Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

Filter by
Sorted by
Tagged with
92
votes
11answers
244k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
62
votes
11answers
57k views

SSH to decrypt encrypted LVM during headless server boot?

When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive. After choosing that option, I am prompted for my password during boot to decrypt ...
5
votes
2answers
849 views

Partition still encrypted with luks after wipefs

I wiped the disk using wipefs -a /dev/sda. I happily formatted the disk, and it seems that when I'm about to mount /dev/sda3 it says "unknown file system type crypto_LUKS". I did no encryption on ...
28
votes
8answers
18k views

Linux boot loaders supporting full disk encryption?

Are there any Linux boot loaders supporting full disk encryption (a la TrueCrypt). I know there was work towards adding encryption support to GRUB2, but this does not seem to be ready yet. Any other ...
14
votes
2answers
28k views

How can I shrink a LUKS partition, what does `cryptsetup resize` do?

I am in progress of resizing a LUKS encrypted partition that contains a single ext4 filesystem (no LVM or something). The cryptsetup FAQ recommends to remove the old partition and recreate it, but ...
5
votes
1answer
2k views

Tunnel traffic through another machine over ssh

I want to be able to route a portion of my traffic through another machine over SSH. For example, is it possible to browse the web through the ssh tunnel and also browse the web through your LAN ...
8
votes
7answers
3k views

Secure FOSS alternative to Skype on Linux & OpenBSD?

Criteria: Makes audio/video calls Encrypts the whole traffic (using good encryption) Is cross-platform (including Windows 7, etc.) Runs on modern Linux distributions (Fedora, Ubuntu, etc.) Runs on ...
53
votes
5answers
142k views

SSH: How to disable weak ciphers?

Security team of my organization told us to disable weak ciphers due to they issue weak keys. arcfour arcfour128 arcfour256 But I tried looking for these ciphers in ssh_config and sshd_config ...
22
votes
2answers
34k views

Simplest way to password protect a directory and its contents without having to create new files?

I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
11
votes
2answers
27k views

How can I encrypt a file?

I would like to download some files from my server into my laptop, and the thing is that I want this communication to be as stealth and secure as it can be. So, far I came up using VPN, in that way I ...
19
votes
3answers
12k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
12
votes
2answers
8k views

Linux: LUKS and multiple hard drives

I have a Debian Linux system (amd64) installed on a RAID-1 system encrypted device (LVM on LUKS) and will have a RAID-6 of >=4 disks where I'll put my data (LUKS and maybe LVM). I think the basic ...
2
votes
1answer
3k views

Install Backtrack 5 r2 into running LUKS setup installed with ubuntu

One hard disk (sda), two partitions, with a working Ubuntu running. 1) /boot 2) LVM with this virtual volumes/partions/ or whatever they are called inside: Swap Ubuntu Home Prepared for Backtrack ...
9
votes
3answers
13k views

Any reason for encrypted /?

I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
4
votes
1answer
2k views

Encrypt files using gpg (and them symetric encrypting the key) - is it a normal thing to do in the *nix world?

I read a lot of articles about using gpg to encrypt email, but I would like to use it to encrypt some files - mainly a bunch of *.isos. I'm going to describe what I thought I would do, so you can ...
10
votes
3answers
4k views

Encrypt directory with GnuPG?

Is there any way to encrypt a directory using gpg? It seems to only accept files as arguments.
5
votes
2answers
3k views

GnuPG : representations of key IDs and fingerprints

In gpg's man page, there are examples of key IDs : 234567C4 0F34E556E 01347A56A 0xAB123456 234AABBCC34567C4 0F323456784E56EAB 01AB3FED1347A5612 0x234AABBCC34567C4 and fingerprints : ...
1
vote
2answers
905 views

Execute scripts without decrypting them [duplicate]

I have a set of scripts (bash, ruby, python) and want to put everything into a container like file so I can deploy this container on a lot of servers. This scripts need to protect from accessing other ...
5
votes
2answers
4k views

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to ...
2
votes
1answer
184 views

Creating an encrypted partition to store private keys [closed]

I am using a BeagleBone Black board running Debian. My intention is to create a separate encrypted partition to store private keys in the internal emmc. The keys are used for SSL communication. The ...
19
votes
3answers
15k views

Encrypt OfflineIMAP Password

I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process). From the documentation, it seems the only way to ...
14
votes
6answers
15k views

Fast Way to Randomize HD?

I've read about how to make hard drives secure for encryption, and one of the steps is to write random bits to the drive, in order to make the encrypted data indistinguishable from the rest of the ...
24
votes
2answers
20k views

“No such file or directory” when generating a gpg key

I'm trying to generate a gpg key $ gpg --full-gen-key but eventurally I get an error gpg: agent_genkey failed: No such file or directory Key generation failed: No such file or directory I'm on ...
12
votes
2answers
6k views

mount: No such file or directory with encrypted recovery

I have destroyed my Mint Linux installation. I just wanted access to my remote storefront. So what happened was I was having trouble with ICEauthority file in my home directory. So following ...
8
votes
4answers
4k views

How to best encrypt and decrypt a directory via the command line or script?

I have a directory of text files under bazaar version control and keep a copy (a branch, actually) on each of my machines. I want to encrypt and unencrypt the directory via the command line. Ideally, ...
15
votes
3answers
8k views

How do I set up an encrypted swap file in Linux?

2017 WARNING! The accepted answer appears to work, but with recent kernels I discovered that the system would hang as soon as it started swapping. If you attempt using an encrypted swap file, make ...
6
votes
1answer
6k views

LUKS storing keyfile in encrypted usb drive

I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives. Now I would like to know how to secure store the keyfile used for the automatic unlock of the ...
5
votes
3answers
4k views

Is there any utility or procedure available to dm-crypt my existing live data in place to make a full disk encryption

Once I already have a running Linux system installed with live unencrypted data on my HDD. Is there any reasonable way to dm-crypt that entire HDD right in place? (Without backing up then restoring ...
26
votes
1answer
2k views

Pre-encryption wipe, why?

I wanted to know why, before encrypting and installing itself on the drive , Kali : wiped the whole drive filled the drive with 0s filled the drive with 1s filled the drive with Random data wiped the ...
12
votes
2answers
32k views

How to remove LUKS encryption?

I tried removing LUKS encryption on my home directory using the following command: cryptsetup luksRemoveKey /dev/mapper/luks-3fd5-235-26-2625-2456f-4353fgdgd But it gives me an error saying: ...
10
votes
4answers
382 views

Can swapping be disabled on the application level?

I'm currently using thunderbird with gnupg to read encrypted emails. If I understand the swapping behavior correctly, the memory pages containing the decrypted emails might be swapped out and leave ...
8
votes
2answers
18k views

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, ...
4
votes
1answer
7k views

Debian error message: “Unable to find LVM volume”, but then boots successfully

I was trying to encrypt all the HDD during the installation process of Debian 8 Jessie using full disk encryption + LVM, and I did it, but, there are a little "problem". Before the system asks me the ...
3
votes
3answers
4k views

How much storage overhead comes along with cryptsetup and ext4?

I want to encrypt the content of a directory in a container with an ext4 filesystem using cryptsetup. The size of the container should be as small as possible and as big as necessary, because I only ...
7
votes
2answers
2k views

How to set up an encrypted directory to be mounted only during samba access?

(This is not about restricting client access, for which ext3 permissions do the trick) I'd like to encrypt the data on my NAS drive (Buffalo LinkStation Pro with SSH access enabled, if that matters) ...
6
votes
2answers
12k views

Is there any way to fully encrypt my hard-drive AFTER an installation of Linux Mint?

I'm askin myself, is there any software who can encrypt my whole hard drive with Linux Mint 17.3 on it AFTER the installation? Like TrueCrypt for Windows?! If not and I've to reinstall everthing is ...
4
votes
2answers
1k views

How to not store hdd encryption key on machine, but still mount on boot?

Setup: I'm using a raspberry pi with a USB HDD, running arch linux and syncthing for my own "cloud" sync. Problem: In case of a physical break-in where the HDD pi and HDD is stolen, I'd like to ...
3
votes
1answer
2k views

Use Linux to read contents of Windows encrypted folder

Windows allows the selective encrypting of certain files or folders. I currently have a Windows folder that is set to "encrypt contents to secure data". (The Windows partition is NTFS.) If I mount ...
3
votes
0answers
882 views

Mount encrypted ChromeOS partition in Chrubuntu

I have a Samsung Chromebook 2, and was using crouton to run linux in a chroot next to chomeos and ran out of SDD space. I opened gparted, and it told me that the GPT table was in the wrong place and ...
3
votes
2answers
2k views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
3
votes
1answer
1k views

How to make system automatically mount encrypted device in Linux

When I plug my external storage in , I need to automatically mount it as an encrypted device. How do I make this happen ?
1
vote
2answers
1k views

OpenVPN : protect your clients key/cert/conf from being stolen?

I have configured an OpenVPN install. Mode: multiclients 1server. Clients are raspberries. I note how easy it is to steal a rasp, and look in HDD to get key+cert+conf. Copy it on your laptop, and ...
8
votes
3answers
4k views

Receive Pop/IMAP email and then forward as encrypted to gmail

Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the subject/...
7
votes
2answers
5k views

How to edit a .gpg file with vi?

So I created a gpg encrypted file with password: gpg -c passwords.txt.gpg how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted passwords....
5
votes
1answer
1k views

dmsetup luksFormat creating an alignment inconsistency

When unlocking a newly-formatted LUKS volume, I received a warning in the kernel log: kernel: device-mapper: table: 253:14: adding target device sdk1 caused an alignment inconsistency: ...
4
votes
2answers
3k views

Migration from loop-aes to cryptsetup

I've upgraded my linux installation to kernel 2.6.38-2 (Debian testing). With the new kernel, loop-aes does not compile, so I cannot mount my encrypted volumes. I heared that it is possible to use ...
4
votes
2answers
311 views

How to gradually encrypt the tshark output file along the capture?

In order to secure a packet capture, which method would you use to make all (or close to all) past captured packet utterly unaccessible unless a given password is given. My habbits are to mount an ...
4
votes
3answers
5k views

Best way to benchmark different encryption solutions on my system

I want to compare different encryption solutions for encrypting my system, possibly different solutions for different parts of the system such as /usr or /home. In particular I look at dm-crypt ...
4
votes
1answer
2k views

How to encrypt Linux (Debian 8) post-installation and what are the consequences?

I have certain folders in my Linux partition which I need to make sure no one can access unless the log in with my login password (or root one). I know that during installation I can encrypt with ...
4
votes
1answer
985 views

Security of bash script involving gpg symmetric encryption

Notice: the very same vulnerability has been discussed in this question, but the different setting of the problem (in my case I don't need to store the passphrase) allows for a different solution (i.e....