encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

22
votes
5answers
13k views

SSH to decrypt encrypted LVM during headless server boot?

When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt ...
4
votes
1answer
967 views

Tunnel traffic through another machine over ssh

I want to be able to route a portion of my traffic through another machine over SSH. For example, is it possible to browse the web through the ssh tunnel and also browse the web through your LAN ...
18
votes
4answers
23k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
3
votes
1answer
7k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
15
votes
7answers
10k views

Linux boot loaders supporting full disk encryption?

Are there any Linux boot loaders supporting full disk encryption (a la TrueCrypt). I know there was work towards adding encryption support to GRUB2, but this does not seem to be ready yet. Any other ...
13
votes
3answers
6k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
9
votes
3answers
823 views

Portable encrypted container

I want to store some data encrypted to carry around with me (this includes some scans of relevant paperwork, my TAN List for online banking, my gnupg and ssh keys and stuff like that). So not really a ...
1
vote
1answer
3k views

Install Backtrack 5 r2 into running LUKS setup installed with ubuntu

One Harddisk (sda) Two Partions. With a working ubuntu running. 1) /boot 2) LVM with this virtual volumes/partions/ or whatever they are called inside: Swap Ubuntu Home Prepared for Backtrack Of ...
7
votes
3answers
1k views

Any reason for encrypted /?

I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
2
votes
0answers
274 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
7
votes
7answers
1k views

Secure FOSS alternative to Skype on Linux & OpenBSD?

Criteria: Makes audio/video calls Encrypts the whole traffic (using good encryption) Is cross-platform (including Windows 7, etc.) Runs on modern Linux distributions (Fedora, Ubuntu, etc.) Runs on ...
5
votes
1answer
2k views

Linux: LUKS and multiple hard drives

I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM). I think the basic ...
3
votes
1answer
764 views

anonymous url navigation in command line?

Is there any way to anonymize http requests through the command line? In other words, is it possible to wget a page without the requester's IP showing up?
7
votes
4answers
2k views

Receive Pop/IMAP email and then forward as encrypted to gmail

Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the ...
2
votes
1answer
2k views

Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?

I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...
1
vote
1answer
479 views

How can I create an encrypted, file-system–agnostic, mountable volume?

At work, we have an iMac (running OS X) that shares a partitioned hard drive over the network. I'd like to back up to my partition from my Linux machine. I've attempted connecting via cifs, then ...
1
vote
1answer
504 views

Use Linux to read contents of Windows encrypted folder

Windows allows the selective encrypting of certain files or folders. I currently have a Windows folder that is set to "encrypt contents to secure data". (The Windows partition is NTFS.) If I mount ...
6
votes
1answer
1k views

How do I set up an encrypted swap file in Linux?

How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
4
votes
4answers
2k views

Recovering overwritten LVM metadata

Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone). Now I wasn't able to fix it and didn't have a lot of time, so I ...
3
votes
1answer
750 views

How to set laptop screen brightness just after boot with full disk encryption

my girlfriend bought Lenovo Essential G500 i5-3230 and I installed Linux Mint 16 on it with full disk encryption. It is standard installation with encryption using dmcrypt and LUKS. But there is a ...
3
votes
3answers
260 views

Best way to benchmark different encryption solutions on my system

I want to compare different encryption solutions for encrypting my system, possibly different solutions for different parts of the system such as /usr or /home. In particular I look at dm-crypt ...
3
votes
0answers
440 views

How to set up an encrypted directory to be mounted only during samba access?

(This is not about restricting client access, for which ext3 permissions do the trick) I'd like to encrypt the data on my NAS drive (Buffalo LinkStation Pro with SSH access enabled, if that matters) ...
2
votes
2answers
306 views

Difficulty with EncFS on CentOS

I'm trying to figure out encfs, but am having some difficulty. This is what I have done so far: I created 2 test folders mkdir /home/oshiro/Desktop/encrypted mkdir /home/oshiro/Desktop/decrypted ...
2
votes
1answer
248 views

Why do NoMachine NXclient docs instruct to copy over the server's private key?

Working to set up the GnuPG keymanager for SSH and now FreeNX server on CentOS 6 and NoMachine NXclient on my new install of ArchLinux I've been reading more about keys than I've ever read before. I'm ...
2
votes
1answer
851 views

Does OpenBSD use bcrypt by default?

http://codahale.com/how-to-safely-store-a-password/ with what does OpenBSD store the password by default? They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
1
vote
3answers
253 views

How much storage overhead comes along with cryptsetup and ext4?

I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
1
vote
1answer
473 views

Which filesystem to use when a samba share should allow for NTFS encryption?

I'm using a NAS (Buffalo LinkStation Pro with SSH access, if that matters) which runs Linux (2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux, with smbd --version = Version ...
1
vote
4answers
1k views

How to install Fedora&Ubuntu with encrypted VG's on one disk?

I installed Fedora 14 first, then Ubuntu 10.04. I installed them using dm_crypt/aes256/lvm, so I used encrypted VolumeGroups. At the end of the Ubuntu install it said it cannot install GRUB, so I had ...
0
votes
2answers
98 views

are daemon tmpfs executables copied unencrypted to memory upon execution? (prevent if so?)

When a daemon is executed, is the executable copied to memory? If so, can it be copied encrypted? If not, is there a way to prevent the executable from being copied to memory? The executable is ...