Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [disk-encryption]

The tag has no usage guidance.

14
votes
2answers
2k views

Is it possible to encrypt a hard disk with a key file instead of a password?

Looking into hard disk encryption. the go to solution seems to be dm-crypt with LUKS using a password. I work with multiple independent hard disks mounted into a disk pool for reading. In this case, I ...
1
vote
0answers
98 views

Reference encrypted swap partition/device by label/UUID rather than raw device name

TL;DR: How can I reference an encrypted swap block device in safe way on CentOS 7? I'm trying to setup encrypted swap on a CentOS 7.2 VM, which has a swap device presented to it as /dev/vdb. This is ...
1
vote
1answer
2k views

Does Linux work well with encrypted ntfs drives?

What I want to do is to fully encrypt my external HDD. My only system ATM is on Debian testing so I need to be able to set up the encryption from Linux. My questions are, can that be done from Linux? ...
1
vote
1answer
1k views

share the encfs encrypted “.directory” via NFS

encfs uses FUSE to mount an encrypted directory (a hidden ".directory" by convention) onto another directory specified by the user. I want to share the encrypted ".directory" via NFS where it will ...
3
votes
1answer
5k views

Bitlocker like capability for Linux?

As you know large company IT departments generally enable Bitlocker on any Windows laptop. Generally, one does not notice an issue with this and it is relatively effective in protecting the raw disk ...
1
vote
1answer
237 views

Mounted drive disappears and is no longer a valid LUKS device

A few days ago, I formatted and encrypted (LUKS+Ext4) a solid state drive the lazy way (using gnome-disks). The disk was mounted and I moved some data to the disk from another drive that I was going ...
0
votes
1answer
526 views

ecryptfs-setup-private failing on Centos 6

$ ecryptfs-setup-private --force Enter your login passphrase: Enter your mount passphrase [leave blank to generate one]: ************************************************************************ YOU ...
3
votes
0answers
2k views

Cryptsetup hanging after passphrase entered

I am currently looking to recover some data for a friend from an internal HDD removed from a laptop that they had encrypted using LUKS. They can't really tell me much more else as somebody else ...
2
votes
0answers
312 views

Can I migrate an existing openSUSE system to use disk encryption?

Currently, my laptop is running openSUSE Tumbleweed, but it doesn't have any disk encryption configured. Is it possible to switch to full disk encryption or at least home directory encryption after ...
6
votes
2answers
5k views

How to mount a encrypted MS Windows 7 partition in Linux?

I have a dual-boot Windows 7 and Linux Mint. In Windows 7 I have 2 partitions, 1 for the system (C:) and another for data (D:). The data partition was encrypted with Bitlocker. I can use it in Windows ...
2
votes
1answer
55 views

Where can users' personal data be?

I want to secure my data on a multi-user system, so ful-system encryption is not an option. I encrypted /home/me with ecryptfs, the swap with cryptsetup. But I read that the applications can ...
1
vote
0answers
391 views

Encrypt casper-rw file for use with Easy2Boot

I have created an Easy2Boot multiboot USB drive. Currently it contains two ISOs - Kali Linux 2016 and Linux Mint. I have created persistent ext2 filestore for both ISOs and configured them using the ...
2
votes
1answer
212 views

Setting up encrypted swap in LMDE (debian)

I want to use a swap drive that is encrypted by a random key on boot. I'm not sure if I am doing it safely, though. I currently have /etc/crypttab based off of the example on arch wiki. Unlike their ...
3
votes
0answers
716 views

BitLocker Use and Linux

Is it possible to have BitLocker enabled on a USB device and still be able to access files from the device within Linux? I have a drive I need to keep encrypted but need to access on both Linux and ...
5
votes
2answers
6k views

How to recover encrypted /home/ folder in Linux Mint 17.2

The issue: I changed my password earlier today, but I must've made a typo, because I couldn't log in afterwards. I booted into the Grub menu and started a passwordless root shell to reset my password. ...
1
vote
0answers
176 views

How should the `crypto` kernel parameter be passed?

I've encrypted a root drive using a cipher with this format: <cipher>-<chainmode>-<ivmode>:<ivopt>. Let's call this [CIPHER] for short. To boot from this device, certain ...
1
vote
0answers
55 views

Does Linux require the decryption and login passwords to be the same?

thanks for looking at this question. I have seen several other questions about eOS login loops--none solved my problem, including upgrading the kernel, deleting .Xauthority, etc. Last night I changed ...
1
vote
2answers
6k views

How to mount an external encrypted drive?

My computer stopped working so I'm plugging the hard drive with a USB adapter to another computer to recover my files. After plugging it the passphrase prompt appears to unlock the volume, I type the ...
4
votes
1answer
2k views

How to encrypt Linux (Debian 8) post-installation and what are the consequences?

I have certain folders in my Linux partition which I need to make sure no one can access unless the log in with my login password (or root one). I know that during installation I can encrypt with ...
2
votes
1answer
116 views

LUKS on an internal hard drive

I have a hard drive which is encrypted using LUKS. It was originally an external hard drive. Recently I removed the casing and connected it directly (via SATA). However, when I connect it directly, I'...
0
votes
3answers
854 views

Windows 10 and Archlinux Dualboot from encrypted drive

A few days ago I bought a new notebook without an operating system. I am planning to install Arch Linux and Windows 10, because sometimes at university you get software you have to use which can only ...
3
votes
1answer
71 views

Unlock the encrypted Volumes after restarting the server via SSH

I used the sudo shutdown -r to restart my Mac server via SSH. However, after restarting the server, I discovered that two volumes are offline due to encryption. What I am trying to do is input the ...
5
votes
1answer
2k views

A stop job is running for LVM

I use full disk encryption which uses an LVM. It uses like this in lsblk: NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda ...
0
votes
1answer
81 views

Encrypted automounting partition

I have a debian based server at home using banana-pro. One of its functions is being a backup/owncloud/nas. There is a sata drive attached to it and I want it to be encrypted. I know that for a pc I ...
3
votes
1answer
1k views

Encrypt partition and allow qemu to use it as the guest drive

I am trying to encrypt a 25gb partition on my SSD with cryptsetup in such a way that will allow QEMU-KVM to use it as the guests drive. I have tried luksformatting the drive: cryptsetup luksFormat /...
3
votes
2answers
194 views

What is happening with the Linux swap partition data when running Windows via dual-boot

Hmm, I would like to know what is happening with the data on the Linux swap partition when the Linux system is turned off and by the next start the Windows operating system via GRUB2 will start. 3 ...
3
votes
0answers
172 views

Set up bluetooth keyboard to enter disk encryption password

How can I set up a bluetooth keyboard, so that I can use it to enter the disk encryption key, so that my encrypted linux system boots.
4
votes
1answer
57 views

Full Disk Decryption via DHCP

I would like to implement full disk encryption on all clients. But to avoid having people to enter the FDE access code when they boot, I am wondering if the access code can be distributed by DHCP or ...
1
vote
1answer
2k views

How do I automatically mount a plain-encrypted USB flash drive to my OpenWRT router?

I just finished encrypting my external hard drive using a key file, and mounting it onto my router. Problem is, every restart i have to manually recreate the mapping and mount it again. OpenWRT's ...
1
vote
0answers
99 views

How could a typical partition scheme look like on a bootable thumbdrive with uefi and diskencryption?

I am now playing with uefi and read about some kind of basics, which seem to be: Create a partition table of type GPT Create an efi partition, type fat16 in this partition create a structure like /...
3
votes
1answer
176 views

Encrypt External HardDrive that contain Data

Is there an easy way to encrypt my 2To hard-drive that is completely full, without having to buy another one format / encrypt the drive, and then finally transfer all the data over ?
6
votes
1answer
3k views

Samsung 850 Evo SSD Hardware Encryption

I'm considering purchasing a 850 Evo but I'm unsure as to the security of the encryption, especially on Linux. My research has shown that bitlocker can be used on windows instead of the insecure ATA ...
2
votes
1answer
3k views

Grub cryptdevice with changing device names?

I feel this is a stupid question. I have an encrypted Arch setup (without LVM) were a single disk (sdc) contains an unencrypted boot partition and the encrypted root partition. Below the output of ...
0
votes
1answer
1k views

Mint, install and LUKS/LVM

I want to make my linux laptopwith LUKS Encryption. OS : Mint 17. Is it better to make the disk LUKS-encrypted: at the installation process ? after it ?
1
vote
1answer
1k views

luks volume disappears after reboot

I created a separate partition on a CentOS install (VirtualBox), and am attempting to encrypt it using cryptsetup and LUKS. I'm using the following commands to get this set up: cryptsetup luksOpen /...
0
votes
0answers
57 views

Strategy about cloning crypted (LUKS) systems

For a while, I ve being discussing here how to manage to clone one encrypted system on others. My plan is to build a Mint system, then to encrypt it, then to clone it. Here is my process for ...
3
votes
1answer
1k views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
0
votes
0answers
147 views

CPU Scheduling incredibly slow with large difference between total execution time and actual CPU time - Ubuntu Full-Disk Encryption enabled

Admittedly, I am running on a build that is no younger than five years old at this point and the system is not going to be incredibly fast. However, at the same time, the run-times I am observing are ...
1
vote
0answers
403 views

Arch and Windows 7 dual boot with encryption, replacing existing Linux install

I have a computer with 3 hard drives: 120 GB SSD, which Arch identifies as sdb 1 TB spinny drive, which Arch identifies as sdc 160 GB spinny drive, which Arch identifies as sda Currently, Windows 7 ...
1
vote
1answer
592 views

How to Dual-Dual-Boot?

I have a company laptop which came with Windows 7 installed. I shrunk the single NTFS file system that spanned the entire hard disk so that I could then install Ubuntu on a new second partition. I did ...
3
votes
0answers
799 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
2
votes
5answers
458 views

Prevent encrypted partition from running on other PC

Concise question: Is it possible to somehow bind partition encryption to hardware so it is impossible(very hard) to copy system to another PC and run there? Full story: We have a small embedded PC ...
0
votes
1answer
180 views

Program to decrypt file for only one process

I looking for a program to encrypt and decrypt files (better if directory) on fly and for only one process via cli. In my mind it must work like sudo: If you run cat $crypted_file (also in superuser ...
1
vote
0answers
251 views

Using vanilla + busybox Linux kernel, how to check if partition is encrypted?

I have a networked drive that runs off vanilla Linux Kernel, and ultra-minimalist BusyBox, on a Ralink SoC custom CPU. It has SMB inside, Telnet access, as well as HTTP server. Even basic commands ...
11
votes
2answers
2k views

Defending against the evil maid, how to handle removal of the /boot partition

When using LUKS full disk encryption, how would you go about protecting against evil maids ? The evil maid attack is when someone gets physical access to your computer while you're away and ...
0
votes
3answers
5k views

Mount encrypted volume in Debian

I was given a HDD that was encrypted using dm-crypt and I'd like to mount it as /disk2 preferably having the decryption password stored in a file, so I won't have to enter the passphrase when booting, ...
7
votes
2answers
2k views

Installing other Linux in an encrypted disk

I recently got an SSD to replace my laptop's HDD and decided to change and use "full disk" encryption. I created a small unencrypted partition for /boot and an big encrypted LUKS partition where I ...
2
votes
2answers
2k views

How to recover after removing only LUKS key?

In a stupid attempt to disable LUKS encryption, I have done cryptsetup luksRemoveKey to my only key. So now everytime I try to boot my Fedora-21, it asks for the passphrase but obviously does not ...
1
vote
2answers
1k views

How do I automatically bind mount on boot in a non-root encrypted home directory?

I want to bind mount a directory within my home when I log on. The line in fstab would be /foo/bar /home/me/wherever none bind 0 0 The trouble is my home directory is encrypted, so it has to happen ...
4
votes
3answers
2k views

Any disk encryption that locks itself for some time after a number of failed attempts?

Is there any way to have your disk/partition/file encrypted (in Linux or as a hardware encryption; no Windows here) in such way that it locks itself for say 10 minutes after say 3 failed unlock ...