Questions tagged [disk-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
20 views

Full disk encryption (and decrypt on boot) for existing Debian installation (bookworm)

I have an existing Debian system and there is a need to encrypt the disk at rest. Searching online (and here) I see that the only way to do it is to do a fresh installation, this time with LUKS on. I ...
py_script's user avatar
  • 378
-1 votes
0 answers
44 views

How To Decrypt Encrypted System Partition?

I recently switched to Ubuntu from Windows, and while installing Ubuntu, there was an option to encrypt the system files partition. It felt like a good idea... but it WASN'T. Every time I start my ...
๓ค72๓Є๔ ꞱP's user avatar
0 votes
0 answers
55 views

How to recover data off of a broken linux system with full-disk encryption

I am running Manjaro. I have it set up with full-disk encryption through LUKS. Booting up my computer I noticed some things were weird, like some of my settings had reverted to their default. I tried ...
Medynsky's user avatar
1 vote
1 answer
21 views

How to create an entire backup of a disk to fall back to before performing a dist-upgrade?

I am preparing a dist-upgrade. Before I do that I want to make a backup of my entire disk so that even if the upgrade fails I can fall back to a backup. I have two SSDs, /dev/nvme0n1 which is the ...
fu8834's user avatar
  • 11
1 vote
1 answer
35 views

Does LUKS disk encyption break SLC caching on QLC/TLC SSDs?

It seems that modern SSDs degrade in performance the more data they are holding. My understanding is that this is because manufacturers put less and less storage cells on the SSDs relative to their ...
Forivin's user avatar
  • 817
0 votes
2 answers
51 views

Check if a block device is Bitlocker encrypted

Ubuntu 22.04 can decrypt and read a BitLocker-encrypted device/partition without a need of installing any additional software (older releases can as well, perhaps, but I have not seen it) How can a ...
Svižný Svišť's user avatar
2 votes
1 answer
225 views

Does the UUID of a LUKS partition change after re-encryption?

I want to re-encrypt a system and swap partitions on EndeavourOS. The issue is that in many files (crypttab, mikinicpio, fstab, etc) the exact UUID of the LUKS partition is built in, meaning I would ...
user avatar
1 vote
1 answer
110 views

Second disk encryption using LUKS

I'm looking for a clear tutorial on how to do this but I'm encountering insufficient information everywhere. Namely, I have a laptop with the following disk configuration: Drive one has Fedora 38 ...
kubatron's user avatar
0 votes
1 answer
28 views

Why would the firefox of my running system automatically open files from an external USB drive that used to be the boot-drive of another system?

I have an SSD that another laptop was booting from (before the other hardware in that laptop failed) but now I'm using it in one of those little SATA enclosure shell adapter things in order to access ...
dwawlyn's user avatar
  • 23
1 vote
1 answer
112 views

How to increase the size of a LUKS file-container

There are many tips on how to resize (increase) a LUKS2 encrypted device / partition / LVM volume. But how to increase the size of the LUKS container created in the file? I once created: dd if=/dev/...
DarekH's user avatar
  • 37
0 votes
0 answers
58 views

`cryptsetup open` fails with correct passphrase - "No key available with this passphrase."

I recently ran (essentially) rm -rf / --no-preserve-root on my LUKS encrypted BTRFS root filesystem. I'm trying to mount the drive from an endeavouros (arch) liveusb, without success. I created a ...
alles1232's user avatar
9 votes
1 answer
1k views

Low performance of encrypted SSD

I have a 128GB Somnambulist SSD. I know this brand is one of the worst. I measured the speed using GNOME Disk Utility, and it showed a read/write speed of 420/340. After encrypting the SSD with Debian ...
Daniel's user avatar
  • 341
1 vote
1 answer
113 views

Random wipe free space: dd if=/dev/urandom vs LUKS format-erase, which is more secure, any pitfalls?

The ArchLinux Wiki on dm-crypt advices overwriting new storage devices or partitions with random data before using them for encrypted volumes. There are two ways I have used to achieve this, but I ...
Mounaiban's user avatar
0 votes
1 answer
113 views

Unable to boot after GRUB_CMDLINE_LINUX="console=tty12"

I changed GRUB_CMDLINE_LINUX="" to GRUB_CMDLINE_LINUX="console=tty12". My disk is crypted and I need to insert the password, but I don't know how to write over that console and ...
PeaceEverybody's user avatar
1 vote
1 answer
124 views

Is it possible to check if a LUKS device has been damaged by a foreign person?

Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
zomega's user avatar
  • 843
0 votes
1 answer
67 views

Debian cloned with dd cannot boot because "directory is encrypted"

Plan: Use dd to clone running system onto spare hard disc. Put spare hard disc in spare machine. Switch to using spare machine Rebuild system and migrate serivces back. So I cloned the disc with # ...
Richard Barraclough's user avatar
1 vote
0 answers
130 views

How to enable hardware encryption on my Crucial MX500 drive

I have a Crucial MX500 1TB drive and it supports hardware encryption. I need to attach it to my Raspberry Pi 4 running ubuntu 20.04 and enable encryption. I also need the drive to be auto attached to ...
webfork's user avatar
  • 11
0 votes
0 answers
23 views

How make security storage that works with file protocol?

There is some system that stores report files in a local folder. Information security department wants these reports to be stored not on the local server, but in a remote secured storage and that the ...
VladF's user avatar
  • 43
1 vote
1 answer
107 views

what causes sd-encrypt to reset my terminal resolution?

using systemd's bootd with this list of hooks defined in mkinitcpio.conf HOOKS=(base systemd autodetect modconf kms block keyboard sd-vconsole sd-encrypt lvm2 filesystems fsck) and $ cat /boot/...
gcb's user avatar
  • 354
0 votes
0 answers
45 views

How can I use my SoloKey v2 as key for encrypting my OS?

I have installed Blackarch Linux on my PC. Now I wanted to encrypt the whole SSD. Instead of typing a password in, I wanted to use my SoloKey v2. Is it possible that I am only able to use my PC if the ...
X_X's user avatar
  • 1
2 votes
1 answer
742 views

Error when unlocking BitLocker encrypted partition with dislocker tool on Linux

I installed Windows 10 and then tried to activate BitLocker on one of my partitions. I did the BitLocker steps. I entered the password and received the recovery key in the form of a txt file. After a ...
mohammad's user avatar
0 votes
0 answers
29 views

NAS configuration for encrypted data and backups

I have an old HP N36L NAS. In addition to a small system HDD it has a single 4 TB HDD that I use to store all my data that should be shared on the network. Currently it is a single EXT4 partition. I ...
ThoWe's user avatar
  • 143
3 votes
1 answer
343 views

custom prompt for system encryption password entry on startup

I have full disk encryption on my arch linux laptop. When i power on the machine it prompts me for my disk password. My system is encrypted by following the LVM on luks archwiki page. the prompt says ...
Oxyn's user avatar
  • 71
1 vote
0 answers
94 views

Fast wideblock AES disk encryption in Linux?

I recently learned that Linux supports Adiantum as a disk encryption cipher (run cryptsetup benchmark -c xchacha20,aes-adiantum-plain64 to try it out on your system). While Adiantum is primarily meant ...
JanKanis's user avatar
  • 1,019
0 votes
2 answers
107 views

How to read last 1000 sectors of hard drive

Here's the specific issue in short topics I think might be relevant: I have a Western Digital (my book Studio) external drive. (the old version, bought somewhere around 2009 that has both USB and ...
ProtonSnow's user avatar
2 votes
1 answer
300 views

Disable allow-discards on encrypted partition

I have the following partition table: NAME nvme0n1 ├─nvme0n1p1 part /boot └─nvme0n1p2 part └─crypt crypt ├─crypt-swap lvm [SWAP] ├...
BiagioF's user avatar
  • 141
0 votes
0 answers
153 views

Can mkfs.ubifs be used with fscryptctl v1.0.0?

I want to use fscryptctl on my embedded device to encrypt directories in a UBIFS. I believe this is typically supported by linux native filesystem encryption used by fscryptctl and fscrypt. I've ...
MrMas's user avatar
  • 263
2 votes
0 answers
181 views

Archlinux boots with German ISO keyboard layout even though US ANSI is defined

I recently switched from DE-ISO to US-ANSI layout and have an issue across my Archlinux machines that I cannot resolve which is a bit painful as the encryption key expects German layout but my ...
q9f's user avatar
  • 2,308
1 vote
2 answers
925 views

Speeding up LUKS decryption in GRUB using pbkdf-force-iterations

I followed instructions on Speeding up LUKS decryption in GRUB - GRUB/Tips and tricks - ArchWiki. And I created Full Disk Encryption using the guide: Full_Disk_Encryption_Howto_2019 - Community Help ...
Porcupine's user avatar
  • 1,700
0 votes
0 answers
195 views

Encrypt ESXI by veracrypt or luks. FDE

I need encrypt esxi host by veracrypt or luks. Any idea how to done it? Can I install linux/windows first, than ESXI, than fix bootloader, than encrypt FDE in windows/linux by veracrypt? Best regards
Yszty's user avatar
  • 11
1 vote
0 answers
264 views

Convert an existing filesystem partition to one encrypted with dmsetup

I am developing an embedded ARM-based Linux device, which is initially programmed with a non-encrypted ext4 filesystem image. On first boot, an initramfs script uses resize2fs followed by cryptsetup-...
Craig McQueen's user avatar
1 vote
0 answers
587 views

How to setup tang/clevis failover on headless debian?

Goal: I want to run a debian host with NBDE/FDE: For decryption it should check for a tang server first. If not available it should fallback to manual decryption via SSH (busybox or the like). ...
pico_prob's user avatar
  • 121
-1 votes
1 answer
245 views

Is it safe to run cryptsetup luksOpen twice?

When I already have a LUKS block device opened using cryptsetup luksOpen, does invoking the command on the same machine with the same arguments including the device name for the second time just do ...
jiwopene's user avatar
  • 1,022
0 votes
0 answers
124 views

Delayed boot with fscryptctl and kernel file system encryption

I've enabled disk encryption using fscryptctl for part of my buildroot build which is run on an TI AM335x. Once fscryptctl has inserted the key into the file system, when the file system is ...
Alex's user avatar
  • 111
0 votes
2 answers
210 views

Disk encryption in linux

because of audit it is necessary to encrypt the data in the database (elasticsearch) I am an absolute noob in encryption after a little googling, I realized that there is encryption at the disk level (...
nfdklg's user avatar
  • 1
5 votes
1 answer
3k views

How to encrypt an existing disk on Fedora without formatting?

There are a number of existing guides online that already cover how to reencrypt a disk, such as maxschelpzig's response here and the documentation in the Arch wiki. However, the Arch wiki focuses ...
cam-rod's user avatar
  • 135
2 votes
0 answers
620 views

Clevis auto decrypt not wokring ( Kali 2022.2 + LUKS + TPM2 + Clevis )

I cannot figure out how to get clevis to auto-decrypt my root partition on boot. What I want I want to use the TPM2 chip on my kali PC to have an encrypted disk that self-decrypt on boot. The main ...
Raphael's user avatar
  • 21
0 votes
0 answers
31 views

Encrypt hard drive with data without a second hard drive

I have a 4 TB external hard drive (file system is ext4) that is filled with approx. 1 to 2 TB of data. The hard drive is not encrypted, but I'm planning to encrypt it with the same mechanism used to ...
Green绿色's user avatar
1 vote
0 answers
64 views

LUKS2: ERROR: Forbidden ascii code 0x53 found beyond json data string at offset 4096

I'm trying to open a LUKS2 partition, which is back-upped into a raw image, together with some other drives. Testdisk was able to show the start sector but wasn't able to get the end, so I extracted ...
Erik van de Ven's user avatar
0 votes
2 answers
222 views

How to decrypt an old DVD encrypted with aespipe

I encrypted some DVDs a long time ago like this: exec mkisofs -r $basename | aespipe -e aes256 > $fullname Now I'm trying to decrypt them and I don't know how to do it anymore. The encryption ...
L Dupe's user avatar
  • 3
5 votes
1 answer
995 views

Is swapped memory encrypted on encrypted partitions?

If I installed Ubuntu on an encrypted ext4 partition, I normally have a /swapfile. Now I would expect that the swapped memory is also encrypted by default. However, the man-page of swapon says: The ...
Kolodez's user avatar
  • 181
0 votes
1 answer
73 views

Booting updated system with encrypted root partion fails

I've just updated my Debian system to Bullseye and using the 5.10.0-13-amd64 kernel can no longer access my encrypted root disc. I can still boot using previous version 5.4.0-0.bpo.2-amd64 kernel. The ...
nottledim's user avatar
1 vote
1 answer
279 views

How to change a key stored on a keydisk so it can decrypt a drive on OpenBSD?

Following the guide from https://www.openbsd.org/faq/faq14.html#softraidFDEkeydisk I know how to encrypt a drive and store a key on a usb stick. Suppose I've lost a copy of the key or suspect someone ...
zajer's user avatar
  • 213
0 votes
1 answer
6k views

Decrypting a full disk LUKS encryption manually from initramfs

I recently installed a fresh Ubuntu 20.04 image on my laptop while doing so i chose a full disk encrpytion using a password. (I think it is LUKS but I do not know how to verify this). For some reason ...
oswaldo70iq's user avatar
0 votes
0 answers
290 views

Please help me change my LUKS password

I have a terrible LUKS password and if that wasn't enough I also have to type it blindly with the wrong locale keyboard in a headless server. I want to change it to something else but I have a very ...
password is password's user avatar
0 votes
1 answer
45 views

Shrink partitionless filesystem

I have data on a disk that I want to encrypt by cloning the full filesystem of that disk (source) to a virtual block device (devicemapper/cryptsetup) based on an additional disk (target) of identical ...
user236012's user avatar
  • 2,155
5 votes
1 answer
3k views

Storage encryption on Linux desktop: LVM on LUKS or ZFS

I choose solution for storage encryption on Linux desktop. For years LVM on LUKS was a best option with superior performance and reliability. But ZFS on Linux actively develops new functions and now ...
bvasiliev's user avatar
  • 161
0 votes
1 answer
383 views

Change mount location of an encrypted volume?

I've followed this page to make a partition encrypted. When I format the created luks volume I do this: root@M17A:/home/mike# sudo mkfs.ext4 /dev/mapper/cryptpart mke2fs 1.45.5 (07-Jan-2020) Creating ...
mike rodent's user avatar
  • 1,092
14 votes
2 answers
2k views

Bit Rot within LUKS Encryption

How does bit rot affect a LUKS container and the filesystem inside? Suppose you have a filesystem that is well suited to deal with bit rot. Now put it inside a LUKS container. In case bit rot ...
Semnodime's user avatar
  • 327
1 vote
1 answer
314 views

cant create encrypted usb drive on raspberry pi 4

I have a raspberry pi 4. I have followed the instructions at https://linuxconfig.org/usb-stick-encryption-using-linux I have created and recreated the partitions, tried fat32, apt, and gpt. I started ...
DavesPlanet's user avatar

1
2 3 4 5 6