encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

learn more… | top users | synonyms

5
votes
0answers
764 views

How to set up an encrypted directory to be mounted only during samba access?

(This is not about restricting client access, for which ext3 permissions do the trick) I'd like to encrypt the data on my NAS drive (Buffalo LinkStation Pro with SSH access enabled, if that matters) ...
4
votes
0answers
240 views

How to use AES hardware encryption of LTO tape drives on Linux?

How to use AES hardware encryption of LTO tape drives on Linux? I expect the LTO AES encryption to be faster than software solutions. A quick benchmark of aespipe on i7 CPU gives an impression on the ...
4
votes
0answers
771 views

LVM Encrypted Partition without Partition Table

I have the following Problem. My Laptop is fully encrypted with LVM I know the Passphrase, but the partition table is broken. I booted from an USB Stick in this Case sdb1. Is there any hope to get /...
3
votes
0answers
174 views

Add disks to encrypted LVM partition

If I increase my current encrypted (dm-crypt)LVM partition by adding another disk to it, is the new disk also encrypted or do I need to setup dm-crypt on it as well?
3
votes
0answers
647 views

Creating an encrypted file container as a non-root user

Linux kernel 3.2.0-64-generic here (Ubuntu LTS if someone is wondering about kernel options / modules). I have some file space on this Linux server (~ 24 GB). I would like to use this space as an ...
2
votes
0answers
30 views

Cryptsetup hanging after passphrase entered

I am currently looking to recover some data for a friend from an internal HDD removed from a laptop that they had encrypted using LUKS. They can't really tell me much more else as somebody else ...
2
votes
0answers
76 views

mod_mono on SLES 12.1 fails to encrypt ASP.Net web.config

I am trying to migrate an ASP.Net (2.0) VB web app from a SLES 11 server to a new SLES 12 server. Unfortunately, mono is no longer supported by Novell / SUSE / NetIQ folk. This is my first time ...
2
votes
0answers
306 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
2
votes
0answers
280 views

lsof: home folder is busy, but I never logged in as that user

I'm trying to run ecryptfs-migrate-home to encrypt my home folder, but the command keeps failing the open files check. Indeed, lsof +D "/home/will" shows the same in-use files as encrypt-migrate-home....
2
votes
0answers
365 views

Dual boot Linux partition scheme with encryption

I am trying to figure out how I should encrypt my machine. I am reorganizing and will have two 500GB drives. I am setting up a dual boot system (both linux). My prospective partition scheme: sda: ...
2
votes
0answers
275 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
2
votes
0answers
99 views

Is a virtual encrypted disk stored in a file on a NAS allowing for concurrent R/W access?

I'd like that all the data stored in a NAS is encrypted. The NAS is used for a) daily backups AND b) as a shared hard disk for users, allowing thus concurrent read/write access. All machines are Linux,...
2
votes
0answers
101 views

Accidentally overwrote boot sector of encrypted drive: any way to recover data?

I had one external drive on which I was storing a large quantity of data; the drive is/was encrypted using gnome disk utility. I got a second drive for redundancy and I was preparing to encrypt it. ...
2
votes
0answers
393 views

How can I mount a dm_crypt device during boot, it fails all the time

EDIT: Problem solved, i updated from Debian 6.0.6 to 7.0.0, everything works now! I have a complex problem at booting. Basically, I have a debian apache box, as a music server in my home network. The ...
2
votes
0answers
339 views

How do create an encrypted system with multiple Linux distributions?

A few weeks ago I created a completely encrypted system on a notebook and must say I like the idea. It's a little bit annoying to enter the password on every boot, but it's nice to know even if I lose ...
1
vote
0answers
6 views

How can I tell if a encrypted (LUKS) device is already open?

Is there a way to tell, given a path to a LUKS block device, and not knowing the passphrase, whether the device is already open (decrypted)? What about knowing the path to the decrypted device?
1
vote
0answers
29 views

Encrypt directory on Linux

I need to create an encrypted directory (to be then filled with files and subdirectories) in a Linux ext4 filesystem, accessible to just one user. It should be: visible (just the root) from the non-...
1
vote
0answers
15 views

Encrypt partition and LV afterwards

What I want to do I am using Kubuntu 14.4 and like to use kvpm for my LVM-needs. I have a partition and a Logical Volume. On both is data. I would like to encrypt each of those. https://wiki....
1
vote
0answers
35 views

How to encrypt a file or a folder on f2fs?

f2fs supports per-file encryption, however I can't find any resources about it. I know about eCryptFS, LUKES and encfs, that's not the same.
1
vote
0answers
44 views

How to reboot a server with a LUKS encrypted partition

I have a CentOS 6 VM on which I used the following shell script for installing and configuring MongoDB to use a secondary LUKS (dm-crypt) encrypted disk for its database files: #!/bin/bash -e # Set ...
1
vote
0answers
17 views

MIME RSA encryption

i have this scheme how can i use session-key in MIME to encrypt the message? i used this command but i don't think it is correct openssl enc -e -des3 -salt -in MSg_sign.txt -out session.txt can ...
1
vote
0answers
25 views

mount: No such file or directory with encrypted recovery

I have destroyed my Mint Linux installation. I just wanted access to my remote storefront. So what happened was I was having trouble with ICEauthority file in my home directory. So following ...
1
vote
0answers
29 views

Auto-mounting encrypted home folder from previous installation

I have been using Linux Mint till a few days ago, when I installed OpenSUSE LEAP 42.1 instead. In order to keep my existing (and pretty large) user home folder (/home/user), I ordered the SUSE ...
1
vote
0answers
40 views

Unable to activate new encrypted swap partition

First off, I did not reboot and would not like to, it's a server. It is running Debian Jessie 8.4 with kernel 3.16.0-4-amd64. I followed these steps: apt-get install cryptsetup -> no problem ...
1
vote
0answers
42 views

Encrypt casper-rw file for use with Easy2Boot

I have created an Easy2Boot multiboot USB drive. Currently it contains two ISOs - Kali Linux 2016 and Linux Mint. I have created persistent ext2 filestore for both ISOs and configured them using the ...
1
vote
0answers
69 views

how does systemd activate encrypted swap file on alternate partition?

I have 2 partitions: / and /data. My swap file is encrypted at /data/swap. So /etc/crypttab looks like: root_crypt UUID=6666 none luks swap /data/swap /dev/urandom swap And /etc/fstab looks like (...
1
vote
0answers
50 views

OpalCryptoErase.exe for linux

I have a tool name OpalCryptoErase.exe which lets me reset the encryption keys on my opal ssd disk. Of course I lose my data along the way but I don’t care I just want to reset the disk to the initial ...
1
vote
0answers
106 views

Error booting kernel 4.5.0-rc1 on Encrypted HDD

I cloned the Git tree of the mainline Linux Kernel and compiled it(version 4.5.0-rc1). After compiling with default configuration (make defconfig) I installed it. In the grub menu I can select this ...
1
vote
0answers
97 views

How can I mount Android encrypted FS on desktop Linux?

There is "vdc" command line utility in Android. Is there something similar for regular desktop Linux? Reading of https://source.android.com/security/encryption/ didn't help.
1
vote
0answers
36 views

Does Linux require the decryption and login passwords to be the same?

thanks for looking at this question. I have seen several other questions about eOS login loops--none solved my problem, including upgrading the kernel, deleting .Xauthority, etc. Last night I changed ...
1
vote
0answers
62 views

How do I encrypt a key for use with Linux's key retention service?

In Linux, an "encrypted" key can be created for use with keyctl by executing a command like keyctl add encrypted evm-key "new user:kmk-user 32" @u. The content of the key, when exported to a file, ...
1
vote
0answers
29 views

Encrypt entire disk

I have multiple OS on my machine (debian, ubuntu and windows) I already have ubuntu and windows disks encrypted separately. I'm thinking about backing up all my data and reinstalling everything this ...
1
vote
0answers
108 views

large file encryption with ssh's RSA key pair?

I'd like to work out a way to encrypt arbitrarily large files using users' RSA key pairs they generated for SSH purposes. They have standard id_rsa and id_rsa.pub files, and a PEM version of the pub ...
1
vote
0answers
45 views

Can you create a read only encrypted partition that root cannot write to (or remount)?

I have an encrypted partition that I would like to be mounted as read only. The catch is that I do not want a root user to be able to remount the partition as read-write unless they have the ...
1
vote
0answers
149 views

Fedora 22, disk-encryption passphrase, POST fails, dracut

I was in the process to install Fedora 22-3 on an Acer desktop with Windows 8 to create a dual-boot system. I believe to have followed reasonable guidelines on how to do this. (I reached up to point ...
1
vote
0answers
91 views

Encrypted boot drops to shell, how to set LVM crypttab consistently? 'ALERT! {logical volume path} does not exist'

I used Luks to encrypt my whole hard drive, and created that sda drive as a physical volume. Under that volume, I create a volume group vg00 with my 3 logical volumes lv00_root, lv01_home, and ...
1
vote
0answers
67 views

Encryption Using Xubuntu with a Keyfile and Password

I am somewhat of a novice with Linux. I was going to use Veracrypt for full disk encryption and then boot to Xubuntu after using a keyfile and password (not even sure if this is possible with ...
1
vote
0answers
64 views

/etc/crypttab for anyusb?

On my LUKS-encrypted machine, I have edited my /etc/crypttab to inform the system that a keyfile is on a pendrive. I did this by adding a line in /etc/crypttab, using the UUID of my encrypted HDD, and ...
1
vote
0answers
135 views

How do I encrypt (password protect) a PDF without encrypting the metadata?

It seems that the encryption provided by pdftk(1) is the level supported by Acrobat 5 (I added a password to a PDF file using pdftk then opened it in Acrobat Pro 9 and examined the security settings; "...
1
vote
0answers
241 views

fopen problem when mounting ecryptfs filesystem

After an unrecoverable fsck problem the mount of my encrypted /home/me filesystem isn't possible any more. The visible effects are: a) logging in though most of the selectable GUI window managers ...
1
vote
0answers
151 views

Why doesn't Linux IPSec implementation support fragmentation before encryption?

I am trying to address an issue where ESP packets are getting fragmented as after adding the ESP header the MTU size is exceeded. The solution—which is what everybody does—is to do the fragmentation ...
1
vote
0answers
682 views

how to decrypt ecryptfs file with private key instead of passphrase

I have an encrypted share folder on my synology NAS DS413 (which uses ecryptfs). I can manually mount the encrypted folder and read the decrypted files without issue, using synologies GUI. For some ...
1
vote
0answers
123 views

How to avoid session login failure with ecryptfs

After encrypting my /home directory with the migrate-home ecryptfs-utils script I can't log in to an XFCE session on my Manjaro system from the normal login screen. If I try to, the session is ...
1
vote
0answers
542 views

Centos 7 - Encrypted installation won't boot

I installed CentOS 7 netinstall (minimal installation) on a VServer with the following partitions: /boot - 200MB - XFS / - 50GB - XFS Encrypted swap - 512MB - swap Encrypted I ...
1
vote
0answers
181 views

How can I tell If a file is NTFS encrypted?

When I copied some files from work onto my external hard drive it copied them as encrypted files. NOTE: The drive is not encrypted - just individual files. Now when I try to copy files from the ...
1
vote
0answers
168 views

Transparent encryption of bash history?

I'm not sure if anyone has done such things before. I want bash history to be fully encrypted, prompt for password when in interactive session. Is that possible?
1
vote
0answers
92 views

What keys are generated during Debian 7.4 (Wheezy) installation?

We are concerned lest /dev/random (or /dev/urandom) be hit too early in the installation process for adequate entropy to be developed. In a basic Debian 7.4 installation (SSH Server and basic ...
1
vote
0answers
255 views

Reverse ssh-agent forwarding and unlocking remote keys with your local keys

So the following two things should both be possible to do with ssh the question is just how difficult they would be and I'm hoping someone can give me an easy answer. 1) Suppose I have several ...
1
vote
0answers
44 views

How do I encrypt the main partition of a SIFT (Ubuntu 9.10 variant) install?

I've got SIFT (based on Ubuntu 9.10) installed on a work laptop. We're trying to encrypt the entire installation (root partition and swap), which is apparently doable using LUKS, but I'm having some ...
1
vote
0answers
177 views

Installing IPSEC on FreeBSD

how to install IPSEC on two FreeBSD 9.0 machines to can send an encrypted packets between them , and let them read the encrypted packets .