encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
13
votes
7answers
6k views
Linux boot loaders supporting full disk encryption?
Are there any Linux boot loaders supporting full disk encryption (a la TrueCrypt). I know there was work towards adding encryption support to GRUB2, but this does not seem to be ready yet. Any other ...
12
votes
4answers
5k views
SSH to decrypt encrypted LVM during headless server boot?
When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive.
After choosing that option, I am prompted for my password during boot to decrypt ...
11
votes
3answers
4k views
How should one set up full-disk encryption on OpenBSD?
Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux?
I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
9
votes
3answers
3k views
Full disk encryption with password-less authentication in Linux
I have a fairly standard disk encryption setup in Debian 5.0.5: unencrypted /boot partition, and encrypted sdaX_crypt that contains all other partitions.
Now, this is a headless server installation ...
9
votes
3answers
573 views
Portable encrypted container
I want to store some data encrypted to carry around with me (this includes some scans of relevant paperwork, my TAN List for online banking, my gnupg and ssh keys and stuff like that). So not really a ...
8
votes
3answers
3k views
Encrypting file only with SSH -priv-key?
Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
7
votes
2answers
592 views
What encryption does vim -x use?
I read man vim, :h -x and :h encryption none of this actually says what algorithm it's encrypted with.
7
votes
3answers
2k views
Simplest way to password protect a directory and its contents without having to create new files?
I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
7
votes
3answers
766 views
Encrypt OfflineIMAP Password
I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process).
From the documentation, it seems the only way to ...
7
votes
4answers
1k views
Receive Pop/IMAP email and then forward as encrypted to gmail
Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the ...
7
votes
1answer
282 views
Encrypted Booting
I want to boot the Linux from the /boot partition, and also want to encrypt this /boot partition.
[ AFAIK, Grub is unable to find the kernel and initrd from an truecrypted partition or cryptsetup ...
7
votes
2answers
125 views
Signing/Checksumming the kernel to prevent/detect manipulation
All my partitions are encrypted (/ and /home), but the /boot partition has to remain unencrypted and is open for manipulation. I was thinking about hashing the kernel on bootup and checking the result ...
6
votes
3answers
569 views
Any reason for encrypted /?
I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
6
votes
2answers
534 views
I/O-overhead of dm-encrypted device?
What would be the Read-/Write-overhead when using dm-crypt (LUKS) as full disk-encryption (including root partition) on a Linux-Desktop (Ubuntu)?
I plan to stack it like so: LUKS > LVM > ext4
The CPU ...
6
votes
2answers
350 views
How does pre-boot authentication with disk encryption work technically?
I'm looking for a solution to fully encrypt my dual-boot SSD drive (it's still new and empty, and I want to set up encryption before I put anything on it).
While there's a lot of chaos on the web ...
6
votes
1answer
271 views
How do I set up an encrypted swap file in Linux?
How do I set up an encrypted swap file (not partition) in Linux? Is it even possible? All the guides I've found talk about encrypted swap partitions, but I don't have a swap partition, and I'd ...
6
votes
2answers
386 views
Optimize performance for encrypted disk
Recently I tried to copy 200GB to a 1TB external / USB2 / encrypted disk and it took 36 hours. The same copy when the disk was not encrypted took no longer than 1 hour.
I am using dm-crypt (LUKS) ...
5
votes
2answers
844 views
Which partitions should I encrypt?
My laptop is currently running Windows and Fedora, but I'm planning to install Arch Linux as my sole OS soon. This current setup is using whole disk encryption through TrueCrypt, but I'm unsure if it ...
5
votes
1answer
1k views
LVM + LUKS + SSD + Gentoo — making it all work together
I'm finding a lot of conflicting information out there, and as of yet haven't found anyone trying to pull together all of the components that I'm trying to do, so I'm hoping someone who understands ...
4
votes
2answers
323 views
Is a journaling filesystem a good idea with a dm-crypt encrypted drive?
I was looking at dm-crypt and have seen that you can use whatever filesystem you like on top of the encrypted drive. So I was wondering if a journaled filesystem is a good idea as opposed to a ...
4
votes
2answers
245 views
conceal home folder completely - is ecryptfs the right choice?
On my Debian-Testing-System, I want to completely conceal the home folders. That means, I not only want the data to be encrypted, but I also want to preclude determining any (or most) information from ...
4
votes
1answer
188 views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
4
votes
3answers
1k views
How to create SHA512 password hashes on command line
In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
4
votes
4answers
727 views
Best way to make encrypted backups while preserving permissions to a windows file system
For my home network I wanted to buy a NAS which supports disk encryption and NFS since it is important for me that the backup is encrypted but also that it preserves owner, groups and permissions ...
4
votes
2answers
223 views
Password protecting a system file? (e.g. /etc/resolv.conf)
I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the ...
4
votes
2answers
727 views
RHEL6 LUKS with TPM support?
I'm surprised that this question is not asked more frequently, but (in RHEL) does LUKS support TPM's the way that Windows BitLocker does? If so, how is this feature implemented, and does it provide ...
4
votes
1answer
544 views
How to use keyfiles,for ZFS whole disk encryption?
Does anyone have a working implementation using keyfiles, preferably on SD Card, instead of a prompt for ZFS? I know how to do this with linux LVM/LUKS. In my opinion the FreeBSD full disk ...
4
votes
1answer
390 views
How to edit a .gpg file with vi?
So I created a gpg encrypted file with password:
gpg -c passwords.txt.gpg
how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted ...
4
votes
4answers
821 views
Recovering overwritten LVM metadata
Yesterday I was trying using the Debian install in rescue mode in order to fix my Grub (The menu-item for Debian was suddenly gone).
Now I wasn't able to fix it and didn't have a lot of time, so I ...
4
votes
1answer
744 views
Use aes-ni in Debian
I am considering building a small home server. I'd like to encrypt some folders on this server, therefore using the instruction set aes-ni which is supported by newer (mostly Intel) chips would be ...
4
votes
1answer
549 views
How to decrypt single EncFS encrypted files?
Is it possible to decrypt single EncFS encrypted files with access to .encfs6.xml configuration file and without the proper directory structure it was created?
With a little help from google I found ...
4
votes
2answers
276 views
How to mount an IronKey in OpenBSD?
Being that it's proprietary, maybe this isn't possible but I was wondering if anybody was successful at mounting one of these in OpenBSD.
I mounted the two partitions the USB drive creates which are ...
4
votes
2answers
114 views
How to lock a directory?
I want to block any kind of access to a certain directory unless a password is provided. It could be my root or account password.
The directory is residing on an NTFS partition, and this method needs ...
3
votes
4answers
2k views
How can I get a base64 encoded shaX on the cli?
sha1sum outputs a hex encoded format of the actual sha. I would like to see a base64 encoded variant. possibly some command that outputs the binary version that I can pipe, like so: echo -n "message" ...
3
votes
3answers
283 views
Encrypt a password the same way mysql does
I've created a user ... but forgotten the password
mysql> create user 'blayo'@'%' identified by 'right';
Which Linux command line tool can encrypt the password the same way mysql 5.5 does ?
...
3
votes
1answer
208 views
How to disable timeout of password prompt for partition decryption during boot?
I have a computer running OpenSUSE 12.1, 64-bit, default install.
How it works currently:
I turn on the computer
It goes through the boot process
At some point during boot, I am asked for password ...
3
votes
1answer
77 views
Encryption of home directory for securing data after harddisk corruption
Always when I install Linux OS (e.g. Ubuntu), there is a possibility to encrypt the home directory. I was asking myself why is this useful.
Is it good in the case when my harddrive is corrupted and I ...
3
votes
2answers
496 views
On Mac OS X, how to encrypt a small folder and copy that to Google Drive or DropBox?
On Mac OS X, right now I use the following to back up a small project folder to a USB Flash drive:
alias a='alias'
a dateseq='date "+%Y-%m-%d %H:%M:%S"'
a backup_proj='cp -a ~/code/MyProj ...
3
votes
2answers
624 views
How to automatically encrypt, sign, and forward root's email?
I've recently been teaching myself about the BSDs and decided to pick up a NetBSD VPS. I don't always log in to this box every day (it's not actually doing anything that important), but I'd still like ...
3
votes
3answers
516 views
I want to use a bluetooth keyboard during initram
I use encryption on my hard drive. To boot I need to type a password during initram to decrypt the root partition. I'm running Archlinux on a tablet PC without physical keyboard (only Bluetooth). For ...
3
votes
2answers
1k views
Encode directory with GnuPG
Is there any way to encrypt the whole directory using gpg? It accepts only file as input argument. But I need to encrypt a lot of files on external HDD.
3
votes
1answer
706 views
Tunnel traffic through another machine over ssh
I want to be able to route a portion of my traffic through another machine over SSH. For example, is it possible to browse the web through the ssh tunnel and also browse the web through your LAN ...
3
votes
1answer
74 views
What's the easiest way to decrypt a disk partition?
I made a mistake of encrypting the entire LVM physical volume (contains both home, root, and swap) when installing a CentOS 6.4 (2.6.32-358.6.1.el6.x86_64) box. I soon came to realize that moving ...
3
votes
2answers
357 views
Emacs auto encryption and gpg
Emacs encrypts/decrypts .gpg files automatically. But recently I have lost the ability to decrypt files encrypted by the Linux gpg tool and vice versa.
I use:
passphrase symmetric encryption
gnupg ...
3
votes
2answers
183 views
LUKS encryption for tape media?
I was wondering, if it was possible to use LUKS encryption with tape drives, QIC for instance.
I'm using LUKS for USB drives and internal disks, even DVDs and CDROMs. But I was thinking of maybe ...
3
votes
1answer
614 views
Migration from loop-aes to cryptsetup
I've upgraded my linux installation to kernel 2.6.38-2 (Debian testing). With the new kernel, loop-aes does not compile, so I cannot mount my encrypted volumes. I heared that it is possible to use ...
3
votes
1answer
157 views
Can linux use a mix of SHA-1 and CRYPT passwords?
We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
2k views
How to check if my wireless connection uses AES or TKIP from a terminal?
I have a wireless router that has settings to use AES, TKIP or AES+TKIP encryption for wireless connections.
My Linux-based device does not like AES (it drops out from time to time), my girlfriend's ...
3
votes
1answer
375 views
AES-NI not passed to guest in Virtualbox
I'm trying to use encryption inside a virtual machine. The problem is that the AES-NI doesn't seem to be passed to the guest virtual machine.
I have Vt-x enabled.
This is my host cpuinfo:
processor ...
3
votes
3answers
636 views
RAID5 recovery trying with “mdadm --create … missing”
First how I got in this situation:
I had an RAID5 array with disks each 2TB (external USB-disks), I then wanted to create a larger encrypted array. Therefore I got 2 additional disks (also 2 TB each) ...
