Questions tagged [disk-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
25
votes
1answer
2k views

Pre-encryption wipe, why?

I wanted to know why, before encrypting and installing itself on the drive , Kali : wiped the whole drive filled the drive with 0s filled the drive with 1s filled the drive with Random data wiped the ...
21
votes
3answers
11k views

Using a single passphrase to unlock multiple encrypted disks at boot

My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. ...
14
votes
2answers
2k views

Is it possible to encrypt a hard disk with a key file instead of a password?

Looking into hard disk encryption. the go to solution seems to be dm-crypt with LUKS using a password. I work with multiple independent hard disks mounted into a disk pool for reading. In this case, I ...
11
votes
2answers
2k views

Defending against the evil maid, how to handle removal of the /boot partition

When using LUKS full disk encryption, how would you go about protecting against evil maids ? The evil maid attack is when someone gets physical access to your computer while you're away and ...
8
votes
2answers
4k views

Does QEMU/KVM use Intel AES instructions for encrypted qcow2 images if the host CPU has them?

The qcow2 image file format for KVM can use AES encryption. The encryption is applied at the cluster level: Each sector within each cluster is independently encrypted using AES Cipher Block ...
7
votes
2answers
14k views

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, ...
7
votes
2answers
2k views

Installing other Linux in an encrypted disk

I recently got an SSD to replace my laptop's HDD and decided to change and use "full disk" encryption. I created a small unencrypted partition for /boot and an big encrypted LUKS partition where I ...
7
votes
1answer
2k views

Which Linux distributions support full disk encryption (including /boot)?

Recently I came across many Linux distributions. Before that I've been always using OpenSUSE so some things apparently were quite obvious to me - for example that it's possible and quite easy to set ...
6
votes
1answer
4k views

Samsung 850 Evo SSD Hardware Encryption

I'm considering purchasing a 850 Evo but I'm unsure as to the security of the encryption, especially on Linux. My research has shown that bitlocker can be used on windows instead of the insecure ATA ...
6
votes
2answers
5k views

How to mount a encrypted MS Windows 7 partition in Linux?

I have a dual-boot Windows 7 and Linux Mint. In Windows 7 I have 2 partitions, 1 for the system (C:) and another for data (D:). The data partition was encrypted with Bitlocker. I can use it in Windows ...
6
votes
2answers
2k views

remap read-only LUKS partition to read-write

cryptsetup can be invoked with --readonly or -r option, which will set up a read-only mapping: cryptsetup --readonly luksOpen /dev/sdb1 sdb1 Once I have opened a device as read-only, can I later re-...
5
votes
1answer
2k views

unable to open luks encrypted device (wrong password)

I'm using CentOS 7 with a luks encrypted root partition. Usually I have to type my password during boot, but sometimes the system doesn't accept it. It reacts as it was wrong, but it isn't. I did not ...
5
votes
3answers
5k views

luksOpen doesn't decrypt with keyfile unless --key-file argument is provided

I have an encrypted volume for which I had initially set up a passphrase interactively, which works just fine to decrypt the partition. I added more keys using a keyfile in both the following ways: ...
5
votes
2answers
490 views

QNAP eCryptFS Filesystem Broken Permissions

Following an issue with my QNAP device I've had to do a whole load of manual recovery of data and only getting at my encrypted data remains. It seems that QNAP use eCryptFS to do this. I've managed ...
5
votes
2answers
6k views

How to recover encrypted /home/ folder in Linux Mint 17.2

The issue: I changed my password earlier today, but I must've made a typo, because I couldn't log in afterwards. I booted into the Grub menu and started a passwordless root shell to reset my password. ...
5
votes
1answer
2k views

A stop job is running for LVM

I use full disk encryption which uses an LVM. It uses like this in lsblk: NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda ...
4
votes
3answers
2k views

Any disk encryption that locks itself for some time after a number of failed attempts?

Is there any way to have your disk/partition/file encrypted (in Linux or as a hardware encryption; no Windows here) in such way that it locks itself for say 10 minutes after say 3 failed unlock ...
4
votes
1answer
2k views

How to encrypt Linux (Debian 8) post-installation and what are the consequences?

I have certain folders in my Linux partition which I need to make sure no one can access unless the log in with my login password (or root one). I know that during installation I can encrypt with ...
4
votes
1answer
1k views

Installing Debian with encrypted root: installer does not see EFI /boot partition

I am trying to do what I think is a pretty standard setup of encrypted / partition and unencrypted /boot using the Debian installer (for Stretch-rc1). I created /boot by selecting the option EFI ...
4
votes
2answers
333 views

Why does “systemctl start” ask for disk encryption password?

I'm installing Fedora 24 from scratch and writing it up at https://github.com/barrycarter/bcapps/blob/master/FEDORA/README I've reinstalled many many times (and even tried CentOS 7 but gave up on it),...
4
votes
1answer
62 views

Full Disk Decryption via DHCP

I would like to implement full disk encryption on all clients. But to avoid having people to enter the FDE access code when they boot, I am wondering if the access code can be distributed by DHCP or ...
4
votes
2answers
273 views

How to gradually encrypt the tshark output file along the capture?

In order to secure a packet capture, which method would you use to make all (or close to all) past captured packet utterly unaccessible unless a given password is given. My habbits are to mount an ...
4
votes
0answers
2k views

Cryptsetup hanging after passphrase entered

I am currently looking to recover some data for a friend from an internal HDD removed from a laptop that they had encrypted using LUKS. They can't really tell me much more else as somebody else ...
4
votes
1answer
183 views

Encrypt External HardDrive that contain Data

Is there an easy way to encrypt my 2To hard-drive that is completely full, without having to buy another one format / encrypt the drive, and then finally transfer all the data over ?
4
votes
0answers
1k views

LVM Encrypted Partition without Partition Table

I have the following Problem. My Laptop is fully encrypted with LVM I know the Passphrase, but the partition table is broken. I booted from an USB Stick in this Case sdb1. Is there any hope to get /...
3
votes
2answers
196 views

What is happening with the Linux swap partition data when running Windows via dual-boot

Hmm, I would like to know what is happening with the data on the Linux swap partition when the Linux system is turned off and by the next start the Windows operating system via GRUB2 will start. 3 ...
3
votes
1answer
4k views

How to encrypt a btrfs subvolume?

I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions. I have found ...
3
votes
1answer
2k views

LUKS passphrase doesn't work

One day, when I turned on the computer, my passphrase for home part /dev/sda7 doesn't worked (I am 147% absolutely sure, that I was writing right pass)! After three times of tries, I have rebooted ...
3
votes
1answer
2k views

Encrypt partition and allow qemu to use it as the guest drive

I am trying to encrypt a 25gb partition on my SSD with cryptsetup in such a way that will allow QEMU-KVM to use it as the guests drive. I have tried luksformatting the drive: cryptsetup luksFormat /...
3
votes
2answers
89 views

Avoid GRUB infection which would crack my encrypted linux

I have an unencrypted /boot partition with GRUB and an encrypted partition, where my Linux is located. An attacker, who wants to read my encrypted partition, could gain physical access to my computer ...
3
votes
1answer
254 views

Asymmetric drive encryption

I have a desire to have an entire drive or volume encrypted and the volume to be write-enabled on restart of a linux system; does a method exist to provide that functionality? What I'm looking to do ...
3
votes
1answer
511 views

FreeBSD encrypted zfs mirror - replace failing drive, including encrypted swap

I have a FreeBSD 11 machine which has three physical drives in a ZFS mirror, encrypted with GELI. All of this was basically magically set up by the FreeBSD installer when I first built the machine, ...
3
votes
1answer
2k views

Reinstall Linux Mint without encryption

A few days ago I fully switched from Windows Vista to Linux Mint. I am happy with my decision so far. I just have one issue. During installation I opted for full disk encryption so that a password is ...
3
votes
1answer
6k views

How do I get Grub to automatically run cryptomount to load its config file (encrypted boot)

So I'm trying to get a fully encrypted boot partition going. I'm running Funtoo, but mostly drawing from the Arch wiki for help. So I decided to do something crazy/controversial: not separate boot/...
3
votes
1answer
5k views

Bitlocker like capability for Linux?

As you know large company IT departments generally enable Bitlocker on any Windows laptop. Generally, one does not notice an issue with this and it is relatively effective in protecting the raw disk ...
3
votes
0answers
725 views

BitLocker Use and Linux

Is it possible to have BitLocker enabled on a USB device and still be able to access files from the device within Linux? I have a drive I need to keep encrypted but need to access on both Linux and ...
3
votes
1answer
76 views

Unlock the encrypted Volumes after restarting the server via SSH

I used the sudo shutdown -r to restart my Mac server via SSH. However, after restarting the server, I discovered that two volumes are offline due to encryption. What I am trying to do is input the ...
3
votes
0answers
207 views

Set up bluetooth keyboard to enter disk encryption password

How can I set up a bluetooth keyboard, so that I can use it to enter the disk encryption key, so that my encrypted linux system boots.
3
votes
1answer
1k views

how to clone images of drives with LUKS+LVM2?

I have 2 Debian boxes which I need to upgrade. In the past, before upgrading any box, I have used Clonezilla to create an image of each of the box's harddrives for use as disaster backup, in case ...
3
votes
0answers
820 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
2
votes
5answers
471 views

Prevent encrypted partition from running on other PC

Concise question: Is it possible to somehow bind partition encryption to hardware so it is impossible(very hard) to copy system to another PC and run there? Full story: We have a small embedded PC ...
2
votes
2answers
2k views

How to recover after removing only LUKS key?

In a stupid attempt to disable LUKS encryption, I have done cryptsetup luksRemoveKey to my only key. So now everytime I try to boot my Fedora-21, it asks for the passphrase but obviously does not ...
2
votes
1answer
9k views

How to decrypt a hard drive with LUKS encryption?

today i was installing ubuntu on an external hard drive and in the initial setup i marked the option "encrypt installation" and the clicked the install button, but i didn't notice that my internal ...
2
votes
1answer
51 views

On Debian 9, is /root part of the /home partition?

I am encrypting my /home partition and I would also like any secrets /root (not /) contains to be encrypted. Is the /root folder considered part of the /home partition by default, or do I need to ...
2
votes
1answer
2k views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
2
votes
1answer
648 views

Can I hide the fact that my USB is LUKS encryted?

Say I have a LUKS encrypted USB (full disk). I am looking for a way to hide the fact that it is a LUKS device. Which strategy would you use to hide the fact that my USB is a LUKS device? My approach ...
2
votes
1answer
63 views

Where can users' personal data be?

I want to secure my data on a multi-user system, so ful-system encryption is not an option. I encrypted /home/me with ecryptfs, the swap with cryptsetup. But I read that the applications can ...
2
votes
1answer
382 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
2
votes
2answers
55 views

Does the owner of an encrypted directory need to be logged for it to be accessible by the system?

Does the owner of an encrypted directory need to be logged for it to be accessible by the system? If the user's directory is encrypted, ie other directories besides the home directory, does it mean ...
2
votes
1answer
222 views

Setting up encrypted swap in LMDE (debian)

I want to use a swap drive that is encrypted by a random key on boot. I'm not sure if I am doing it safely, though. I currently have /etc/crypttab based off of the example on arch wiki. Unlike their ...