encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

1
vote
0answers
4 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
0
votes
2answers
30 views

How can I encrypt a large file with OpenSSL using RSA keys?

How can I encrypt a large file with a public key so that no one other than who has the private key be able to decrypt it? I don't want to use GPG!
3
votes
2answers
238 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
1
vote
1answer
44 views

Samsung 850 Evo SSD Hardware Encryption

I'm considering purchasing a 850 Evo but I'm unsure as to the security of the encryption, especially on Linux. My research has shown that bitlocker can be used on windows instead of the insecure ATA ...
3
votes
3answers
429 views

ecryptfs mounted via command line, what do I need to backup?

I asked this question on the ecryptfs launchpad, but it expired there without answer. https://answers.launchpad.net/ubuntu/+source/ecryptfs-utils/+question/235226 It might be trivial, but I really ...
1
vote
0answers
14 views

Encryption Using Xubuntu with a Keyfile and Password

I am somewhat of a novice with Linux. I was going to use Veracrypt for full disk encryption and then boot to Xubuntu after using a keyfile and password (not even sure if this is possible with ...
1
vote
0answers
22 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have editted my /etc/crypttab to inform a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and also the UUID ...
2
votes
0answers
19 views

Add disks to encrypted LVM partition

If I increase my current encrypted (dm-crypt)LVM partition by adding another disk to it, is the new disk also encrypted or do I need to setup dm-crypt on it as well?
3
votes
1answer
677 views

Grub2 keyboard layout when decrypting partition

According to the OpenSUSE 12.3 documentation the only keyboard layout which can be used during a Grub2 boot is the "US keyboard layout". Is there really no way to change the keyboard layout used when ...
-1
votes
1answer
40 views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ? Quite a noob question, I need to be sure. ...
1
vote
1answer
31 views

Encrypt existing disk with LUKS?

I have get informed on how prepare a LUKS system & partitions, giving a key/passphrase, etc. But for a new fresh install of linux. How to encrypt an already installed/configured linux system ? ...
0
votes
2answers
48 views

Linux LUKS encrypt and cloning machines

I'm working a prototype based on Mint. Mint installed + installed and configured packages. This proprotype is built on a rasp-like computer. I plan : to clone disk on several other rasp-like ...
1
vote
1answer
33 views

How to deallocate extents of physical volume? lvm, encrypted

I just install Debian 8.1. I allocated almost all disk 300 GiB to encrypted partition and a little bit for boot. I want to make smaller 50GiB encrypted physical volume and install different xen OS to ...
32
votes
8answers
21k views

SSH to decrypt encrypted LVM during headless server boot?

When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt ...
0
votes
1answer
35 views

How do I test or verify ZFS encryption is working?

How do I test or verify that the ZFS encryption is working, especially when running as a Samba share? Like if I create a ZFS pool with encryption=on, how can I tell whether a file is being properly ...
0
votes
0answers
41 views

How can i access encrypted Ubuntu /home folder in Arch Linux?

I just moved to Arch from Ubuntu and i want to have access to the Ubuntu /home folder and it's encryped. There are only two files inside /home/dscript folder. How can i access the /home folder?
1
vote
2answers
258 views

How strong is the encryption of a zip file in Linux Mint

Zip encryption has had often a bad reputation of being weak, but some would argue that a zip file encrypted using certain algorithms (such as by using AES), together with strong password, is really ...
3
votes
1answer
102 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
1
vote
1answer
115 views

auto mount encrypted USB

I've actually just started dabbling in the raspeberry pi but no stranger to hacking around these controllers. Having said that, my knowledge is lacking in a few areas. A little about what I want to ...
0
votes
0answers
48 views

Auto-mount encrypted USB issues on boot for Raspberry Pi

My previous post about what I am trying to achieve: link Essentially trying to automount and encrypted USB drive at boot. Been slowly chipping away at this and feel I get a good idea of the process ...
1
vote
1answer
47 views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen ...
0
votes
0answers
17 views

Strategy about cloning crypted (LUKS) systems

For a while, I ve being discussing here how to manage to clone one encrypted system on others. My plan is to build a Mint system, then to encrypt it, then to clone it. Here is my process for ...
1
vote
1answer
60 views

How to decrypt and copy home folder from laptop to external hard drive through live usb GUI?

I am a fairly new user to Linux and have been using Elementary OS for the last 2 weeks. Everything was working alright until just two days ago when I decided to set the default brightness level ...
0
votes
1answer
33 views

LUKS encryption full disk, how many RAM?

If I encrypt (dm crypt, LUKS) my whole system, how many RAM should I provide ? I've understood that LUKS volume is mounted RAM, ... If my system is 10 Gb, should I have something like RAM 12 Go ?
0
votes
0answers
15 views

Linux PGP : load key from pendrive at Boot

A Linux Mint machine owns some** encrypted files (pgp). The machine cannot run if not electrically plugged (a physical theft shuts it down immeditately). **I d like to avoid storing decryption key on ...
0
votes
0answers
31 views

Linux counter-theft encryption : PGP or DM-Crypt?

I am brainstorming about the best strategy for my project. I have a machine (Linux Mint) with sensitive files on it. This machine is a prototype and I'll clone the disk on some others. Each machine ...
1
vote
1answer
23 views

install already built Linux environment

I have configured aMint-based environment : openVpn, hostapd, and a bunch of other configured package. This is done on a rasp-like computer (OEM). I planned to clone my disk on other machines. I dont ...
14
votes
3answers
8k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
1
vote
1answer
47 views

Encrypt Debian-based system

I have a kind-of-raspberries park, all connected via VPN to a single one server. I'd like to encrypt each rasp', in order to avoid intrusions, if one is stolen/thieft. Each rasp' has already a system ...
0
votes
0answers
27 views

Encrypt some folder and hide key in Linux

I work on a Debian system (Mint actually). I'd like to encrypt some folders and files, for instance: the one with OpenVPN configuration and keys, and be able to decrypt it on the fly. My problem: ...
0
votes
0answers
45 views

Encryption Linux system after installation

Is it possible to encrypt a Linux system (Mint, Debian based) after installation? For an "on the fly" usage. My system is both : a client (www, ethernet), a local server (wifi). I am working on a ...
1
vote
2answers
87 views

Encrypting directories with gpg

I want to use GPG for local encryption only, and after reading the man file, I'm doing the following in order to encrypt a whole directory: I zip the directory with a password "zip -r -e foo foo", ...
0
votes
1answer
60 views

OpenVPN client config :: why is needed ca.crt?

I configured a VPN (OpenVPN, mode: multiclients-1server), CentOS Server, multiple Rasp's clients. CA.crt is needed by each client, in addition of the client.crt & client.key . I wonder... why ? ...
1
vote
2answers
37 views

OpenVPN : protect your clients key/cert/conf from being stolen?

I have configured an OpenVPN install. Mode: multiclients 1server. Clients are raspberries. I note how easy it is to steal a rasp, and look in HDD to get key+cert+conf. Copy it on your laptop, and ...
0
votes
1answer
199 views

“no matching cipher found” error in `rsync`

I am trying to copy a directory from one system to another with rsync; but it erred. Can you please advise me on what to check? Command: [M root@aMachine ~]# rsync -e "ssh -c blowfish" -v -a ...
0
votes
1answer
146 views

CentOS 7 - while installing i set disk encrypted with password, but on reboot always it asking password

While installing CentOS 7, i put password for disk encrypt. Now while working remotely on that machine and doing reboot it always ask password to be inserted on-site. Is this normal? or there is a ...
3
votes
1answer
165 views

cryptsetup: dm-crypt plain mode using keyfile AND passphrase

I feel a keyfile and a passphrase provide different benefits. They can not be obtained in the same way (one you need to physically acquire, the other one you need to know). Thus, I think there is ...
2
votes
1answer
41 views

Backup on a remote server in an encrypted folder

Is there an easy way to backup your home directory on an online server in an encrypted folder? I heard of obnam which should be able to store encrypted with a GPG key somehow. What would be the ...
0
votes
2answers
93 views

Execute scripts without decrypting them

I have a set of scripts (bash, ruby, python) and want to put everything into a container like file so I can deploy this container on a lot of servers. This scripts need to protect from accessing other ...
3
votes
2answers
171 views

Debian Wheezy, ejabberd and forward secrecy

After validating of my public XMPP service on xmpp.net, I've got the error: Warning: Server offers no forward-secret ciphers. Grade capped to A-. Is there an easy way to enable these ciphers? As ...
2
votes
1answer
511 views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
1
vote
2answers
619 views

cannot change my login screen background

I cannot change my login screen background to the desktop background in my elementary os which is based on ubuntu. I have decrypted my home folder according to this link: ...
14
votes
3answers
11k views

Encrypting file only with SSH -priv-key?

Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
1
vote
2answers
101 views

Automatically shred LUKS partition upon X failed decryption attempts?

Is it possible to set up a bootloader that automatically begins shredding the header.img file and then the encrypted partition itself upon X failed attempts at decrypting the partition? If this does ...
-1
votes
1answer
60 views

Encrypt PHP script to a domain (RSA)

I have a php script I want to share with someone but only limit them to be able to use it on one domain. I have found http://phpseclib.sourceforge.net/ - I think I can do this with RSA encryption but ...
2
votes
2answers
159 views

Does the debian setup with lvm also encrypt the swap partition?

I'm planning a fresh debian install on my notebook and want to have full disk encryption. But I mainly hibernate, which is why I want my swap to be encrypted as well. During the graphical expert ...
0
votes
0answers
179 views

Mounting SMB3 share with encryption fails: mount error(13): Permission denied (Synology)

Everything works fine until I add encryption on my synology, from that point on I only get mount error(13): Permission denied I've tried this command: mount -t cifs //192.168.178.22/Filme ...
5
votes
1answer
41 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
1
vote
1answer
129 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...
1
vote
0answers
56 views

How do I encrypt (password protect) a PDF without encrypting the metadata?

It seems that the encryption provided by pdftk(1) is the level supported by Acrobat 5 (I added a password to a PDF file using pdftk then opened it in Acrobat Pro 9 and examined the security settings; ...