Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

0
votes
0answers
13 views

CentOS7 full disk encryption

I have one physical server and would like to configure full disk encryption for it. First I was playing around with an virtual machines (CentOS7) and have enabled it during installation: On reboot ...
3
votes
1answer
72 views

How to configure a shutdown at the xth wrong entered password?

Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
1
vote
1answer
18 views

Rebuild LUKS as extended container

I deleted a LUKS partition by fdisk for some reason; I rebuilt it, but mistakenly did so as an extended container, then hit w. Although I deleted the extended container later, and rebuilt the LUKS ...
1
vote
0answers
26 views

How to create password encrypted backup with gpg

Recently, I made a script that archives important files with gzip, encrypts them with gpg, using gpg --symmetric (which prompts me for a password), then uploads it. I was testing the backup on ...
0
votes
0answers
37 views

Luks UEFI Boot not asking for password?

I've setup an encrypted UEFI-Booting Arch installation1. Why am I not asked for the phrase on booting? Remark: If I change the name crypto in `/etc/crypttab` to e.g. encryptedBOOT I am required to ...
0
votes
0answers
39 views

Linux Mint19.. /home encrypted after Timeshift restore .. I have never encrypted anything on my system

After the Timeshift restore I am unable to login. Entering my password simply returns me to login prompt. This is what I have tried. Using Grub restore and LiveCD(Mint19) I have confirmed that home/...
0
votes
0answers
18 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
-1
votes
0answers
7 views

d-i partman | encryption dualbootsystem

i want to use preseed to automate the install of Ubuntu on a system with OR without Windows10 already on it. It should use the "biggest free" partition on the client. preseed.cfg d-i partman-...
0
votes
3answers
151 views

OpenSSL 1.1.1b warning: Using -iter or -pbkdf2 would be better while decrypting a file encrypted using OpenSSL 1.1.0g

Today I got this warning issued by OpenSSL in Cygwin after updating some packages, I believe openssl was included: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be ...
1
vote
0answers
17 views

Hibernation with encrypted home and swap without initramfs

I have a Linux setup with an encrypted /home/<username> (LUKS) and without an initramfs. I currently have an unencrypted swap partition, intended for hibernation. For security reasons, I would ...
0
votes
1answer
118 views

Encrypting a currently used external hard drive such that it can be updated with rsync?

I currently have an unencrypted external hard drive that I use as a backup for my encrypted (with LUKS) main machine. To update my backup, I simply log in to the main machine and rsync to my external ...
0
votes
0answers
26 views

Automounting LUKS encrypted volume at boot time using USB memory as key

I'm setting up a new Debian Stretch installation, and it's all a bit new to me. I've used linux a lot, but I've never really been an administrator of a server before. Because this system, or some ...
1
vote
1answer
43 views

Are btrfs advantages negated with over-the-top encryption?

Are the benefits of btrfs lost if one uses encryptFS on top? What advantages (over ext4) of btrfs remain intact with encryptFS? If I want to have the full benefits of btrfs with encryption, is LUKS ...
0
votes
1answer
37 views

How do you turn on Adiantum on Linux 5.0?

I read recently that Linux 5.0 introduced support for Adiantum, Google's low-power encryption standard, and I felt like playing around with it. But, I can't find anything on the Internet about it, so ...
0
votes
1answer
32 views

Safest way to store TLS private keys without a security module

I am using BeableBone Black devices running Debian which communicate securely with an AWS server over TLS using signed certificates. I need to store my private keys securely on the devices. The best ...
0
votes
1answer
135 views

Shell Script: Decrypt the encrypted password and store it in variable

I have a file "credential.txt" which contains the password of mysql. I have another script which calls this text file and retrieves the password from it. For security purposes, I don't want to store ...
2
votes
2answers
103 views

Decrypting GnuPG-encrypted files

I have some RNA-seq files need to be decrypted. For example 1672_WTSI-OESO_005_w3.tar.gz.gpg Likely I have key for that in same folder 1672_WTSI-OESO_005_w3.gpgkey I have also have a file name ...
2
votes
1answer
113 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
-1
votes
1answer
72 views

Protecting an email-proxy (Gmail) account being used by a Mail Transfer Agent (MTA)

On Debian LAMP with different PHP based CMSs I use the MTA sSMTP to send email via an email proxy (Gmail); the emails I send are only contact-form inputs transferred from any such CMS to my own email ...
0
votes
1answer
184 views

Can openssl convert SSH public key to a PEM file without private key?

So I've seen many many posts on how to do the conversion with private key; but does anyone one know how I can do this with just only public key? As I'm trying to convert someone else's public key. Or ...
-1
votes
1answer
62 views

Unix File Permissions and Decryption with OpenSSL's enc command

I have a specific question about OpenSSL's enc command, but I suppose it applies more generally to Unix/Linux file permissions. I have a bash script which has the following decrypt command: openssl ...
2
votes
1answer
252 views

How to change luks encryption difficulty on manjaro full disk encrypt

I am using manjaro with full disk encrypt, however, the wait time at boot for decrypt is very long ( i assume because of a high difficulty setting) . How can I change encryption difficulty/ wait time ...
1
vote
0answers
65 views

Encrypting connection strings in a shell file

I work in a large organization with dozens if not hundreds of dev teams working on various products, and one of our goals is to try and establish some standards around encrypting confidential ...
0
votes
0answers
45 views

openssl - sign with private key not from file

I'm signing a file using SHA256withRSA: openssl dgst -sha256 -hmac "$privateKey where $privateKey is the stuff in between -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY-----. Am I doing it ...
0
votes
1answer
29 views

Using cores on multiple servers for bruteforce-luks [closed]

BACKGROUND: I have already created a passphrase list to use with bruteforce-luks. Unfortunately, that list was not enough to find the correct passphrase. I am assuming I missed out a word or 2. I ...
0
votes
4answers
82 views

Automate multiple password enties to decrypted LUKS + Ext4 USB stick

I have a USB stick encrypted with LUKS + Ext4. I have forgotten the password... However, I know which words will be included in the password and have a list of all permutations of those words. ...
-1
votes
1answer
47 views

crypttab: location of luks header file

Hi my crypttab looks as follows: crypt_device /dev/sda luks,header=/boot/header.img update-initramfs -u -k all works with success, but for some reason cryptsetup will not find the header.img which ...
1
vote
0answers
52 views

Encrypting hard drive containing the MBR with Veracrypt

I have three hard drives in my laptop: /dev/sdc (an mSATA drive) is where the system is installed and is completely encrypted with LUKS. /dev/sdb (for media/text files - the majority of /home) was ...
13
votes
1answer
3k views

Is this a zip encryption bug?

I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password: #zip --encrypt encrypted.zip -r dir1/ The above will ...
1
vote
2answers
530 views

fingerprint-gui on Linux Mint 19 “Tara” cinnamon works but not on first boot or in software center

On my Lenovo Thinkpad X1 Carbon 3rd. Gen., fingerprint-gui works fine when locking the screen or requesting sudo in terminal. It doesn't work when I freshly boot up the system at first login, and it ...
0
votes
0answers
36 views

How to create an encrypted partition and how does Linux then decrypt it [duplicate]

I'm still very much in the learning phase of Linux especially for the use in embedded systems. My intention is to create a separate encrypted partition on an SD card, possibly by using dm-crypt. ...
2
votes
1answer
82 views

Creating an encrypted partition to store private keys [closed]

I am using a BeagleBone Black board running Debian. My intention is to create a separate encrypted partition to store private keys in the internal emmc. The keys are used for SSL communication. The ...
0
votes
1answer
97 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
1
vote
0answers
84 views

How to change encryption for SSHD in Fedora Server 29?

CRYPTO_POLICY field is empty and I do not know where to start. I only read about LEGACY, DEFAULT and FUTURE options (what is not clear for me absolutely how it is relates to SSHD). # Ciphers and ...
1
vote
0answers
182 views

Understanding how MobaXterm keeps an ssh connection alive

I want to have a stable ssh connection to a server where I do things. That would last for days or weeks. In general, one can set TCP keepalive to more than 7200 seconds: Socket reset by peer ever 2 ...
1
vote
0answers
106 views

FFmpeg playing encoded video stream [closed]

This is the m3u8 playlist file I'm trying to play. #EXTM3U #EXT-X-VERSION:03 #EXT-X-TARGETDURATION:10 #EXT-X-MEDIA-SEQUENCE:1981290 #EXT-X-KEY:METHOD=AES-128,URI="encrypted-file://KEY_1541348762",IV=...
1
vote
1answer
595 views

Password Encryption [duplicate]

I have a Migrate.ksh file, in that some passwords are available, I would like to encrypt this file in the Unix. The Passwords file being used in another script. Can you please let me know the process ...
0
votes
1answer
33 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...
1
vote
1answer
75 views

Passwordless encryption of flash drive

I am using Ubuntu and I have an encrypted flash drive which synchronizes with a folder on my desktop whenever I plug it into the computer (using rsync and a systemctl service that runs the bash script ...
5
votes
2answers
262 views

How safe is SSH when used for tunneling?

Scenario: I want to connect from Client A to Client B using SSH/SFTP. I can not open ports on either client. To solve this issue, I got a cheap VPS to use as a relay server. On Client B I connect to ...
1
vote
0answers
488 views

OpenSSL: how to encrypt/decrypt?

In Debian, I'll encrypt a file or text: $ echo test | openssl enc -aes-256-cbc -in - -pass pass:password -out /tmp/test.enc Then move the file to macOS (Mojave) and attempt to decrypt: $ openssl ...
1
vote
2answers
784 views

How to encrypt LVM partition with LUKS after installation?

Is it possible to encrypt a LMV partition after having installed an OS? I just finally managed to get LVM but I couldn't figure out how to get it encrypted. The installer didn't seem to provide for ...
1
vote
1answer
124 views

Encryption of syslog & auditd in local disk? [closed]

We need to use encrypted syslog and auditd in local disk. Is it possible to save syslog and auditd message encrypted in disk ?
2
votes
1answer
33 views

The password of previously encrypted volume got changed by the Debian installer

I already did some research on my question (see below), and it's as good as a 'done deal' but I would still like to put forward my problem to this knowledgeable community. Short version of the issue: ...
4
votes
1answer
258 views

Security of bash script involving gpg symmetric encryption

Notice: the very same vulnerability has been discussed in this question, but the different setting of the problem (in my case I don't need to store the passphrase) allows for a different solution (i.e....
-2
votes
1answer
53 views

Obtain information on encrypted android card image

For several days now I have tried to recover the key for an encrypted android-container (android_expand, used as internal storage) without success. As all kinds of stuff of the past years is on that ...
0
votes
0answers
30 views

Decrypting and mounting whole disk after ubuntu installation bug

When testing out the new Ubuntu Bionic Beaver installer, I chose the option to install Ubuntu and enable LUKS encryption + LVM. I was waiting for the confirmation page to ensure that the installer ...
1
vote
0answers
21 views

Backing up GnuPG

I am not sure how to securly backup my .gnupg folder or to be specific my private key. I googled and found that people recommended just copying the whole .gnupg folder. Is there a safer way to Backup ...
1
vote
1answer
48 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
1
vote
0answers
106 views

Debian cryptoloop module missing [closed]

When I do modprobe cryptoloop I get: modprobe: FATAL: Module cryptoloop not found in directory /lib/modules/4.9.0-8-amd64 the package cryptsetup is installed. I have this working on another Debian ...