existing dataset in ZFS (ZoL 0.8)
Is it possible to encrypt an existing dataset (including snapshots) in ZFS on Linux >= 0.8, e.g. by using send | recv and destruction of the original dataset?
- 107
0
votes
1
answer
63
views
eCryptfs With Mount Command Has Passphrase Cache?
Guys help me understand this!
I'm using eCryptfs with mount command to encrypt a single folder. In first time for setup the volume I run:
mount --types ecryptfs /path/to/.private /path/to/.private
So ...
- 2,354
0
votes
2
answers
4k
views
How to encrypt file with gpg and a passphrase only?
I have a file that is decrypted with a similar command:
gpg --batch --yes -q -d --passphrase-fd 0 -o "/var/file.out" "/var/file.gpg" < /var/secret.key
I want to change the content of the /var/...
- 11
1
vote
2
answers
183
views
How to know if files inside an encrypted ZFS dataset are actually encrypted or not?
When you make any change on a zfs dataset, changes are not applied to already existant data. So, if you find a ZFS dataset that says it has encyption ON, there is a way to check if an individual file ...
- 8,007
0
votes
1
answer
69
views
How can I check if outgoing rsync traffic is actually encrypted
I have setup an automated rsync script between two servers using SSH keys. The script runs fine but I'd like to check if the traffic sent by rsync is actually going via encrypted SSH. How can I check ...
- 13.6k
1
vote
1
answer
2k
views
Recovering files from a decrypted .Private directory
Using Linux Mint 17 Cinnamon 64-bit.
Originally, I asked this on askubuntu - https://askubuntu.com/questions/831300/cannot-see-contents-of-home-directory-after-error-and-restart - and was then told ...
CommunityBot
- 1
40
votes
5
answers
75k
views
"No such file or directory" when generating a gpg key
I'm trying to generate a gpg key
$ gpg --full-gen-key
but eventurally I get an error
gpg: agent_genkey failed: No such file or directory
Key generation failed: No such file or directory
I'm on ...
- 111
1
vote
1
answer
627
views
How can I encrypt a ZFS pool?
Preface: I used to run TrueNAS (SCALE) which is where I originally created the tank pool.
On Ubuntu Server, I'm trying to assign/change the key of a newly created pool but I am getting the error Key ...
- 8,007
3
votes
1
answer
287
views
Encrypted boot partition: advantage of encrypted boot partition
I would like to understand more about the Linux boot process and how encryption works for the boot partition. I have a few questions.
I know that a UEFI system must have a ESP partition, which can be ...
- 97.1k
2
votes
3
answers
15k
views
Linux Throws Error: Can't read CTR while intializing i8042?
My install of linux throws the following errors upon boot:
efi: requested map not found.
esrt: ESRT header is not in the memory map.
i0842: Can't read CTR while initializing i8042.
Would these ...
- 101
1
vote
1
answer
250
views
Encrypted LVM "is not a valid LUKS device", cannot boot or open
I have an Arch installation on a LUKS-encrypted LVM. After I installed Debian on a different NVME drive I'm no longer able to cryptsetup open the partition from other systems, nor can I boot into Arch....
- 21
3
votes
3
answers
1k
views
How to configure a shutdown at the xth wrong entered password?
Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
- 21
23
votes
3
answers
111k
views
Obtain .cer file from .pem file
I have generated RSA private key using below command:
openssl genrsa -out privkey.pem 2048
And created a self signed certificate using below command:
openssl req -new -x509 -key privkey.pem -out ...
0
votes
0
answers
568
views
Remove encrypted partition from "Kingston Datatraveler Locker+ G3" and make it usable to Linux PC?
I have a "Kingston Datatraveler Locker+ G3" lying around. The manual on it explains steps for Windows XP and Windows 7 so it's from that time, I guess. I had some files on it, but couldn't ...
0
votes
1
answer
669
views
Running travis script, decypting ssh key, being asked for passphrase and password
I'm stuck following this tutorial:
https://oncletom.io/2016/travis-ssh-deploy/
My .travis.yml code:
language: ruby
sudo: false
rvm:
- 2.2
env:
global:
- domain: <..>
- site_path: <.....
- 11
7
votes
2
answers
1k
views
Does secure delete files on an encrypted partition make sense?
I have an encrypted partition that I mount with cryptsetup at every boot.
Does secure delete (e.g. with srm) a file into this partition make sense?
I know that from an external point of view an ...
- 517
0
votes
0
answers
94
views
Periodic 10 second pauses/freezes every 15 seconds when copying files on all(!) LUKS encrypted ext4 hard drives (NVMe not affected)
I copied a 10TB file from a LVM on LUKS encrypted ext4 drive to another identically set up drive and noticed that the copy process goes for 15 seconds at full speed (~220MB/s), then pauses for 10 ...
- 33
0
votes
0
answers
58
views
What are the OpenSSH ciphers default rekey transmission limit values?
The OpenSSH sshd_config man page says for RekeyLimits first argument:
Specifies the maximum amount of data that may be transmitted before the session key is renegotiated [...]
The default is between ‘...
- 99
2
votes
1
answer
2k
views
How can I automatically unlock and mount a ZFS pool at boot?
I was wondering if it's possible to automatically decrypt and mount a ZFS pool and its datasets at boot. Currently, I have to unlock the pool manually by using the command # zfs load-key -a and then ...
- 1,985
2
votes
1
answer
151
views
Convert encrypted and signed to just signed PGP message
Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
- 329
0
votes
2
answers
3k
views
Luks encryption with no passphrase
I have successfully installed Arch Linux with full disk encryption, however I omitted a passphrase in the hope that when starting up I won't be asked for a password.
However it still asks me for a ...
- 18.8k
0
votes
1
answer
140
views
Yubikey security key for file based container
Does anyone have a solution for using the Yubikey Security Key as a second factor for file-based crypto containers like VeraCrypt or something else? I know the Security Key doesn't allow PGP, but now ...
- 29.5k
3
votes
5
answers
4k
views
Automatically mount fulldisk encrypted disk without entering passphrase?
Some time ago I installed a linux Pop-OS (based on Ubuntu 20.04).
All good so far. It's my secondary play-around box.
I installed it with fulldisk encryption which prompts for a passphrase to decrypt ...
- 633
0
votes
0
answers
146
views
Can't open encrypted disk on new system?
I had a system running Arch Linux on an encrypted SSD using Btrfs and opened a secondary encrypted HDD on this system using a keyfile. The passphrase in the keyfile is also saved in my Keepass ...
30
votes
4
answers
101k
views
How to remove LUKS encryption?
I tried removing LUKS encryption on my home directory using the following command:
cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd
But it gives me an error saying:
...
- 3,704
0
votes
0
answers
53
views
Automating proxy configuration across multiple applications without plaintext password
More generally than the post described here: Using bash functionality in rc files
I would like to set an appropriate proxy configuration for all/multiple applications including but not limited to: ...
- 29.5k
0
votes
1
answer
58
views
Using bash functionality in rc files
I am trying to do something similar to Avoiding plain-text password in http_proxy but inside the .wgetrc/.curlrc configuration files. For whatever reason, I have spotty luck by passing proxy settings ...
- 29.5k
0
votes
1
answer
94
views
No understanding Why i cant access dm_crypt-0 -> LVM2_Member
I just did a fresh install of ubuntu server with encryption. However from the looks of it I am unable to access the majority of the space. I believe its not mounted to a directory but it shows as ...
- 97.1k