Questions tagged [encryption]
encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
843
questions
-1
votes
0
answers
22
views
cryptsetup: create encrypted image file that an older version of losetup can open and mount
I have a need to create an encrypted image file with cryptsetup, and be able to open the image file on an older system using the encryption option for losetup.
the older system cannot change, and uses ...
0
votes
0
answers
20
views
losetup: manual password entry isn't working for encrypted image file created with password file
created an encrypted image file using losetup with the following commands in a python script
from subprocess import PIPE, Popen
def executeCmd(cmdStr, cwdVal=None):
print(cmdStr)
process = ...
1
vote
0
answers
22
views
Network Bound Disk Encryption (tang/clevis) Setup
I am trying to have NBDE on Ubunutu LTS 22.04.1 . basically i want my compute-1 node to auto decrypt on boot when it's able to ping controller (tang server) node. the problem is i encrypted every ...
- 195
0
votes
0
answers
34
views
How can I encrypt files on a backup server with a password only?
I backup (rsync) my personal files to a remote Debian box.
The server runs Debian stable and the files are stored in an external hard disk.
Once the files are transferred, I want to encrypt them (or ...
- 447
0
votes
1
answer
32
views
Solaris11: is possible to create an encrypted root and unlock it via usb?
On Linux is possible: with luks+ext4 or luks+btrfs there are a lot of how-to's on web.
Is also possible using ZFS.
On Solaris 11 is possible something like this?
Using a passphrase on boot is ok only ...
- 11.7k
2
votes
1
answer
252
views
How to disable weak HMAC Algorithms? Not found in ssh_config or sshd_config file
A vulnerability scan showed that in a Debian 10 system, insecure MAC algorithms are in use: umac-64-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,hmac-sha1
When I do ssh -Q mac, I get ...
- 33
1
vote
1
answer
30
views
How to access multiple encrypted LVM partitions all belonging to OpenSUSE in another distro?
Good day everyone. I accidentaly deleted the partitions containing /boot and /boot/efi while I was trying to remove Fedora 37. Ever since then, I cannot access OpenSUSE Tumbleweed and Windows 11. ...
- 11
3
votes
1
answer
90
views
custom prompt for system encryption password entry on startup
I have full disk encryption on my arch linux laptop. When i power on the machine it prompts me for my disk password. My system is encrypted by following the LVM on luks archwiki page.
the prompt says ...
- 71
1
vote
1
answer
52
views
How to generate random master password?
I want to generate a secure random password for the encrypted Linux system. What offline tools should I use? Any advice if I should use xkcdpass, apg, diceware, or another utility, and how built ...
- 11
1
vote
0
answers
40
views
Fast wideblock AES disk encryption in Linux?
I recently learned that Linux supports Adiantum as a disk encryption cipher (run cryptsetup benchmark -c xchacha20,aes-adiantum-plain64 to try it out on your system). While Adiantum is primarily meant ...
- 959
0
votes
0
answers
46
views
Create a custom live USB that can generate an encrypted persistent volume on first boot?
I was wondering if there was a way to create a bootable USB that could:
At first boot, prompt for a passphrase
Create an encrypted volume
with the given passphrase
Allow one to edit files on this ...
- 113
1
vote
1
answer
38
views
Securely mount an encrypted container
How can I securely mount an encrypted container?
I want to encrypt a bunch of small files (let's say my diary). When locked, this should appear as a single file with unreadable contents. When I unlock ...
- 795
1
vote
1
answer
142
views
Debian 11 GUI Installer - How to "use the largest continuous free space" AND "set up encrypted LVM"?
The Debian GUI Installer provides multiple automated partitioning options. I've had no issues with "use entire disk and set up encrypted LVM" so far. But toady I had to install Debian on a ...
- 11
0
votes
2
answers
43
views
What happens if I edit "/dev/sda"
I know what /dev/sda is (no need to explain), along with sdb, etc. But what happens if I, say, encrypt sda? Will that encrypt the drive it refers to? More importantly, though, could I then decrypt sda ...
- 21
2
votes
1
answer
89
views
Disable allow-discards on encrypted partition
I have the following partition table:
NAME
nvme0n1
├─nvme0n1p1 part /boot
└─nvme0n1p2 part
└─crypt crypt
├─crypt-swap lvm [SWAP]
├...
- 141
1
vote
1
answer
60
views
Why does pumount close a luks device it did not open?
I have a luks device and it is opened on boot by /etc/crypttab. lsblk looks like this:
sdc 8:32 1 114,6G 0 disk
└─luks-672dcc74-d002-47dc-b61b-...
- 779
0
votes
1
answer
57
views
pmount cannot mount removable encrypted usb disk
I am creating a mapper file /dev/mapper/luks-672dcc74-d002-47dc-b61b-525baf91dc7c on boot in /etc/crypttab like this:
luks-672dcc74-d002-47dc-b61b-525baf91dc7c UUID=672dcc74-d002-47dc-b61b-...
- 779
0
votes
0
answers
26
views
"Failed to start cryptography" after resizing of root partition
I had a basic setup with a LUKS encoded small partition mounting on system boot subject to typing in password. I extended the root Ext4 partition from Windows. This didn't affect encrypted partition ...
- 1
0
votes
0
answers
60
views
Can mkfs.ubifs be used with fscryptctl v1.0.0?
I want to use fscryptctl on my embedded device to encrypt directories in a UBIFS. I believe this is typically supported by linux native filesystem encryption used by fscryptctl and fscrypt.
I've ...
- 263
0
votes
1
answer
527
views
(Linux Mint) Does selecting "Encrypt Home Folder" after you chose Full Disk Encryption only encrypt the home folder?
I am not new to Linux but I am new to Linux Mint since I switched from Ubuntu due to reasons out of scope of this question (snapd, update borked my computer)
I selected for FDE (Full Disk Encryption) ...
- 21
2
votes
1
answer
311
views
Disable read/write workqueue for Ubuntu Full-Disk-Encryption
I am currently trying to set up multiple devices with Ubuntu (20.04.5 LTS) and the drive must be encrypted, so I used LUKS during the installation. (I checked "Use LVM with the new Ubuntu ...
- 21
0
votes
0
answers
59
views
OpenSSL CLI - Including password in Command
Is it possible to encrypt a file without OpenSSL asking for a password?
Can I include the Password in the command?
$ openssl aes-256-cbc -in secrets.txt -out secrets.enc
enter AES-256-CBC encryption ...
- 1
2
votes
1
answer
387
views
openssl encrypt by specifying AES 256 key instead of passphrase
I need to encrypt some data using aes-256-ecb since a backend code expects it as a configuration. I'm able to encrypt using a key which is derived from a passphrase using:
openssl enc -p -aes-256-ecb -...
- 123
1
vote
2
answers
258
views
Speeding up LUKS decryption in GRUB using pbkdf-force-iterations
I followed instructions on Speeding up LUKS decryption in GRUB - GRUB/Tips and tricks - ArchWiki. And I created Full Disk Encryption using the guide: Full_Disk_Encryption_Howto_2019 - Community Help ...
- 1,510
1
vote
1
answer
367
views
How to specify AES-256 algorithm when creating GPG key?
Pardon me if this is not possible. My goal is to utilise pass. From the conducted research, it appears that the pass command utility will require a GPG key before you can store your sensitive data.
...
- 13
2
votes
1
answer
132
views
SSD health: Does free space on a LVM on LUKS volume also count as overprovisioning space?
I've read multiple times that increasing the amount of overprovisioning space on a SSD is the same as leaving some space unused. (e.g. here: "[...] storage that the operating system hasn’t ...
- 23
0
votes
0
answers
133
views
Degraded LUKS performance with custom kernel (5.18)
This issue has stumped me. I'm getting significantly degraded throughput when using a custom hardened kernel. First, this is the setup I'm using:
uname -r
5.18.6-hardened1-r9
LUKS is being used via ...
- 75
0
votes
0
answers
32
views
Fix/Format Memory card with Tails OS Installation
Im new to linux distros, and I installed Tails OS to my 63gb memory card so I could run an OS on my surface pro 3, since my ssd died. It installed fine, but i ran into some issues when i configured ...
1
vote
1
answer
120
views
Locking LUKS cryptlvm while booted?
I am running Arch Linux and the main / partition is LUKS encrypted. After GRUB, Plymouth asks me for the password, unlocks it and boots Arch Linux. What I'm attempting to do is quickly lock the ...
- 11
0
votes
1
answer
283
views
What is the kind of encryption used in Zip 3.0?
I am using zip on Arch and the version is given as "Zip 3.0 (July 5th 2008) by Info-Zip. Compiled with gcc 11.2.0 on Mar 22 2022. The encryption compilation information reads "[encryption, ...
- 5,239
0
votes
0
answers
11
views
Following --> What is the maximum allowed filename (and folder) size with eCryptfs?
That question was posted no less than 10 years and 5 months .... and it was sent to me by a great Tech. Support agent from Synology when I waw inquiring and criticizing the 143 char limitation in the ...
- 1
0
votes
0
answers
28
views
IPv6 transport security for a group of hosts with strongswan
I have two sets of about a dozen servers each at a different site. I know I have the option of configuring a VPN tunnel, but I'm trying to see if there is a viable way to use IPv6 "transport mode&...
- 143
0
votes
0
answers
34
views
Preventing memory disclosure leaks for piped commands
I'm setting up a batch job re-encrypting (transcoding? transcrypting?) files, and I'm concerned about the possibility of memory disclosure leaking plaintext. This flaw may have other names, but ...
- 442
5
votes
1
answer
1k
views
How to encrypt an existing disk on Fedora without formatting?
There are a number of existing guides online that already cover how to reencrypt a disk, such as maxschelpzig's response here and the documentation in the Arch wiki. However, the Arch wiki focuses ...
- 113
0
votes
0
answers
105
views
Root partition encrypted with LUKS and Yubikey to Decrypt (problems with initramfs)
I am working on a Raspberry Pi 3B v1.2, and I have already encrypted my root partition of the OS with LUKS.
The problem is that I would like to decrypt it or have the appropriate password to decrypt ...
0
votes
0
answers
64
views
How to rescue a disappered (and maybe damaged)encrypted partition?
I use Veracrypt to encrypt a partition of a USB 2.0 flash disk months ago on Linux. I use ext4 for it. After that, everything goes fine; However 2 days ago I mounted the partition, but while I was ...
user526448
0
votes
1
answer
46
views
is updating your system safe using unsecured/free wifi?
I am using an unsecured (no password) Cox hotspot that requires authentication on a web portal.
This is the main internet connection I use and I have been updating my Ubuntu (sudo apt update &&...
user533281
0
votes
0
answers
24
views
Encrypt hard drive with data without a second hard drive
I have a 4 TB external hard drive (file system is ext4) that is filled with approx. 1 to 2 TB of data. The hard drive is not encrypted, but I'm planning to encrypt it with the same mechanism used to ...
- 289
1
vote
0
answers
185
views
What is a TPM2 "object context"?
The man page for tpm2_load has the following example:
To load an object you first must create an object under a primary object. So the first step is to create the primary object.
tpm2_createprimary -...
- 640
2
votes
0
answers
105
views
Problem with ecryptfs and rsync on arch [closed]
I'm trying to encrypt my home directory with ecryptfs-migrate-home.
When I try to run this command, I get the following error message:
ERROR: please install the rsync package.
But the rsync package ...
- 21
0
votes
0
answers
37
views
How does GPG handle signing encrypted files?
Is the implementation of GPG so that the sender signs the hash of the encrypted or unencrypted file?
And is the signature then encrypted?
The orders make a difference because if the file is first ...
- 101
0
votes
0
answers
966
views
GRUB menu selection problem on dual boot windows10 and Ubuntu 22.04 encrypted
The Grub menu appear a fraction of a second (flickered), and auto launch the first option in it's menu, which is Ubuntu.
The problem appear after I reinstalled Ubuntu22.04 Encrypted. I don't know if ...
3
votes
2
answers
2k
views
Grub install with encrypted Boot partition
i am trying to do arch(or any distro)-install with encrypted boot partition(lvm - uefi) during installation. i am trying really hard to get it to working but i get this error in picture below. i ...
- 195
1
vote
0
answers
759
views
How to verify that a key is loaded on a TPM 2.0 device
Situation:
I'm learning how to use some of the basic commands in the tpm2-tools software package because I have to develop some high-level test cases to verify a TPM is handling keys per customer ...
0
votes
0
answers
143
views
Encrypted rootfs wont boot
I've encrypted my rootfs with LUKS+lvm (sda5).
sda1 is my boot partition where grub.cfg stored (not encrypted)
sda2 and sda3 not encrypted rootfs
sda4 - swap (not encrypted)
I want to boot sda5 ...
1
vote
2
answers
351
views
Make GPG encrypted file look like binary executable
I have a weird ask.
I have a tar achive, archive.tar.gz, filled with plaintext files. That archive is then gpg encrypted into archive.tgz.gpg. In total, archive.tgz.gpg is < 100KB.
Now, I want to ...
- 685
0
votes
1
answer
253
views
How to run bash on Cryptomator volume on WSL
My PC's OS is Windows 10, where I am hosting a Cryptomator volume on E: . I want to run bash commands on the contents of that mounted volume, thus, I am trying to access its contents with WSL.
It ...
- 113
0
votes
0
answers
419
views
LUKS add new password or key when only TPM unlock is available
It seems like having no password is a big pain when working with any of the crypt tools like systemd-cryptenroll and cryptsetup!
I got a volume that is protected by pkcs11-uri=auto (Smart Card) and ...
- 175
0
votes
1
answer
73
views
/dev/mapper/crypt-home no longer mounts
In October 2009 I set up a dual-boot system with Ubuntu 9.10 (and whatever Windows OS we were running at the time.) The Ubuntu side was configured with several encrypted LVM partitions on sda5: /home,...
- 1
1
vote
2
answers
357
views
How to check if a LUKS device is unlocked, without sudo permissions?
Is there any way to check if a LUKS device is unlocked, without having sudo permissions?
I'm aware of two questions, but all the answers require sudo.
It seems that I've found an indirect way (...
- 849