LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

0
votes
1answer
234 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
0
votes
1answer
17 views

Upgrading Linux (Fedora) with LUKS encrypted volume

I have FC18 on a LUKS/dm-crypt encrypted hard disk. I'd like to upgrade the system via a FC20 dvd. I looked around a bit and it seems that upgrading the system via the installation procedure from the ...
3
votes
2answers
28 views

Can I use scrypt to hash for LUKS?

Can scrypt be used as the hashing algorithm for LUKS? Can I tune its parameters? How can I do this?
1
vote
0answers
12 views

TPM passwordless boot

I'm trying to create device with CentOS6, encrypted disk (with LUKS), TPM module and TrustedGRUB to boot securely and without interaction. I'm following instructions from ...
3
votes
1answer
444 views

BCache and disk encryption

I recently bought a new laptop with a 16Gb mSATA SSD cache drive. I haven't used that one yet. I have, however, opted for Ubuntu 13.04 with "Full Disk Encryption" for the main partition (is that ...
3
votes
0answers
40 views

forgot to luksClose usb persistent partition, is this a problem?

Following the Kali Linux documentation for "Adding USB Persistence with LUKS Encryption", I created a persistent partition and encrypted the volume with: cryptsetup --verbose --verify-passphrase ...
2
votes
1answer
101 views

Boot resolution change in initramfs on laptop monitor and HDMI monitor

I have Linux Mint 17 on my laptop. Also I have 22'' monitor connected to laptop using HDMI cable. My disk if fully encrypted with LUKS and LVM. On boot I get graphical prompt to enter password for ...
1
vote
0answers
83 views

Accessed a TrueCrypt container without TrueCrypt. What dangers await?

I've got a TrueCrypt volume. In light of the unexpected demise of TrueCrypt, I've been trying to figure out what to do (reading lots of HOWTO websites). I'd like something that is simple and can work ...
1
vote
1answer
29 views

Backup LUKS (cryptsetup Command) partition or volume

Can you create a file container/volume in LUKS in the same way that you could do with Truecrypt? Otherwise, how can you backup a LUKS partition? Do you have to clone it, for example with dd? or backup ...
1
vote
1answer
33 views

LUKS: Enter passphrase and nothing happens

I've installed gentoo on my new laptop. I've got an LUKS-encrypted root partition (/dev/sda3). Cryptsetup (USE="gcrypt") is installed. Essential cryptographic API is compiled in kernel. Kernel and ...
2
votes
0answers
46 views

LUKS: encrypted device is much smaller than its host partition

To store personal data, I have encrypted a partition with LUKS but, according to the file manager, the resulting encrypted device is much smaller: 334 GB versus 385 GB. However, the Disk Utility in ...
1
vote
1answer
42 views

Filesystem types for encrypted partitions

I wish to encrypt two external hard drives using dm-crypt/LUKS for whole-disk encryption. I want one hard drive to have an ext4 filesystem for Linux use only, and the other to have an NTFS filesystem, ...
0
votes
1answer
85 views

How do you encrypt a USB drive partition with the Twofish cipher and SHA-512 hash without using TrueCrypt? [closed]

I've been trying to string together the right flags in cryptsetup: cryptsetup -y -h sha512 -c twofish-xts-plain64 -s 512 luksFormat /dev/sdx But it hasn't been working. When I enter the command ...
10
votes
2answers
1k views

How to open a port early in boot process to unlock LUKS via SSH

I have a fully encrypted server running Debian 7 and have set up dropbear and busybox to unlock the LUKS container via SSH (as described in this tutorial and in this U&L answer). Unfortunately, ...
4
votes
3answers
75 views

Can I overwrite LUKS partition with it's decrypted content?

I have HDD with my data (partial backup of most important data available on other HDD), currently it's formatted as Ext4 over LVM over LUKS. I want to remove LUKS layer, but reformatting and data ...
2
votes
0answers
48 views

expanding boot, moving LUKS root

GPT > Partition2 > LUKS > btrfs I need some additional space for my boot volume, so far I did: Shrink my btrfs volume by 250MB. btrfs resize -250M / Shrink the LUKS root volume cryptsetup ...
6
votes
1answer
159 views

How to have Linux wipe/randomize/sanitize RAM at shutdown?

For mysterious reasons I still double boot sometimes into Windows. My problem is that I fear that information may leak because the RAM memory is accessible to Windows. (the Linux partitions are ...
3
votes
1answer
190 views

How to open multiple LUKS volumes with key entered in initramfs?

I have a Debian 7.4 (stable) based server configured to use an encrypted (RAID1 + LVM) root partition (/boot is un-encrypted regular partition) to which I installed dropbear SSH server so I can ...
2
votes
1answer
71 views

How can move a LUKS container from the middle of a partition to the beginning?

For the tl;dr, skip to the bottom. I have a dual-boot setup with Mac OS X at the beginning of my drive and three GNU/Linux partitions at the end of the drive. I don't have the relevant machine on ...
3
votes
1answer
319 views

How to set laptop screen brightness just after boot with full disk encryption

my girlfriend bought Lenovo Essential G500 i5-3230 and I installed Linux Mint 16 on it with full disk encryption. It is standard installation with encryption using dmcrypt and LUKS. But there is a ...
3
votes
3answers
157 views

How can I get a HASH of the LUKS master key?

From: https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions 6.15 Can I clone a LUKS container? You can, but it breaks security, because the cloned container has the same ...
3
votes
1answer
319 views

How to decrypt LUKS with the known master key?

From: https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions CLONING/IMAGING: If you clone or image a LUKS container, you make a copy of the LUKS header and the master key will stay the ...
0
votes
2answers
47 views

How to force the change of the LUKS password in every 90 days?

Using an Ubuntu 12.04 or a Red Hat Enterprise Linux Desktop 6 for Desktop, how can we force the users to change their LUKS passwords at every 90 days?
2
votes
1answer
83 views

Auto de-crypt all LUKS partitions in Debian

I use Debian Wheezy and have all partitions encrypted using LUKS, except /boot. I want to decrypt the partitions automatically without having to type the password in each of the 7 encrypted partitions ...
4
votes
3answers
219 views

Poor IO due to LUKS/Software RAID/LVM ordering?

I'm trying to determine if I should re-setup my RAID array due to poor IO performance. First off, the system: i7 920 4 4TB WD 5400 Green drives CentOS 6.3 host Secondly, the disk setup: ...
1
vote
1answer
1k views

luksOpen: No key available with this passphrase

I've created a encrypted volume with LUKS at home and was looking to use it at work too. Unfortunately, that's not possible. Whyever, I'm unable to access the encrypted data on any other computer than ...
1
vote
1answer
110 views

Auto-delete LUKS Key-slots

After installing Kali with the Nuke feature I'm wondering if there's an easy way to limit failed login attempts by simply erasing the LUKS keys-lots. EDIT: I'm asking with the idea in mind to store ...
2
votes
1answer
284 views

Decrypt second encrypted LVM during headless server boot?

I've followed this question https://unix.stackexchange.com/questions/5017/ssh-to-decrypt-encrypted-lvm-during-headless-server-boot and successfully remotely decrypted my root drive. However, I have a ...
3
votes
1answer
85 views

File containing ext filesystem

Let's suppose I create a file, map it to /dev/loop0, and create a LUKS partition inside dd if=/dev/zero of=myfile bs=1M count=1000 losetup /dev/loop0 myfile cryptsetup -c aes-cbc-essiv:sha256 -s 256 ...
0
votes
0answers
59 views

LUKS - changing passphrase with /dev/mapper/fedora-root

I would like to change my passphrase in LUKS, so I started with typing mount | grep 'on / '. The result was /dev/mapper/fedora-root on / type ext4 (rw,relatime,seclabel,data=ordered). So next as usual ...
5
votes
1answer
233 views

Trying to understand LUKS encryption

I decided to encrypt my root partition with LUKS+LVM. My ThinkPad setup: Samsung 830 128GB SSD 750GB HDD Core 2 Duo 2,5 GHz P9500 8GB RAM But the more I read, the less I understand about those ...
0
votes
0answers
249 views

Problem installing ArchLinux on LVM on a LUKS setup via archboot

I've used archlinux before, and I've decided to have it enccrypted. I use BIOS. I used the latest vesion of archboot. I made an LUKS setup, then made lvm volume group and two ext4 partition in it for ...
3
votes
1answer
199 views

parted: create new partition

I have a 3TB disk, and I understand I have to use parted if I want to create a partition bigger than 2TB. All right then. parted /dev/sdb (parted) mklabel gpt (parted) mkpart primary ...
3
votes
3answers
379 views

Best practice to backup a LUKS encrypted device

What's the fastest method to backup and restore a luks encrypted device (e.g. a full encrypted usb-device to a image-file). The usb-device can be decrypted/accessed. I'm looking for a solution to ...
0
votes
2answers
259 views

How can I extract the hash value of a LUKS device?

For LUKS devices I know that hashes are stored somehow in the partition header (I don't really know what this means). But I don't know how to print the hash value in this case. For example in a ...
1
vote
1answer
184 views

How to change the hash-spec and iter-time of an existing dm-crypt LUKS device?

How can I change the hash-spec and iter-time of an existing dm-crypt LUKS device? Clearly I can pass the options if I create a new device, for example something like this: sudo cryptsetup ...
3
votes
2answers
389 views

Why does LUKS need to generate hash values?

If you create a new LUKS device, you can specify the option -hash and -iter-time. For example like this: sudo cryptsetup luksFormat --cipher aes-cbc-essiv:sha256 --key-size 256 --iter-time 2100 ...
3
votes
0answers
78 views

How to use a samba login to mount a luks container?

Our server has an (dm-crypt/LUKS) encrypted project directory which is currently mounted via SSH before its samba share can be accessed - and obviously no one remembers to unmount it afterwards. ...
2
votes
0answers
60 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
1
vote
1answer
181 views

Cannot mount filesystem under luks. Device does not exist

I made one big luks device and re-used it on my debian install, then i ran into some boot problems and i need to acess the filesystem. The problem is, i decrypt the luks device and when i try to ...
1
vote
2answers
314 views

Provide passphrase to plymouth ask-for-password from command line

I'm working on booting a headless server (Fedora 16), entering the passphrase to decrypt the root disk (LUKS) over SSH using dropbear. I've got dropbear all working: I can SSH to the server while it's ...
0
votes
0answers
441 views

Install Zentyal 3.2 on btrfs with raid 1 and luks

I want to install Zentyal 3.2 with btrfs, raid1 and luks on a server with 3 harddrives. at first i created 2 partitions on each device (sda,sdb,sdc). the first with 1G, and the secound with the rest. ...
3
votes
1answer
171 views

How can the root file system be accessed to launch cryptsetup to allow access to the root file system?

I have got laptop with full disk encryption. There is a /boot partion which is not encrypted and the other partition /dev/sda5 is. In order to decrypt, it asks me for the passphrase which is then ...
1
vote
1answer
79 views

Can I migrate a LUKS partition from a passphrase to a keyfile?

The title says it all. Let's say I have a LUKS-formatted partition, and it's secured using the passphrase "test123". Can I migrate this partition to a key-based mechanism, without loss of data?
3
votes
1answer
158 views

cryptdisks_start: precheck failed: the device contains a filesystem type crypto_LUKS

I'm trying to use cryptdisks_start to open a LUKS device that is defined in my /etc/crypttab. Unfortunately, the command fails with the following error message: martin ~ # cryptdisks_start ...
2
votes
2answers
124 views

Any reason not to use LUKS on a backup drive?

I have my hard disk encrypted with LUKS, but I make regular backups to an unencrypted external harddrive. Is there any reason I shouldn't setup LUKS on my backup drive as well? Obviously, the big ...
3
votes
1answer
6k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
2
votes
1answer
236 views

Are remote LUKS volumes mounted locally with sshfs made visible to remote users?

I created an encrypted volume with LUKS and uploaded it to a remote directory on an untrusted host. I can mount it locally though. I first mount the remote directory locally with sshfs and then open ...
1
vote
1answer
70 views

mount other encrypted volume on wrong password entry

I have fully encrypted my laptop using dm-crypt and luks. So If I start my laptop I was prompted for a password before init will start. This works just fine. The problem A possible attacker will ...
3
votes
1answer
187 views

Open luks-encrypted partition from virtual DomU LVM disk containing another LVM

I've gotten myself in a bit of a bind, here. A while ago I set up an encrypted Unbuntu 13.04 under Xen. It's virtual disk is an LVM LV. This LV was presented to the DomU as a (whole) physical disk ...