Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

Filter by
Sorted by
Tagged with
0 votes
1 answer
22 views

Locking LUKS cryptlvm while booted?

I am running Arch Linux and the main / partition is LUKS encrypted. After GRUB, Plymouth asks me for the password, unlocks it and boots Arch Linux. What I'm attempting to do is quickly lock the ...
  • 1
0 votes
1 answer
51 views

What is the kind of encryption used in Zip 3.0?

I am using zip on Arch and the version is given as "Zip 3.0 (July 5th 2008) by Info-Zip. Compiled with gcc 11.2.0 on Mar 22 2022. The encryption compilation information reads "[encryption, ...
  • 5,501
0 votes
0 answers
4 views

Following --> What is the maximum allowed filename (and folder) size with eCryptfs?

That question was posted no less than 10 years and 5 months .... and it was sent to me by a great Tech. Support agent from Synology when I waw inquiring and criticizing the 143 char limitation in the ...
  • 1
0 votes
0 answers
20 views

IPv6 transport security for a group of hosts with strongswan

I have two sets of about a dozen servers each at a different site. I know I have the option of configuring a VPN tunnel, but I'm trying to see if there is a viable way to use IPv6 "transport mode&...
  • 143
0 votes
0 answers
29 views

Preventing memory disclosure leaks for piped commands

I'm setting up a batch job re-encrypting (transcoding? transcrypting?) files, and I'm concerned about the possibility of memory disclosure leaking plaintext. This flaw may have other names, but ...
  • 330
2 votes
1 answer
150 views

How to encrypt an existing disk on Fedora without formatting?

There are a number of existing guides online that already cover how to reencrypt a disk, such as maxschelpzig's response here and the documentation in the Arch wiki. However, the Arch wiki focuses ...
0 votes
0 answers
43 views

Root partition encrypted with LUKS and Yubikey to Decrypt (problems with initramfs)

I am working on a Raspberry Pi 3B v1.2, and I have already encrypted my root partition of the OS with LUKS. The problem is that I would like to decrypt it or have the appropriate password to decrypt ...
0 votes
0 answers
20 views

How to rescue a disappered (and maybe damaged)encrypted partition?

I use Veracrypt to encrypt a partition of a USB 2.0 flash disk months ago on Linux. I use ext4 for it. After that, everything goes fine; However 2 days ago I mounted the partition, but while I was ...
user avatar
0 votes
1 answer
36 views

is updating your system safe using unsecured/free wifi?

I am using an unsecured (no password) Cox hotspot that requires authentication on a web portal. This is the main internet connection I use and I have been updating my Ubuntu (sudo apt update &&...
user avatar
0 votes
0 answers
22 views

Encrypt hard drive with data without a second hard drive

I have a 4 TB external hard drive (file system is ext4) that is filled with approx. 1 to 2 TB of data. The hard drive is not encrypted, but I'm planning to encrypt it with the same mechanism used to ...
0 votes
0 answers
47 views

What is a TPM2 "object context"?

The man page for tpm2_load has the following example: To load an object you first must create an object under a primary object. So the first step is to create the primary object. tpm2_createprimary -...
1 vote
0 answers
48 views

Problem with ecryptfs and rsync on arch [closed]

I'm trying to encrypt my home directory with ecryptfs-migrate-home. When I try to run this command, I get the following error message: ERROR: please install the rsync package. But the rsync package ...
  • 11
0 votes
0 answers
14 views

How does GPG handle signing encrypted files?

Is the implementation of GPG so that the sender signs the hash of the encrypted or unencrypted file? And is the signature then encrypted? The orders make a difference because if the file is first ...
  • 101
0 votes
0 answers
587 views

GRUB menu selection problem on dual boot windows10 and Ubuntu 22.04 encrypted

The Grub menu appear a fraction of a second (flickered), and auto launch the first option in it's menu, which is Ubuntu. The problem appear after I reinstalled Ubuntu22.04 Encrypted. I don't know if ...
2 votes
2 answers
827 views

Grub install with encrypted Boot partition

i am trying to do arch(or any distro)-install with encrypted boot partition(lvm - uefi) during installation i am trying really hard to get it to working but i get this error i searched a lot but i ...
1 vote
0 answers
353 views

How to verify that a key is loaded on a TPM 2.0 device

Situation: I'm learning how to use some of the basic commands in the tpm2-tools software package because I have to develop some high-level test cases to verify a TPM is handling keys per customer ...
0 votes
0 answers
67 views

Encrypted rootfs wont boot

I've encrypted my rootfs with LUKS+lvm (sda5). sda1 is my boot partition where grub.cfg stored (not encrypted) sda2 and sda3 not encrypted rootfs sda4 - swap (not encrypted) I want to boot sda5 ...
1 vote
2 answers
141 views

Make GPG encrypted file look like binary executable

I have a weird ask. I have a tar achive, archive.tar.gz, filled with plaintext files. That archive is then gpg encrypted into archive.tgz.gpg. In total, archive.tgz.gpg is < 100KB. Now, I want to ...
0 votes
1 answer
158 views

How to run bash on Cryptomator volume on WSL

My PC's OS is Windows 10, where I am hosting a Cryptomator volume on E: . I want to run bash commands on the contents of that mounted volume, thus, I am trying to access its contents with WSL. It ...
  • 113
0 votes
0 answers
254 views

LUKS add new password or key when only TPM unlock is available

It seems like having no password is a big pain when working with any of the crypt tools like systemd-cryptenroll and cryptsetup! I got a volume that is protected by pkcs11-uri=auto (Smart Card) and ...
0 votes
1 answer
40 views

/dev/mapper/crypt-home no longer mounts

In October 2009 I set up a dual-boot system with Ubuntu 9.10 (and whatever Windows OS we were running at the time.) The Ubuntu side was configured with several encrypted LVM partitions on sda5: /home,...
  • 1
1 vote
2 answers
182 views

How to check if a LUKS device is unlocked, without sudo permissions?

Is there any way to check if a LUKS device is unlocked, without having sudo permissions? I'm aware of two questions, but all the answers require sudo. It seems that I've found an indirect way (...
  • 809
1 vote
0 answers
179 views

gpg -d hangs while decrypting

i have a key installed on my fedora 35. i see that the subkey for encryption is active and unexpired. i can encrypt with it just fine but when i try to decrypt, it just hangs. though echo 'encrypt ...
  • 121
0 votes
1 answer
208 views

Suppressing your IP address from being entered into the known_hosts file in setting up SSH

We just recently set up a password-less connection between two servers. We have security concerns related to the contents of the known_hosts file. Basically the concern is if some one were to gain ...
  • 1
1 vote
0 answers
21 views

Does opening a picture in a temporary filesystem leave any traces with Eye of GNOME/eog?

Does the Gnome package eog leave any thumbnails or other privacy leaking information when opening a picture in a different filesystem? I know that thumbnails are created by default in the home ...
0 votes
0 answers
28 views

Which encryption algorithms are common to both ssh server and client?

I have a situation where I would like to run a complex X11 program across the network on an elder laptop through a ssh -Y tunnel. The performance of the X11 program GUI (IntelliJ community edition for ...
0 votes
1 answer
305 views

Read key properties

I have multiple keys (some private, some public) and I want to get information about them (their length, their type, anything else). Is that possible?
  • 25
1 vote
1 answer
202 views

Did Windows break my LUKS encrypted disk?

Primary OS is Qubes, secondary OS is Windows 10. I have a disk sda with full disk encryption (LUKS). But now I don't see my ext4 partitions on that disk and there only is one NTFS partition with a ...
  • 11
1 vote
0 answers
387 views

What does j9T mean in yescrypt (from /etc/shadow)?

Consider this Shadow string $y$j9T$PaFEMV0mbpeadmHDv0Lp31$G/LliR3MqgdjEBcFC1E.s/3vlRofsZ0Wn5JyZHXAol5 There are 4 parts id : y (yescrypt) param : j9T salt : PaFEMV0mbpeadmHDv0Lp31 hash : G/...
  • 113
0 votes
1 answer
36 views

kernel config, CONFIG_CRYPTO_RSA, what is this config for?

I checked: https://cateee.net/lkddb/web-lkddb/CRYPTO_RSA.html The help text is: Generic implementation of the RSA public key algorithm. Is this driver for an encryption HW device, ex: from Intel/AMD ...
  • 383
2 votes
1 answer
343 views

How to mount on Linux a QNAP external drive with LUKS partition

I need help to mount an external drive used on my QNAP TS-230 (latest firmware) to backup data. I set encrypted partition (LUKS) on this drive with a passphrase. I tried to mount that partition on a ...
0 votes
1 answer
44 views

Extract 'salt' from mcrypt encrypted file

I have some mcrypt(1) encrypted files, doing file on them ici$ file myfile.nc myfile.nc: mcrypt 2.5 encrypted data, algorithm: rijndael-128, keysize: 32 bytes, mode: cbc However, I'd like to extract ...
  • 602
0 votes
1 answer
126 views

Change mount location of an encrypted volume?

I've followed this page to make a partition encrypted. When I format the created luks volume I do this: root@M17A:/home/mike# sudo mkfs.ext4 /dev/mapper/cryptpart mke2fs 1.45.5 (07-Jan-2020) Creating ...
  • 1,052
0 votes
1 answer
528 views

Remove Cryptsetup LUKS encryption [duplicate]

I wanted to encrypt a flash drive but it didn't went well. Then I tried to remove the encryption but I am unable to do it. Here is some info: LUKS header information Version: 2 Epoch: ...
1 vote
2 answers
243 views

Does LUKS take space?

I have just encrypted an empty partition using LUKS. The partition size is 875 GiB. Before encryption 28 KiB were in use. After encryption, 14.81 GiB are in use (1.7% of the total). Why is that so? ...
  • 315
1 vote
1 answer
806 views

dropbear-initramfs Permission denied (publickey)

I'm having issues unlocking an encrypted disk over ssh using dropbear. I've followed this guide to set it up, but I just end up getting Permission denied (publickey) error I copied the public key from ...
  • 167
0 votes
0 answers
24 views

Does ecryptfs of the home directory prevent recovering the data back?

I have a computer with SSD where my personal data (:D) is stored in a folder inside the home directory, I have read so many times that encrypting your files will prevent anyone from retrieving your ...
  • 279
2 votes
1 answer
508 views

(Probably) Corrupted LUKS Header, Restoring Header does not work

I tried everything I was able to find online. Hours of research since yesterday ;( I found no one struggling with the errors I'm facing, except from GitLab (error code -1 instead of -4 I'm getting), ...
  • 23
1 vote
1 answer
161 views

How to add encrypted swap file on FreeBSD 13

I want to add encrypted swap file in FreeBSD 13. I have read this documentation page, but it doesn't explain how to set up encryption for the swap file. I've also read another one, but it only gives ...
  • 161
2 votes
1 answer
58 views

Encrypt main data Linux partition so it's only accessed by unique system

How can i encrypt a Linux internal disk, so that it is only accessible with a unique system (preinstalled Debian bullseye), installed on a USB drive? Even if someone has the encryption passphrase and ...
  • 23
3 votes
2 answers
1k views

Automatically mount fulldisk encrypted disk without entering passphrase?

Some time ago I installed a linux Pop-OS (based on Ubuntu 20.04). All good so far. It's my secondary play-around box. I installed it with fulldisk encryption which prompts for a passphrase to decrypt ...
1 vote
0 answers
92 views

How to circumvent "VeraCrypt is already running"

I'm running VeraCrypt which looks something like this: I can close this window and open it again by using the system tray icon. However, sometimes my X server crashes and after restarting it, the ...
0 votes
1 answer
102 views

Not booting off TPM with USB disk inserted

At reboot, with USB sticks inserted, the TPM will not allow passphraseless booting of the server. With a USB HDD inserted passphraseless booting of the server is possible. Our servers are running ...
4 votes
0 answers
128 views

Linux: Is it possible to encrypt a file so everybody in our organisation can view it? (but no one else) -> s/mime

In my organisation we have all s/mime installed in our email clients so we can verify our ID and send encrypted mails. These personal certificates are backed by a trusted server certificate. This ...
1 vote
0 answers
190 views

LUKS encrypted drive won't open even after passing valid passphrase

I created a linux persistence LUKS encrypted drive /dev/sdb3 and I didn't access the drive for about 2 months since the thumbdrive was lost but after finding it when I select kali linux encrypted ...
0 votes
0 answers
131 views

Changed grub-default in encrypted Manjaro Linux/Arch - BIOS shows up after decrypting

System Fully encrypted Manjaro Linux Problem I tried to downgrade my kernel, modified the grub. Now when Im booting, the screen appears in which I need to enter the decryption key. Everything fine ...
0 votes
0 answers
150 views

Decrypt automatically boot partition in Fedora 34

I recently installed Fedora 34 on my laptop and I need an easy way to decrypt automatically my luks2 root partition. I tried this guide: https://forums.centos.org/viewtopic.php?t=53452 and worked on a ...
0 votes
0 answers
156 views

Where are luks keys stored (other than /etc/luks-keys)?

I added a luks volume to /etc/crypttab with none in the 3rd field for the key file. On next boot I was prompted for the key as expected and the drive unlocked no problem. On subsequent boots the luks ...
  • 331
0 votes
0 answers
273 views

Decrypting DES CBC and ECB error: Bad Magic Number

I am trying to encrypt and decrypt a BMP file using CBC and ECB with the following commands provided to me: openssl enc -des-cbc -in car.bmp -out car_enc_cbc.bmp -nosalt openssl enc -des-ecb -in car....
4 votes
1 answer
93 views

Visualizing encrypted image without saving decrypted version

I am learning how to decrypt secret image files using gpg. In the example below I am encrypting (and then visualizing) a photo called kermit.png. So far I was able to do this as follows: gpg -d kermit....
  • 163

1
2 3 4 5
17