encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
0
votes
1answer
49 views
How can I create an encrypted, file-system–agnostic, mountable volume?
At work, we have an iMac (running OS X) that shares a partitioned hard drive over the network. I'd like to back up to my partition from my Linux machine. I've attempted connecting via cifs, then ...
1
vote
1answer
46 views
Grub2 keyboard layout when decrypting partition
According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout".
Is there really no way to change the keyboard layout used when ...
2
votes
2answers
578 views
slow media - disk cache tuning?
Is there any way to make the system more consistent when using LUKS? (or slow storage in general) as it is everything is snappy until the write buffer is full, then everything grinds to a halt as the ...
4
votes
3answers
1k views
How to create SHA512 password hashes on command line
In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
2
votes
0answers
19 views
Debian Live 3.x with encrypted root filesystem
I'd like to build a Debian Live system based on sid with an encrypted root filesystem. It's quite easy to install a Debian system with a rootfs encrypted with dm-crypt/LUKS, so I suppose it's also ...
0
votes
1answer
100 views
Encrypted USB 2.5“ to unencrypted internal 3.5” hard drive copy speed
I am moving data from an external USB 2.5" hard drive (encrypted with cryptsetup) to an unencrypted internal 1TB 3.5" hard drive on a GNU/Linux quad-core headless server with 2GB RAM, using Midnight ...
2
votes
1answer
990 views
Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?
I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...
2
votes
0answers
148 views
How can I mount a dm_crypt device during boot, it fails all the time
EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now!
I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
3
votes
1answer
33 views
Protecting file system contents with TPM and Encrypted File System
I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
2
votes
2answers
303 views
Are there more advanced LUKS key schemes, e.g. 2 of 3 keys needed?
It seems like the two main LUKS encryption options are:
USB keyfile (see http://superuser.com/questions/149578/how-can-i-use-a-keyfile-on-a-removable-usb-drive-for-my-encrypted-root-in-debian)
...
3
votes
1answer
75 views
What's the easiest way to decrypt a disk partition?
I made a mistake of encrypting the entire LVM physical volume (contains both home, root, and swap) when installing a CentOS 6.4 (2.6.32-358.6.1.el6.x86_64) box. I soon came to realize that moving ...
2
votes
1answer
34 views
Checking if a passphrase is able to decrypt symmetrically encrypted files
I have about twenty files symmetrically encrypted with CAST5. I have a single passphrase that is meant to work with all of the files and I wish to confirm that it does. I wrote a script to perform a ...
1
vote
1answer
33 views
How to add RAID5 to existing crypto-LVM?
I recently installed Debian Wheezy and let the installer guide partition the disk using a whole partition with encryption (LVM). Later on I've added four disks and setup RAID5 on them (using mdadm).
...
2
votes
2answers
87 views
How to encrypt my system such that suspend to RAM works and is also encrypted
How can I encrypt my system (at best using lvm + dm-crypt/luks) such that suspend to RAM works and that everything is in an encrypted state when suspended to RAM?
1
vote
1answer
70 views
Booting encrypted root partion fails after system update
I have a problem booting my Debian Linux server. After a system update, GRUB loads the initrd and the system should ask for the password, but it doesn't. Instead, I get dropped to BusyBox. After ...
2
votes
1answer
84 views
Does encrypting my whole Lubuntu slow running programs down?
During the installation of Lubuntu I chose to encrypt my whole HDD (not just the /home folder). Now it feels like my system has slowed down a lot. Especially the startup time of programs increased.
...
2
votes
1answer
138 views
Best way to encrypt my system on an ssd
I consider to buy an ssd for my laptop (something like Samsung 830 or 840) to make the system more responsive. I want my system (at least my home partition) to be encrypted. However I know about ...
1
vote
1answer
37 views
Dm-Crypt system encryption with different keys per user
I have found the following example configuration for a system encryption:
Example 5: paranoid system encryption
• whole hard drive encrypted with dm-crypt+LUKS
└──> unlocked before boot, ...
2
votes
3answers
95 views
Fast Way to Randomize HD?
I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
2
votes
2answers
47 views
Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption
Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
7
votes
3answers
772 views
Encrypt OfflineIMAP Password
I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process).
From the documentation, it seems the only way to ...
1
vote
2answers
49 views
Encrypted disk filesystem compatibilities
On my Debian Linux system during the install I decided to use disk encryption (the one offered during a regulard Debian install). When the system boots up I need to enter a password and then the ...
1
vote
1answer
51 views
backup / on ntfs filesystem encrypted
I was about to backup my archlinux, following this guide to my FritzBox, (which enforces a NTFS system that I mounted via samba) as I remembered, that NTFS is not capable to keep permissions and other ...
2
votes
1answer
107 views
Will using a compressed filesystem over an encrypted volume improve performance?
Encryption/decryption is often the main bottleneck when accessing an encrypted volume. Would using a filesystem with a fast transparent compression (such as BTRFS + LZO) help? The idea is that there ...
1
vote
0answers
22 views
How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?
I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
4
votes
1answer
550 views
How to decrypt single EncFS encrypted files?
Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created?
With a little help from google I found ...
1
vote
1answer
55 views
Which packages contain IPsec implementations and algorithms that use it for encryption?
Which package contains the implementation of IPsec and which package contains the implementation of encryption algorithms that IPsec uses for encryption? I need to use custom crytographic algorithms ...
3
votes
3answers
640 views
RAID5 recovery trying with “mdadm --create … missing”
First how I got in this situation:
I had an RAID5 array with disks each 2TB (external USB-disks), I then wanted to create a larger encrypted array. Therefore I got 2 additional disks (also 2 TB each) ...
1
vote
2answers
160 views
File encryption and decryption on Linux using ucrypt
A few years back, I was using the ucrypt utility on CentOS 5. Now I am using Fedora 11 and need ucrypt for file encryption and decryption, but I don't have a backup of the old system. Where can I find ...
0
votes
0answers
47 views
Boot disk unavailable
Background
I've got one 32GB SSD that I have Ubuntu 12.10 installed on (this drive is encrypted), and two 1.5TB drives that will serve as storage and backup respectively. I have formated both drives ...
2
votes
2answers
218 views
How do I configure systemd to activate an encrypted swap file?
My previous question produced the commands to add an encrypted swap file:
# One-time setup:
fallocate -l 4G /root/swapfile.crypt
chmod 600 /root/swapfile.crypt
# On every boot:
loop=$(losetup -f)
...
3
votes
3answers
3k views
FreeBSD + ZFS + Encryption ? Alternatives ? Suggestions?
I would like to create a dedicated physical server which will work as a NAS & fileserver inside my LAN (as well as through VPN).
However I need to fully encrypt the drives (both the system ones ...
2
votes
1answer
374 views
LUKS storing keyfile in encrypted usb drive
I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives.
Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
6
votes
1answer
273 views
How do I set up an encrypted swap file in Linux?
How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
1
vote
1answer
62 views
Overwriting disk before encryption
I'm going to create encrypted lvm on my disk. As a encryption mechanism I choose dmcrypt with LUKS.
Here's my question - should I overwrite (for security reasons) whole disk before creating encrypted ...
1
vote
3answers
132 views
Can a mounted encrypted filesystem be safe from root?
I have access to a shared remote computer from which I would like to run some code I have written which uses an interpreter (not a compiled code). I would like to protect this source code from other ...
4
votes
2answers
114 views
How to lock a directory?
I want to block any kind of access to a certain directory unless a password is provided. It could be my root or account password.
The directory is residing on an NTFS partition, and this method needs ...
7
votes
3answers
2k views
Simplest way to password protect a directory and its contents without having to create new files?
I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
2
votes
1answer
551 views
How to remove LUKS encryption?
I tried removing LUKS encryption on my home directory using the following command:
cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd
But it gives me an error saying:
...
0
votes
1answer
135 views
Use Linux to read contents of Windows encrypted folder
Windows allows the selective encrypting of certain files or folders. I currently have a Windows folder that is set to "encrypt contents to secure data". (The Windows partition is NTFS.)
If I mount ...
0
votes
1answer
177 views
setup filename encryption for encrypted home folder in eCryptfs
I used ecryptfs-migrate-home to encrypt my home folder on my Debian (Testing) system.
As I am a complete encryption-greenhorn, I don't know yet how to check, if the encryption succeeded. However, I ...
4
votes
2answers
247 views
conceal home folder completely - is ecryptfs the right choice?
On my Debian-Testing-System, I want to completely conceal the home folders. That means, I not only want the data to be encrypted, but I also want to preclude determining any (or most) information from ...
1
vote
0answers
80 views
Installing IPSEC on FreeBSD
how to install IPSEC on two FreeBSD 9.0 machines to can send an encrypted packets between them , and let them read the encrypted packets .
4
votes
1answer
190 views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
0
votes
0answers
425 views
How to bypass WD MyBook Essential external HDD hardware lock?
I have a Western Digital Mybook Essential external HDD 2TB which is password locked. Well with my old OS it showed me that is unlocked, but as I changed the OS it's showing that is locked, I've ...
4
votes
2answers
733 views
RHEL6 LUKS with TPM support?
I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide ...
1
vote
1answer
107 views
How to export a private PGP email key
I have made a keypair for my email address using gnupg. I thought that I should probably keep a backup of it so that if I lose my desktop computer I can continue using the same key.
Is this the ...
2
votes
1answer
355 views
Fast encryption for home directory with Scientific Linux (ala' RedHat)
I have a T61 with C2D T7300 CPU/4 GByte RAM. I has SL 6.3 on it, and I ticked the encrypt VG during install. If I start a "normal" windows xp on it, its ~slow.. so.. I need a little performance boost ...
6
votes
3answers
569 views
Any reason for encrypted /?
I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
11
votes
3answers
4k views
How should one set up full-disk encryption on OpenBSD?
Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux?
I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
