Skip to main content

Questions tagged [disk-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
25 views

Ext4 filesystem in LUKS container - container size calculation

On my Linux system I have a file "1gb.file" that is 1073741824 bytes in size. This file I'll put into a LUKS container ("1gb.file.crypt") with ext4 filesystem inside. What size ...
user447274's user avatar
0 votes
0 answers
18 views

"Insmod cryptodisk" is missing from grub.cfg?

I am following this guide this guide on /boot encryption for my Ubuntu system. I am currently on section 3, after deciding to not complete section 4. (i.e, I don't wish to avoid multiple password ...
SuperDialga's user avatar
1 vote
0 answers
36 views

Security implications of avoiding extra password prompt in /boot encryption? Do GRUB and Linux compare against the same hash?

I am following this guide on full disk encryption, including /boot. Section 4 involves placing a key that can decrypt /boot and / into the initramfs image contained in /boot, so that once you unlock /...
SuperDialga's user avatar
0 votes
2 answers
30 views

How to make the key slot to unlock at GRUB stage to be the first active one?

I am following the Debian dev's guide to full disk encryption to secure an Ubuntu machine and I am confused at section 3. It states: Note: cryptomount lacks an option to specify the key slot index to ...
SuperDialga's user avatar
0 votes
1 answer
45 views

GRUB password seems useless, so why even bother?

My system has full disk encryption except for /boot. I've set a GRUB password by following this post, but then was able to disable it by booting into Kali Live and running: mkdir /mnt/dev/sda2 sudo ...
SuperDialga's user avatar
3 votes
2 answers
378 views

How to create an encrypted RAM-disk as a regular user?

Is it possible to create an encrypted RAM-disk as a regular user (without requiring sudo). (with FUSE or similar tools)? Note that the use-case here is to edit sensitive data, there are of course in-...
ideasman42's user avatar
  • 1,323
0 votes
0 answers
19 views

GNOME Disks Unlock at System Start Up Debugging

I have been attempting to set my Micro SD card to automatically unlock once I login. However, it does not work as planned. Below is how I set up the encryption with GNOME Disks. Would any of you know ...
Kitty Cat's user avatar
0 votes
0 answers
28 views

What is correct cipher name for the cryptsetup to use HCTR2 wideblock encryption?

By googling, trial and error I came up with the following string: cryptsetup benchmark -c aes-xctr-plain64 but I'm not sure whether it is correct. The cipher spec aes-xctr-plain64,polyval-generic ...
lvd's user avatar
  • 143
0 votes
0 answers
36 views

Grub cryptomount with BtrFS RAID: how?

I'm on Ubuntu 23.10, with three LUKS disks (whole disk, no partitions). Inside of them is a btrfs RAID1. /boot is combined with /root, inside of LUKS. Having done grub-update and then grub-install ...
Diagon's user avatar
  • 680
2 votes
1 answer
42 views

Is there any e4crypt kernel side documentation?

I'm trying to understand e4crypt and fscrypt, and also how they differ. But it is hard to find documentation on e4crypt other than the command line tool man page and some old tutorials. Is there any ...
JanKanis's user avatar
  • 1,131
0 votes
0 answers
61 views

How do you decrypt an f2fs partition?

I have got an encrypted f2fs image, I know the password, I'm able to mount it via sudo mount -t f2fs mmcblk0p64.img /mnt/mmcblk0p64 so it doesn't appear broken or anything, and f2fscrypt recognizes ...
sezanzeb's user avatar
  • 407
1 vote
1 answer
32 views

How to create a dm-crypt block device in /dev/mapper without wiping it?

I can create a dm-crypt filesystem with: root@smarcimx8mq4g:~# cat /data/caam/randomkey | keyctl padd logon logkey: @s 731358804 root@smarcimx8mq4g:~# dmsetup -v create encrypted --table "0 $(...
fadedbee's user avatar
  • 971
0 votes
0 answers
13 views

Ubuntu 23.11 + TPM Full Disk Encryption + Esxi/VMWare

Has anyone gotten TPM + FDE working on a VM in ESXi? I got through the installation but after reboot the system would not start, a screen comes up with /EndEntire and then the following errors: When ...
gclark18's user avatar
  • 101
0 votes
0 answers
101 views

Issues encrypting root partition with Luks

I was given a "golden image" of an out of date production server and was instructed to update and harden the OS for production delivery. The issue I am running into is that LUKS. I am using ...
Rob K's user avatar
  • 1
0 votes
1 answer
89 views

ZFS remove password

I have an encrypted ZFS partition, but I'd like to remove the password not to type any password when booting. Is it possible, ideally without decrypting each file one by one? For instance what happens ...
tobiasBora's user avatar
  • 4,301
1 vote
0 answers
24 views

Accesing encrypted HDD after reinstalling OS (Linux)

I have two drive on my PC: SSD HDD OS (Debian) was installed on SSD. HDD was formatted and encrypted from Gnome Disks from installed OS. In Gnome Disks information about HDD looks like: Now I need ...
vasili111's user avatar
  • 113
0 votes
0 answers
39 views

encrypting a remote VPS, and letting it boot without entering a password

I Have rented a VPS and I want to encrypt it's data, at least on the /home directory, because I don't want the owners of the VPS to have a look at the content of my data. But the server already has ...
Abd Alhaleem Bakkor's user avatar
1 vote
1 answer
111 views

erase hardware-encrypted SSD

Disclaimer I'm not robbing someone, didn't rob someone in the past and don't plan to do so anytime soon. Situation Imagine I own a Samsung 2.5" SSD (850, 860 or the like) which is encrypted. If ...
Tux-Of-War's user avatar
1 vote
0 answers
299 views

LUKS password correct, but not accepted

I am attempting to install Kali on a laptop, which should normally be straightforward. However, on this particular device, the Kali installer errors upon writing the partition changes to disk for some ...
ExecutionByFork's user avatar
0 votes
1 answer
35 views

Deleted LUKS Disk

I had a dual-boot laptop setup with an encrypted BIOS. I then removed my Manjaro installation and deleted all of the partitions, including the Manjaro partition, which included my LUKS disk. When I ...
user avatar
0 votes
1 answer
191 views

Is it risky to use hibernation in Ubuntu?

I've read that hibernation often causes trouble in Linux environments, e.g. system fails to wake-up or freezes and sometimes even refuses booting after reset. I really like the idea of hibernating the ...
programonkey's user avatar
1 vote
1 answer
305 views

How to configure waiting time for LUKS password

My /home partition (on Linux Debian testing) is encrypted with LUKS. $ mount|grep home /dev/mapper/home-crypt on /home type ext4 (rw,relatime) Configuration via /etc/crypttab: home-crypt UUID=...
lcheylus's user avatar
  • 213
0 votes
0 answers
495 views

Encrypted partitions with Ubuntu 22.04, boots to initramfs prompt

I have painstakingly followed the Ubuntu help doc for setting up encrypted partitions located here. After the final step (remove USB and reboot), the system boots normally, asking for password. ...
a coder's user avatar
  • 3,263
1 vote
1 answer
142 views

LUKS Encryption - Readable content

In LUKS, only files get encrypted, not the entire drive. So my question is, what is accessible if just files are encrypted. For example: Are file paths or file names visible? (Eg: For Enrypted ZIP ...
user82375897897928347's user avatar
0 votes
0 answers
2k views

Full disk encryption (and decrypt on boot) for existing Debian installation (bookworm)

I have an existing Debian system and there is a need to encrypt the disk at rest. Searching online (and here) I see that the only way to do it is to do a fresh installation, this time with LUKS on. I ...
py_script's user avatar
  • 378
0 votes
0 answers
189 views

How to recover data off of a broken linux system with full-disk encryption

I am running Manjaro. I have it set up with full-disk encryption through LUKS. Booting up my computer I noticed some things were weird, like some of my settings had reverted to their default. I tried ...
Medynsky's user avatar
1 vote
1 answer
38 views

How to create an entire backup of a disk to fall back to before performing a dist-upgrade?

I am preparing a dist-upgrade. Before I do that I want to make a backup of my entire disk so that even if the upgrade fails I can fall back to a backup. I have two SSDs, /dev/nvme0n1 which is the ...
fu8834's user avatar
  • 11
1 vote
1 answer
102 views

Does LUKS disk encyption break SLC caching on QLC/TLC SSDs?

It seems that modern SSDs degrade in performance the more data they are holding. My understanding is that this is because manufacturers put less and less storage cells on the SSDs relative to their ...
Forivin's user avatar
  • 887
0 votes
2 answers
617 views

Check if a block device is Bitlocker encrypted

Ubuntu 22.04 can decrypt and read a BitLocker-encrypted device/partition without a need of installing any additional software (older releases can as well, perhaps, but I have not seen it) How can a ...
Svižný Svišť's user avatar
2 votes
1 answer
701 views

Does the UUID of a LUKS partition change after re-encryption?

I want to re-encrypt a system and swap partitions on EndeavourOS. The issue is that in many files (crypttab, mikinicpio, fstab, etc) the exact UUID of the LUKS partition is built in, meaning I would ...
user avatar
1 vote
1 answer
911 views

Second disk encryption using LUKS

I'm looking for a clear tutorial on how to do this but I'm encountering insufficient information everywhere. Namely, I have a laptop with the following disk configuration: Drive one has Fedora 38 ...
kubatron's user avatar
0 votes
1 answer
45 views

Why would the firefox of my running system automatically open files from an external USB drive that used to be the boot-drive of another system?

I have an SSD that another laptop was booting from (before the other hardware in that laptop failed) but now I'm using it in one of those little SATA enclosure shell adapter things in order to access ...
dwawlyn's user avatar
  • 23
2 votes
1 answer
909 views

How to increase the size of a LUKS file-container

There are many tips on how to resize (increase) a LUKS2 encrypted device / partition / LVM volume. But how to increase the size of the LUKS container created in the file? I once created: dd if=/dev/...
DarekH's user avatar
  • 97
9 votes
1 answer
2k views

Low performance of encrypted SSD

I have a 128GB Somnambulist SSD. I know this brand is one of the worst. I measured the speed using GNOME Disk Utility, and it showed a read/write speed of 420/340. After encrypting the SSD with Debian ...
Daniel's user avatar
  • 363
1 vote
1 answer
302 views

Random wipe free space: dd if=/dev/urandom vs LUKS format-erase, which is more secure, any pitfalls?

The ArchLinux Wiki on dm-crypt advices overwriting new storage devices or partitions with random data before using them for encrypted volumes. There are two ways I have used to achieve this, but I ...
Mounaiban's user avatar
0 votes
1 answer
321 views

Unable to boot after GRUB_CMDLINE_LINUX="console=tty12"

I changed GRUB_CMDLINE_LINUX="" to GRUB_CMDLINE_LINUX="console=tty12". My disk is crypted and I need to insert the password, but I don't know how to write over that console and ...
PeaceEverybody's user avatar
2 votes
1 answer
313 views

Is it possible to check if a LUKS device has been damaged by a foreign person?

Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
zomega's user avatar
  • 972
0 votes
1 answer
137 views

Debian cloned with dd cannot boot because "directory is encrypted"

Plan: Use dd to clone running system onto spare hard disc. Put spare hard disc in spare machine. Switch to using spare machine Rebuild system and migrate serivces back. So I cloned the disc with # ...
Richard Barraclough's user avatar
1 vote
0 answers
231 views

How to enable hardware encryption on my Crucial MX500 drive

I have a Crucial MX500 1TB drive and it supports hardware encryption. I need to attach it to my Raspberry Pi 4 running ubuntu 20.04 and enable encryption. I also need the drive to be auto attached to ...
webfork's user avatar
  • 11
0 votes
0 answers
23 views

How make security storage that works with file protocol?

There is some system that stores report files in a local folder. Information security department wants these reports to be stored not on the local server, but in a remote secured storage and that the ...
VladF's user avatar
  • 63
1 vote
1 answer
300 views

what causes sd-encrypt to reset my terminal resolution?

using systemd's bootd with this list of hooks defined in mkinitcpio.conf HOOKS=(base systemd autodetect modconf kms block keyboard sd-vconsole sd-encrypt lvm2 filesystems fsck) and $ cat /boot/...
gcb's user avatar
  • 420
0 votes
0 answers
84 views

How can I use my SoloKey v2 as key for encrypting my OS?

I have installed Blackarch Linux on my PC. Now I wanted to encrypt the whole SSD. Instead of typing a password in, I wanted to use my SoloKey v2. Is it possible that I am only able to use my PC if the ...
X_X's user avatar
  • 1
2 votes
1 answer
2k views

Error when unlocking BitLocker encrypted partition with dislocker tool on Linux

I installed Windows 10 and then tried to activate BitLocker on one of my partitions. I did the BitLocker steps. I entered the password and received the recovery key in the form of a txt file. After a ...
mohammad's user avatar
4 votes
1 answer
559 views

custom prompt for system encryption password entry on startup

I have full disk encryption on my arch linux laptop. When i power on the machine it prompts me for my disk password. My system is encrypted by following the LVM on luks archwiki page. the prompt says ...
Oxyn's user avatar
  • 81
1 vote
1 answer
216 views

Fast wideblock AES disk encryption in Linux?

I recently learned that Linux supports Adiantum as a disk encryption cipher (run cryptsetup benchmark -c xchacha20,aes-adiantum-plain64 to try it out on your system). While Adiantum is primarily meant ...
JanKanis's user avatar
  • 1,131
0 votes
2 answers
376 views

How to read last 1000 sectors of hard drive

Here's the specific issue in short topics I think might be relevant: I have a Western Digital (my book Studio) external drive. (the old version, bought somewhere around 2009 that has both USB and ...
ProtonSnow's user avatar
2 votes
1 answer
769 views

Disable allow-discards on encrypted partition

I have the following partition table: NAME nvme0n1 ├─nvme0n1p1 part /boot └─nvme0n1p2 part └─crypt crypt ├─crypt-swap lvm [SWAP] ├...
BiagioF's user avatar
  • 151
2 votes
0 answers
243 views

Archlinux boots with German ISO keyboard layout even though US ANSI is defined

I recently switched from DE-ISO to US-ANSI layout and have an issue across my Archlinux machines that I cannot resolve which is a bit painful as the encryption key expects German layout but my ...
q9f's user avatar
  • 2,348
1 vote
2 answers
2k views

Speeding up LUKS decryption in GRUB using pbkdf-force-iterations

I followed instructions on Speeding up LUKS decryption in GRUB - GRUB/Tips and tricks - ArchWiki. And I created Full Disk Encryption using the guide: Full_Disk_Encryption_Howto_2019 - Community Help ...
Porcupine's user avatar
  • 2,056
0 votes
0 answers
279 views

Encrypt ESXI by veracrypt or luks. FDE

I need encrypt esxi host by veracrypt or luks. Any idea how to done it? Can I install linux/windows first, than ESXI, than fix bootloader, than encrypt FDE in windows/linux by veracrypt? Best regards
Yszty's user avatar
  • 11

1
2 3 4 5
7