Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

Filter by
Sorted by
Tagged with
0 votes
1 answer
10 views

GRUB password seems useless, so why even bother?

My system has full disk encryption except for /boot. I've set a GRUB password by following this post, but then was able to disable it by booting into Kali Live and running: mkdir /mnt/dev/sda2 sudo ...
SuperDialga's user avatar
1 vote
1 answer
47 views

LUKS - How can / be encrypted but /boot and /boot/efi are not?

This is more of a educational and curiosity question, rather than tying to fix a problem. I have an Ubuntu system using LUKS. lsblk shows this: Noteably, / is encrypted but /boot and /boot/efi are ...
SuperDialga's user avatar
5 votes
2 answers
875 views

Editing/viewing a password protected file?

Is there a utility for editing password protected files that re-encrypts the file once editing is complete? e.g. env PASSWORD=$(my-secret-command) \ encrypted-edit secrets.txt.enc Which (for ...
ideasman42's user avatar
  • 1,301
2 votes
1 answer
124 views

How to pass a salt to mkpasswd with yescrypt algorithm

I am trying to verify this hashed password from my /etc/shadow file: $y$j9T$eia4V8bEUD9QBJAEwilXU.$TLUJexdhrx/q3Nc/YaCrlkVkrxUkimYn3o432pxFr90 I would like to pass the hash to mkpasswd this way but it ...
Louis Coulet's user avatar
1 vote
0 answers
29 views

Debian installer's partitioner stuck on encrypted NVME SSD

I have two NVME SSDs on my system. The first, M.2_1, has Windows installed on it, and I encrypted it with sedutil. Now I want to install Debian on the second one, M.2_2, which is not encrypted, and I ...
Guanyuming He's user avatar
0 votes
1 answer
49 views

Ensuring no sensitive information is left unencrypted on disk after editing text file

I used a bootable Linux Mint USB to open a sensitive text file and add sensitive information to it. This text file is encrypted by Veracrypt and was only opened and edited while I was offline. After ...
userWantsToCode's user avatar
1 vote
1 answer
55 views

ZFS dataset encryption on top of LUKS

There has been discussions about using ZFS on top of a LUKS-encrypted partition vs. using ZFS's native per-dataset encryption. However, they are always presented as either-or. My question is about ...
Cactus's user avatar
  • 845
0 votes
1 answer
30 views

Is it possible to directly encrypt a drive using any card in a smart card reader (even credit card, perhaps?)

As I understand it, a credit card chip or smart card works by sending challenges to the tiny computer on the card, at which point it completes the challenge and replies back with the data. Is it ...
Lee Nagel's user avatar
0 votes
0 answers
31 views

How do you decrypt an f2fs partition?

I have got an encrypted f2fs image, I know the password, I'm able to mount it via sudo mount -t f2fs mmcblk0p64.img /mnt/mmcblk0p64 so it doesn't appear broken or anything, and f2fscrypt recognizes ...
sezanzeb's user avatar
  • 407
0 votes
0 answers
44 views

Encrypt .deb content

I have a .deb package that I want to install in my customers devices. Currently I have these packages in a private repository that can only be accessed with a private key. But I also want to prevent ...
Frixer's user avatar
  • 51
2 votes
0 answers
272 views

Linux SMB Client Failed to Connect to SMB Server Forcing AES-256?

I'm trying to connect to SMB share on my TrueNAS from my Fedora. It works well until I decided to enable encryption of SMB data. I put following in the service config on TrueNAS (global settings) unix ...
citrate's user avatar
  • 151
3 votes
1 answer
161 views

How to install cryptsetup-luks

I'm actually trying to setup LUKS on a Red Hat 9.2 Server. Here is the problem : I can't do yum install cryptsetup-luks or dnf install cryptsetup-luks. When I try to use one of these command I have ...
joalbala's user avatar
1 vote
1 answer
51 views

Suse VM Full disk encryption, storing keys in Azure

We currently have a solution to have our data partition encrypted with the keys stored on the system partition to allow for booting without user interaction, but not our system partition as we have no ...
Fabby's user avatar
  • 5,394
1 vote
1 answer
80 views

erase hardware-encrypted SSD

Disclaimer I'm not robbing someone, didn't rob someone in the past and don't plan to do so anytime soon. Situation Imagine I own a Samsung 2.5" SSD (850, 860 or the like) which is encrypted. If ...
Tux-Of-War's user avatar
6 votes
2 answers
12k views

How do you mitigate the Terrapin SSH attack?

The Terrapin Attack on SSH details a "prefix truncation attack targeting the SSH protocol. More precisely, Terrapin breaks the integrity of SSH's secure channel. By carefully adjusting the ...
KJ7LNW's user avatar
  • 495
0 votes
1 answer
75 views

How can I check if outgoing rsync traffic is actually encrypted

I have setup an automated rsync script between two servers using SSH keys. The script runs fine but I'd like to check if the traffic sent by rsync is actually going via encrypted SSH. How can I check ...
Marc's user avatar
  • 101
0 votes
1 answer
82 views

eCryptfs With Mount Command Has Passphrase Cache?

Guys help me understand this! I'm using eCryptfs with mount command to encrypt a single folder. In first time for setup the volume I run: mount --types ecryptfs /path/to/.private /path/to/.private So ...
rhuanpk's user avatar
  • 415
1 vote
1 answer
788 views

How can I encrypt a ZFS pool?

Preface: I used to run TrueNAS (SCALE) which is where I originally created the tank pool. On Ubuntu Server, I'm trying to assign/change the key of a newly created pool but I am getting the error Key ...
telometto's user avatar
  • 1,985
3 votes
1 answer
358 views

Encrypted boot partition: advantage of encrypted boot partition

I would like to understand more about the Linux boot process and how encryption works for the boot partition. I have a few questions. I know that a UEFI system must have a ESP partition, which can be ...
user avatar
1 vote
1 answer
312 views

Encrypted LVM "is not a valid LUKS device", cannot boot or open

I have an Arch installation on a LUKS-encrypted LVM. After I installed Debian on a different NVME drive I'm no longer able to cryptsetup open the partition from other systems, nor can I boot into Arch....
lkjtigeve's user avatar
0 votes
0 answers
668 views

Remove encrypted partition from "Kingston Datatraveler Locker+ G3" and make it usable to Linux PC?

I have a "Kingston Datatraveler Locker+ G3" lying around. The manual on it explains steps for Windows XP and Windows 7 so it's from that time, I guess. I had some files on it, but couldn't ...
ReaderGuy42's user avatar
1 vote
2 answers
215 views

How to know if files inside an encrypted ZFS dataset are actually encrypted or not?

When you make any change on a zfs dataset, changes are not applied to already existant data. So, if you find a ZFS dataset that says it has encyption ON, there is a way to check if an individual file ...
Héctor's user avatar
  • 278
0 votes
0 answers
103 views

Periodic 10 second pauses/freezes every 15 seconds when copying files on all(!) LUKS encrypted ext4 hard drives (NVMe not affected)

I copied a 10TB file from a LVM on LUKS encrypted ext4 drive to another identically set up drive and noticed that the copy process goes for 15 seconds at full speed (~220MB/s), then pauses for 10 ...
tanja94's user avatar
  • 33
0 votes
0 answers
60 views

What are the OpenSSH ciphers default rekey transmission limit values?

The OpenSSH sshd_config man page says for RekeyLimits first argument: Specifies the maximum amount of data that may be transmitted before the session key is renegotiated [...] The default is between ‘...
Daku's user avatar
  • 91
2 votes
1 answer
3k views

How can I automatically unlock and mount a ZFS pool at boot?

I was wondering if it's possible to automatically decrypt and mount a ZFS pool and its datasets at boot. Currently, I have to unlock the pool manually by using the command # zfs load-key -a and then ...
telometto's user avatar
  • 1,985
2 votes
1 answer
163 views

Convert encrypted and signed to just signed PGP message

Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
DumbQuestion's user avatar
0 votes
1 answer
144 views

Yubikey security key for file based container

Does anyone have a solution for using the Yubikey Security Key as a second factor for file-based crypto containers like VeraCrypt or something else? I know the Security Key doesn't allow PGP, but now ...
Yan Anisimov's user avatar
2 votes
1 answer
5k views

How to install Debian 12 with full disk (boot too) luks2 encryption grub2, lvm UEFI?

This is a laptop with an SSD. The Debian installer defaults are for luks2. Using these breaks the installation at the grub part, as the latest grub version doesn't support argon2id PBKDFs. argon2id is ...
info-cppsp's user avatar
0 votes
0 answers
159 views

Can't open encrypted disk on new system?

I had a system running Arch Linux on an encrypted SSD using Btrfs and opened a secondary encrypted HDD on this system using a keyfile. The passphrase in the keyfile is also saved in my Keepass ...
dataprolet's user avatar
0 votes
0 answers
53 views

Automating proxy configuration across multiple applications without plaintext password

More generally than the post described here: Using bash functionality in rc files I would like to set an appropriate proxy configuration for all/multiple applications including but not limited to: ...
Sterling Butters's user avatar
0 votes
1 answer
61 views

Using bash functionality in rc files

I am trying to do something similar to Avoiding plain-text password in http_proxy but inside the .wgetrc/.curlrc configuration files. For whatever reason, I have spotty luck by passing proxy settings ...
Sterling Butters's user avatar
0 votes
1 answer
122 views

No understanding Why i cant access dm_crypt-0 -> LVM2_Member

I just did a fresh install of ubuntu server with encryption. However from the looks of it I am unable to access the majority of the space. I believe its not mounted to a directory but it shows as ...
DontPanic's user avatar
1 vote
2 answers
495 views

How to secure the linux boot/efi partition from being tampered by Windows?

I've encrypted my root partition with LUKS and my home partition with ecryptfs, so the data on on them can only be damaged. Problem is, you can easily modify stuff on the boot/efi partition from ...
ccfoo03's user avatar
  • 45
0 votes
1 answer
280 views

How to install a Linux distro with encryption that does not have encryption support in the installer?

I quite like the features of Blend os [1,2] and would like to use it. Unfortunately, my main machine is a laptop and its lack of full disk encryption sounds like a non-starter. Is there any way to use ...
lemongrass's user avatar
0 votes
1 answer
121 views

why is ssh breaking when I encrypt partition?

I am trying to create an encrypted partition for sensitive user data, on my Ubuntu server. Soft raid is set up on the server and I assume this is what is causing the problem. After the operating ...
Harry's user avatar
  • 1
2 votes
1 answer
738 views

How to increase the size of a LUKS file-container

There are many tips on how to resize (increase) a LUKS2 encrypted device / partition / LVM volume. But how to increase the size of the LUKS container created in the file? I once created: dd if=/dev/...
DarekH's user avatar
  • 87
0 votes
0 answers
48 views

Recover grub on encrypted partition without lvm

I have a problem because i need, in rescue system, to mount my encrypted root partition on openSuse leap15.5, but when i try to activate the logical volumes there is no vgchange nor any lvm commands, ...
Silán Cúcelebrin's user avatar
2 votes
1 answer
293 views

Creating PKCS#12 container from input from stdin

I want to create a PKCS#12 (a.k.a PFX) container for a private key and a certificate using openssl. My key and cert are contained in a single (unecnrypted) file: $ cat d.pem -----BEGIN CERTIFICATE-----...
mat's user avatar
  • 298
0 votes
0 answers
266 views

Properly detach the LUKS header from the existing FDE+LVM encryption

There are many other questions about the detached LUKS header here, but none solve my problem. I am attempting to relocate my existing included header from sda2 to a separate raw partition on device ...
DarekH's user avatar
  • 87
0 votes
0 answers
123 views

Mount a Luks Container on different devices at the same time

My scenario: I have a 50GB luks container (ext4) stored on a NAS. I can mount and work with this device on a Debian Machine, no problems. Now I need to work on the same container on two other devices, ...
doublezero's user avatar
0 votes
0 answers
176 views

`cryptsetup open` fails with correct passphrase - "No key available with this passphrase."

I recently ran (essentially) rm -rf / --no-preserve-root on my LUKS encrypted BTRFS root filesystem. I'm trying to mount the drive from an endeavouros (arch) liveusb, without success. I created a ...
alles1232's user avatar
0 votes
1 answer
2k views

Best way to encrypt a file with just password (no keypairs) that is easily usable/decryptable on both Linux and macOS?

I need to encrypt a file, which is a tarred/zipped directory containing important files that I am actively working on. It is crucial for me to ensure their safety by keeping multiple backups, ...
Vaibhav's user avatar
  • 101
0 votes
0 answers
435 views

gpg not prompting a password for file decryption

I can encrypt a file with gpg 2.3.8, (not using keys), but I can't decrypt it. [user@test ~]$ gpg -c tarredzip.tar.gz That prompts for a password (I'm just using "test", so I get a warning ...
account-minute's user avatar
1 vote
0 answers
61 views

SSD partition table deleted of an encrypted LUKS Linux drive

I accidentally deleted the partition table of my with LUKS encrypted SSD. I did use the encryption that came with the linux 22.04 installer. Then I was always asked for a password directly at bootup. ...
Stefan13131's user avatar
0 votes
0 answers
121 views

resizing vbox disk of encrypted guest disk is not so easy

i wanna increase the size of the guest disk in virtualbox, but it is not so simple for encrypted systems :-/ I run debian into a vbox with debian disk encryption, no vbox disk encryption. The guests ...
user152037's user avatar
1 vote
0 answers
512 views

Intel MKTME boot/grub problem/issue with Ubuntu

So moments after booting Ubuntu 20, 22, 23 (including applicable Pro editions) from a Dell XPS running 32 Gb of LPDDR5 and a Intel VPRO 1280p, the top right corner flashes and only this dialog with ...
Debs420's user avatar
  • 11
2 votes
1 answer
289 views

Is it possible to check if a LUKS device has been damaged by a foreign person?

Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
zomega's user avatar
  • 972
1 vote
0 answers
203 views

Accidentally deleted Partition table of an encrypted Linux, restoring Partition table with testdisk did not work, now trying to mount the encryp disk

I accidentally deleted the Partition table of my encrypted linux disk (ubuntu 22.04). I tried to recover the partition table with testdisk, but was unable boot into Linux after restarting the machine. ...
Stefan's user avatar
  • 11
1 vote
1 answer
128 views

Ansible: gocryptfs doesn't ask for password

When I use Ansible to create all kinds of remote mounts that need a SSH password, the ansible-playbook command simply asks for them when I run it. However, when I want to create a gocryptfs mount, I ...
Krateng's user avatar
  • 163
0 votes
1 answer
161 views

cryptsetup: create encrypted image file that an older version of losetup can open and mount

I have a need to create an encrypted image file with cryptsetup, and be able to open the image file on an older system using the encryption option for losetup. the older system cannot change, and uses ...
user566330's user avatar

1
2 3 4 5
18