Questions tagged [disk-encryption]
The disk-encryption tag has no usage guidance.
285
questions
0
votes
0
answers
20
views
Full disk encryption (and decrypt on boot) for existing Debian installation (bookworm)
I have an existing Debian system and there is a need to encrypt the disk at rest. Searching online (and here) I see that the only way to do it is to do a fresh installation, this time with LUKS on. I ...
- 378
-1
votes
0
answers
44
views
How To Decrypt Encrypted System Partition?
I recently switched to Ubuntu from Windows, and while installing Ubuntu, there was an option to encrypt the system files partition. It felt like a good idea... but it WASN'T. Every time I start my ...
0
votes
0
answers
55
views
How to recover data off of a broken linux system with full-disk encryption
I am running Manjaro. I have it set up with full-disk encryption through LUKS. Booting up my computer I noticed some things were weird, like some of my settings had reverted to their default. I tried ...
- 23
1
vote
1
answer
21
views
How to create an entire backup of a disk to fall back to before performing a dist-upgrade?
I am preparing a dist-upgrade. Before I do that I want to make a backup of my entire disk so that even if the upgrade fails I can fall back to a backup. I have two SSDs, /dev/nvme0n1 which is the ...
- 11
1
vote
1
answer
35
views
Does LUKS disk encyption break SLC caching on QLC/TLC SSDs?
It seems that modern SSDs degrade in performance the more data they are holding.
My understanding is that this is because manufacturers put less and less storage cells on the SSDs relative to their ...
- 817
0
votes
2
answers
51
views
Check if a block device is Bitlocker encrypted
Ubuntu 22.04 can decrypt and read a BitLocker-encrypted device/partition without a need of installing any additional software (older releases can as well, perhaps, but I have not seen it)
How can a ...
- 91
2
votes
1
answer
225
views
Does the UUID of a LUKS partition change after re-encryption?
I want to re-encrypt a system and swap partitions on EndeavourOS. The issue is that in many files (crypttab, mikinicpio, fstab, etc) the exact UUID of the LUKS partition is built in, meaning I would ...
user549014
1
vote
1
answer
110
views
Second disk encryption using LUKS
I'm looking for a clear tutorial on how to do this but I'm encountering insufficient information everywhere.
Namely, I have a laptop with the following disk configuration:
Drive one has Fedora 38 ...
- 11
0
votes
1
answer
28
views
Why would the firefox of my running system automatically open files from an external USB drive that used to be the boot-drive of another system?
I have an SSD that another laptop was booting from (before the other hardware in that laptop failed)
but now I'm using it in one of those little SATA enclosure shell adapter things
in order to access ...
- 23
1
vote
1
answer
112
views
How to increase the size of a LUKS file-container
There are many tips on how to resize (increase) a LUKS2 encrypted device / partition / LVM volume. But how to increase the size of the LUKS container created in the file?
I once created:
dd if=/dev/...
- 37
0
votes
0
answers
58
views
`cryptsetup open` fails with correct passphrase - "No key available with this passphrase."
I recently ran (essentially) rm -rf / --no-preserve-root on my LUKS encrypted BTRFS root filesystem. I'm trying to mount the drive from an endeavouros (arch) liveusb, without success.
I created a ...
9
votes
1
answer
1k
views
Low performance of encrypted SSD
I have a 128GB Somnambulist SSD. I know this brand is one of the worst. I measured the speed using GNOME Disk Utility, and it showed a read/write speed of 420/340.
After encrypting the SSD with Debian ...
- 341
1
vote
1
answer
113
views
Random wipe free space: dd if=/dev/urandom vs LUKS format-erase, which is more secure, any pitfalls?
The ArchLinux Wiki on dm-crypt advices overwriting new storage devices or partitions with random data before using them for encrypted volumes. There are two ways I have used to achieve this, but I ...
- 11
0
votes
1
answer
113
views
Unable to boot after GRUB_CMDLINE_LINUX="console=tty12"
I changed GRUB_CMDLINE_LINUX="" to GRUB_CMDLINE_LINUX="console=tty12".
My disk is crypted and I need to insert the password, but I don't know how to write over that console and ...
1
vote
1
answer
124
views
Is it possible to check if a LUKS device has been damaged by a foreign person?
Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
- 843
0
votes
1
answer
67
views
Debian cloned with dd cannot boot because "directory is encrypted"
Plan:
Use dd to clone running system onto spare hard disc.
Put spare hard disc in spare machine.
Switch to using spare machine
Rebuild system and migrate serivces back.
So I cloned the disc with
# ...
1
vote
0
answers
130
views
How to enable hardware encryption on my Crucial MX500 drive
I have a Crucial MX500 1TB drive and it supports hardware encryption. I need to attach it to my Raspberry Pi 4 running ubuntu 20.04 and enable encryption. I also need the drive to be auto attached to ...
- 11
0
votes
0
answers
23
views
How make security storage that works with file protocol?
There is some system that stores report files in a local folder.
Information security department wants these reports to be stored not on the local server, but in a remote secured storage and that the ...
- 43
1
vote
1
answer
107
views
what causes sd-encrypt to reset my terminal resolution?
using systemd's bootd with this list of hooks defined in mkinitcpio.conf
HOOKS=(base systemd autodetect modconf kms block keyboard sd-vconsole sd-encrypt lvm2 filesystems fsck)
and
$ cat /boot/...
- 354
0
votes
0
answers
45
views
How can I use my SoloKey v2 as key for encrypting my OS?
I have installed Blackarch Linux on my PC. Now I wanted to encrypt the whole SSD.
Instead of typing a password in, I wanted to use my SoloKey v2. Is it possible that I am only able to use my PC if the ...
- 1
2
votes
1
answer
742
views
Error when unlocking BitLocker encrypted partition with dislocker tool on Linux
I installed Windows 10 and then tried to activate BitLocker on one of my partitions. I did the BitLocker steps. I entered the password and received the recovery key in the form of a txt file. After a ...
- 41
0
votes
0
answers
29
views
NAS configuration for encrypted data and backups
I have an old HP N36L NAS. In addition to a small system HDD it has a single 4 TB HDD that I use to store all my data that should be shared on the network. Currently it is a single EXT4 partition. I ...
- 143
3
votes
1
answer
343
views
custom prompt for system encryption password entry on startup
I have full disk encryption on my arch linux laptop. When i power on the machine it prompts me for my disk password. My system is encrypted by following the LVM on luks archwiki page.
the prompt says ...
- 71
1
vote
0
answers
94
views
Fast wideblock AES disk encryption in Linux?
I recently learned that Linux supports Adiantum as a disk encryption cipher (run cryptsetup benchmark -c xchacha20,aes-adiantum-plain64 to try it out on your system). While Adiantum is primarily meant ...
- 1,019
0
votes
2
answers
107
views
How to read last 1000 sectors of hard drive
Here's the specific issue in short topics I think might be relevant:
I have a Western Digital (my book Studio) external drive. (the old version, bought somewhere around 2009 that has both USB and ...
2
votes
1
answer
300
views
Disable allow-discards on encrypted partition
I have the following partition table:
NAME
nvme0n1
├─nvme0n1p1 part /boot
└─nvme0n1p2 part
└─crypt crypt
├─crypt-swap lvm [SWAP]
├...
- 141
0
votes
0
answers
153
views
Can mkfs.ubifs be used with fscryptctl v1.0.0?
I want to use fscryptctl on my embedded device to encrypt directories in a UBIFS. I believe this is typically supported by linux native filesystem encryption used by fscryptctl and fscrypt.
I've ...
- 263
2
votes
0
answers
181
views
Archlinux boots with German ISO keyboard layout even though US ANSI is defined
I recently switched from DE-ISO to US-ANSI layout and have an issue across my Archlinux machines that I cannot resolve which is a bit painful as the encryption key expects German layout but my ...
- 2,308
1
vote
2
answers
925
views
Speeding up LUKS decryption in GRUB using pbkdf-force-iterations
I followed instructions on Speeding up LUKS decryption in GRUB - GRUB/Tips and tricks - ArchWiki. And I created Full Disk Encryption using the guide: Full_Disk_Encryption_Howto_2019 - Community Help ...
- 1,700
0
votes
0
answers
195
views
Encrypt ESXI by veracrypt or luks. FDE
I need encrypt esxi host by veracrypt or luks. Any idea how to done it? Can I install linux/windows first, than ESXI, than fix bootloader, than encrypt FDE in windows/linux by veracrypt?
Best regards
- 11
1
vote
0
answers
264
views
Convert an existing filesystem partition to one encrypted with dmsetup
I am developing an embedded ARM-based Linux device, which is initially programmed with a non-encrypted ext4 filesystem image. On first boot, an initramfs script uses resize2fs followed by cryptsetup-...
- 799
1
vote
0
answers
587
views
How to setup tang/clevis failover on headless debian?
Goal:
I want to run a debian host with NBDE/FDE:
For decryption it should check for a tang server first.
If not available it should fallback to manual decryption via SSH (busybox or the like).
...
- 121
-1
votes
1
answer
245
views
Is it safe to run cryptsetup luksOpen twice?
When I already have a LUKS block device opened using cryptsetup luksOpen, does invoking the command on the same machine with the same arguments including the device name for the second time just do ...
- 1,022
0
votes
0
answers
124
views
Delayed boot with fscryptctl and kernel file system encryption
I've enabled disk encryption using fscryptctl for part of my buildroot build which is run on an TI AM335x. Once fscryptctl has inserted the key into the file system, when the file system is ...
- 111
0
votes
2
answers
210
views
Disk encryption in linux
because of audit it is necessary to encrypt the data in the database (elasticsearch) I am an absolute noob in encryption after a little googling, I realized that there is encryption at the disk level (...
- 1
5
votes
1
answer
3k
views
How to encrypt an existing disk on Fedora without formatting?
There are a number of existing guides online that already cover how to reencrypt a disk, such as maxschelpzig's response here and the documentation in the Arch wiki. However, the Arch wiki focuses ...
- 135
2
votes
0
answers
620
views
Clevis auto decrypt not wokring ( Kali 2022.2 + LUKS + TPM2 + Clevis )
I cannot figure out how to get clevis to auto-decrypt my root partition on boot.
What I want
I want to use the TPM2 chip on my kali PC to have an encrypted disk that self-decrypt on boot. The main ...
- 21
0
votes
0
answers
31
views
Encrypt hard drive with data without a second hard drive
I have a 4 TB external hard drive (file system is ext4) that is filled with approx. 1 to 2 TB of data. The hard drive is not encrypted, but I'm planning to encrypt it with the same mechanism used to ...
- 299
1
vote
0
answers
64
views
LUKS2: ERROR: Forbidden ascii code 0x53 found beyond json data string at offset 4096
I'm trying to open a LUKS2 partition, which is back-upped into a raw image, together with some other drives. Testdisk was able to show the start sector but wasn't able to get the end, so I extracted ...
- 431
0
votes
2
answers
222
views
How to decrypt an old DVD encrypted with aespipe
I encrypted some DVDs a long time ago like this:
exec mkisofs -r $basename | aespipe -e aes256 > $fullname
Now I'm trying to decrypt them and I don't know how to do it anymore.
The encryption ...
- 3
5
votes
1
answer
995
views
Is swapped memory encrypted on encrypted partitions?
If I installed Ubuntu on an encrypted ext4 partition, I normally have a /swapfile. Now I would expect that the swapped memory is also encrypted by default. However, the man-page of swapon says:
The ...
- 181
0
votes
1
answer
73
views
Booting updated system with encrypted root partion fails
I've just updated my Debian system to Bullseye and using the 5.10.0-13-amd64 kernel can no longer access my encrypted root disc.
I can still boot using previous version 5.4.0-0.bpo.2-amd64 kernel.
The ...
1
vote
1
answer
279
views
How to change a key stored on a keydisk so it can decrypt a drive on OpenBSD?
Following the guide from https://www.openbsd.org/faq/faq14.html#softraidFDEkeydisk I know how to encrypt a drive and store a key on a usb stick.
Suppose I've lost a copy of the key or suspect someone ...
- 213
0
votes
1
answer
6k
views
Decrypting a full disk LUKS encryption manually from initramfs
I recently installed a fresh Ubuntu 20.04 image on my laptop while doing so i chose a full disk encrpytion using a password. (I think it is LUKS but I do not know how to verify this).
For some reason ...
0
votes
0
answers
290
views
Please help me change my LUKS password
I have a terrible LUKS password and if that wasn't enough I also have to type it blindly with the wrong locale keyboard in a headless server. I want to change it to something else but I have a very ...
0
votes
1
answer
45
views
Shrink partitionless filesystem
I have data on a disk that I want to encrypt by cloning the full filesystem of that disk (source) to a virtual block device (devicemapper/cryptsetup) based on an additional disk (target) of identical ...
- 2,155
5
votes
1
answer
3k
views
Storage encryption on Linux desktop: LVM on LUKS or ZFS
I choose solution for storage encryption on Linux desktop. For years LVM on LUKS was a best option with superior performance and reliability. But ZFS on Linux actively develops new functions and now ...
- 161
0
votes
1
answer
383
views
Change mount location of an encrypted volume?
I've followed this page to make a partition encrypted.
When I format the created luks volume I do this:
root@M17A:/home/mike# sudo mkfs.ext4 /dev/mapper/cryptpart
mke2fs 1.45.5 (07-Jan-2020)
Creating ...
- 1,092
14
votes
2
answers
2k
views
Bit Rot within LUKS Encryption
How does bit rot affect a LUKS container and the filesystem inside?
Suppose you have a filesystem that is well suited to deal with bit rot. Now put it inside a LUKS container. In case bit rot ...
- 327
1
vote
1
answer
314
views
cant create encrypted usb drive on raspberry pi 4
I have a raspberry pi 4. I have followed the instructions at
https://linuxconfig.org/usb-stick-encryption-using-linux
I have created and recreated the partitions, tried fat32, apt, and gpt. I started ...
- 121