Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [disk-encryption]

The tag has no usage guidance.

1
vote
0answers
597 views

Install Linux side by side on an encrypted disk running Windows 10

I have a workplace issued laptop that has Windows 10 installed and BitLocker encyrption enabled. So when I power on the machine, the first thing that happens (after the vendor logo) is BitLocker key ...
20
votes
3answers
10k views

Using a single passphrase to unlock multiple encrypted disks at boot

My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. ...
25
votes
1answer
2k views

Pre-encryption wipe, why?

I wanted to know why, before encrypting and installing itself on the drive , Kali : wiped the whole drive filled the drive with 0s filled the drive with 1s filled the drive with Random data wiped the ...
-2
votes
2answers
109 views

Why are there no post-installation encryption mechanisms in Linux?

I know it can be done (LUKS) using an extra hard-drive which involves significant manual work. In Windows it's just a single click for encrypting/decrypting your hard-drives. Ubuntu offers a way to ...
3
votes
1answer
2k views

LUKS passphrase doesn't work

One day, when I turned on the computer, my passphrase for home part /dev/sda7 doesn't worked (I am 147% absolutely sure, that I was writing right pass)! After three times of tries, I have rebooted ...
0
votes
1answer
914 views

Grub with encrypted /boot and / on btrfs RAID1?

I'm trying to setup grub to boot from encrypted /boot on BTRFS based RAID1 array. However, I'm cannot find a way to force grub to unlock both disks. GRUB asks for key twice to unlock /boot, but I don'...
5
votes
3answers
4k views

luksOpen doesn't decrypt with keyfile unless --key-file argument is provided

I have an encrypted volume for which I had initially set up a passphrase interactively, which works just fine to decrypt the partition. I added more keys using a keyfile in both the following ways: ...
1
vote
0answers
402 views

Long booting to password screen for encrypted disk

Half year ago I bought laptop HP EliteBook 850 G3 with Intel i7, 16GB RAM and 512GB SDD. This was my first time when in installator I chose option "full encrypted disk" (don't remember exactly name). ...
0
votes
1answer
304 views

hibernate does not work on fresh zorin os 12.1 installation

I just installed zorin os 12.1. I notice there is no hibernate option. After some googling i still found no answer. sudo systemctl hibernate powers off the laptop, but after logging in no programs ...
2
votes
2answers
4k views

How to install Debian with full disk encryption for UEFI?

So I'm trying to install the latest version of Debian on my SSD drive with UEFI. I'd like to use the CinnamonKDE desktop environment and have my drive fully encrypted. I used Windows 10 before and am ...
7
votes
2answers
13k views

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, ...
1
vote
0answers
658 views

How to install new Linux distro onto existing encrypted partitions?

I have a fully encrypted Arch Linux system running BTRFS on top of LUKS with separate subvolumes for root, home and /var/log. Plus boot is a separate partition. How can I install another distro (...
1
vote
1answer
1k views

Proper manual OS setup on LUKS encrypted drive with non-aes algorithm on yum-based distro (CentOS)

I'm trying to achieve LUKS-encrypted CentOS 7 install with separate /boot partition and lvm on EFI-friendly motherboard. I've done partitioning fresh CentOS install from old CentOS(installed from GUI)...
2
votes
2answers
53 views

Does the owner of an encrypted directory need to be logged for it to be accessible by the system?

Does the owner of an encrypted directory need to be logged for it to be accessible by the system? If the user's directory is encrypted, ie other directories besides the home directory, does it mean ...
2
votes
1answer
254 views

How to install cryptoloop module on Kali 4.6?

I am unable to launch the cryptoloop module on Kali 4.6. How can I to install it? # modprobe cryptoloop modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.6.0-kali1-amd64
0
votes
1answer
132 views

systemd-cryptsetup key file readable warning

Ok, so I've been debugging the last update of my system and found this warning running journalctl -b -p warning: systemd-cryptsetup: Key file <location> is world-readable. This is not a good ...
3
votes
1answer
234 views

Asymmetric drive encryption

I have a desire to have an entire drive or volume encrypted and the volume to be write-enabled on restart of a linux system; does a method exist to provide that functionality? What I'm looking to do ...
1
vote
1answer
1k views

How Secure Is Tails Encryption? [closed]

I know. Tails itself is a very secure operating system, but what about its drive encryption? I would like to encrypt my flash drive with the tails built in drive encryption. What does it use? AES-256?
1
vote
1answer
3k views

How to get quality-encryption on Debian disk after installation?

I would like to turn on the disk encryption option in Debian but I do not find any option which can put it on after the system installation, since I did not choose the disk encryption initially. I ...
1
vote
0answers
429 views

Encrypted LVM automount at boot with key on another server

I'd like to protect the data on my Linux server from physical theft by using encrypted partitions with a keyfile stored on another server on my network. The other server would actually be my router, ...
3
votes
1answer
488 views

FreeBSD encrypted zfs mirror - replace failing drive, including encrypted swap

I have a FreeBSD 11 machine which has three physical drives in a ZFS mirror, encrypted with GELI. All of this was basically magically set up by the FreeBSD installer when I first built the machine, ...
1
vote
1answer
65 views

Partition encryption vs symbolic links

I'm considering to create a encrypted partition to store some documents and programs using Dm-crypt + Luks. Let's say it will be mounted on /mnt/secret. My question is: is it safe to have symbolic ...
0
votes
1answer
174 views

multiple encrypted EBS volumes and LVM

I would like to use encrypted EBS volumes to setup LVM partition for an EC2 instance. According to the documentation, encryption is transparent for EC2 instance, but I'm concerned about multiple ...
1
vote
1answer
2k views

Where Should I Store Encryption Keyfiles?

Let's say I use LUKS for all my system except for /boot and I have my /home/user directory encrypted as well. In the context of the security of my user account (Which is more than less isolated from ...
1
vote
0answers
324 views

Moving encrypted partition from passphrase to random keyfile?

I have a fresh install of Debian using sda2_crypt as swap. When I set it up I used a passphrase, but I would like to move to a random keyfile instead so that it won't prompt to unlock at every boot. ...
1
vote
0answers
843 views

Is Easy-to-use Multi-factor Full Disk Encryption Available?

I had a setup where my removable device contained a single partition with encrypted data and nothing else on it to distinguish it from random data. On a physically separate device, I had a pair of ...
2
votes
2answers
824 views

Cannot recover encrypted files on Ubuntu

I needed to reinstall ubuntu on my hard drive because I think I corrupted some files and it wasn't booting up (I know, it was very stupid). I tried to reinstall from a LiveCD by checking the "keep the ...
4
votes
1answer
1k views

Installing Debian with encrypted root: installer does not see EFI /boot partition

I am trying to do what I think is a pretty standard setup of encrypted / partition and unencrypted /boot using the Debian installer (for Stretch-rc1). I created /boot by selecting the option EFI ...
3
votes
1answer
2k views

Reinstall Linux Mint without encryption

A few days ago I fully switched from Windows Vista to Linux Mint. I am happy with my decision so far. I just have one issue. During installation I opted for full disk encryption so that a password is ...
2
votes
1answer
764 views

cloned drive won't boot. (It was a LUKS encrypted drive)

I have an SSD I removed from a system. It had full disk encryption via LUKS (without using LVM). I want to reuse this drive for a different purpose (in a different system). I cloned (using dd) a non-...
1
vote
0answers
384 views

Ubuntu 16.04 USB - UEFI Installation - Will Not Boot on BIOS Machine

My ultimate aim is the following: - A portable installation of ubuntu 16.04 LTS that will run on BIOS and EFI and UEFI machines - An encrypted disk (not just home folder) I have the following ...
1
vote
1answer
232 views

USB encryption login Ubuntu Elementary OS Freya [closed]

I'm a web developer and I know a lot about servers and scripting languages, but I don't know much about Bash and Linux(in comparison). It's my understanding that it is possible to allow login to a ...
2
votes
3answers
1k views

Create encrypted partition on existing drive with one primary partition while keeping data

fdisk -l: Disk /dev/sda: 931,5 GiB, 1000204886016 bytes, 1953525168 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): ...
0
votes
1answer
2k views

Timed out error waiting for encrypted swap device

OS: Parabola GNU/Linux Libre, a GNU version of Arch. I have managed to encrypt my root partition, but I'm unsure about how to encrypt my swap partition. I know swap partitions are becoming old-...
1
vote
2answers
2k views

How To F2FS Filesystem Encryption?

I read that the f2fs format is good for SSD storage so I formatted one of my drives with it. I also read in some kernel notes that encryption was added for it but there's no documentation to speak of. ...
1
vote
1answer
332 views

Adding encryption to existing software RAID-mirrored volume

I currently have a server which has a number of LVM volumes using software RAID for mirroring. Something like this: sdd 8:48 0 894.3G 0 disk └─sdd1 8:...
2
votes
1answer
552 views

Can I hide the fact that my USB is LUKS encryted?

Say I have a LUKS encrypted USB (full disk). I am looking for a way to hide the fact that it is a LUKS device. Which strategy would you use to hide the fact that my USB is a LUKS device? My approach ...
1
vote
1answer
74 views

GPG encryption with gradual deletion in parallel

Say I have a 100GB file that I want to GPG encrypt on a system with 120GB hard drive memory and a small RAM. How can I decrypt the file without using an external memory, that is gpg encrypt a file ...
1
vote
0answers
322 views

Is multiple ecryptfs encryption possible?

Is multiple ecryptfs encryption possible? How to encrypt a folder called level2 with ecryptfs that is inside a ecryptfs mounted folder called level1? level1 and level2 folder are organized as # ...
1
vote
1answer
299 views

Cannot install loop-aes-utils on debian 8.0

I need to install the package loop-aes-utils on Debian 8.0 to following this Ubuntu tutorial. It is not in Debian official package however. Would it be the aespipe package or is it another package? ...
1
vote
1answer
111 views

How to set a machine specific encryption to allow only one machine to decrypt data

Security is highered if only one machine can do the decryption. How would you suggest to allow only one computer to be able to decrypt an LUKS partition? I would simply need to get a set of variable ...
4
votes
2answers
295 views

Why does “systemctl start” ask for disk encryption password?

I'm installing Fedora 24 from scratch and writing it up at https://github.com/barrycarter/bcapps/blob/master/FEDORA/README I've reinstalled many many times (and even tried CentOS 7 but gave up on it),...
1
vote
0answers
35 views

How to encrypt a partition multiple times?

Is it possible to use cryptsetup only to encrypt a partition multiple times? If not, what would you suggest to use to encrypt a partition say, 3 times in the most reliable way?
0
votes
2answers
88 views

How to hide the encrypted version of a file put in a cryptfs filesystem?

Say I create an encrypted folder and add a file to it: # mount -t ecryptfs /srv /srv # echo word > /srv/file The content of file is unavailable only after unmounting the filesystem. How can I ...
4
votes
2answers
261 views

How to gradually encrypt the tshark output file along the capture?

In order to secure a packet capture, which method would you use to make all (or close to all) past captured packet utterly unaccessible unless a given password is given. My habbits are to mount an ...
1
vote
1answer
143 views

What is the fastest way of checking a encfs password?

Is there any faster way of checking the password of an encfs folder than echo <password> | encfs -S /root/.folder /root/folder
1
vote
0answers
580 views

Debian fails to prompt for encrypted disk password on boot

I am using Debian Scratch with encrypted root partition. The last kernel version where it worked was 4.6.0. For kernels 4.7.0 and 4.8.0 it prints on the boot repeatedly and forever following messages: ...
0
votes
2answers
81 views

After encrypting a disk, how do you check that a known plain-text inside the disk became gibberish? [closed]

I encrypted a disk using cryptsetup. I want to be able to visualize that a known text before encrypting the disk became gibberish after encrypting. How do I do such comparison? Here's an example ...
0
votes
1answer
45 views

Securing USB Drive

I am sharing important data with my friends/colleagues. For this, rather sending mail or uploading to some hosting site and providing them with the link, I prefer to give them individual USB Pen drive ...
3
votes
1answer
6k views

How do I get Grub to automatically run cryptomount to load its config file (encrypted boot)

So I'm trying to get a fully encrypted boot partition going. I'm running Funtoo, but mostly drawing from the Arch wiki for help. So I decided to do something crazy/controversial: not separate boot/...