Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

Filter by
Sorted by
Tagged with
1
vote
0answers
120 views

Piping Backups through Compression and Encryption

I am trying to backup a disk image of a local system to a remote system, in a way I can automate by bash script at a later point. Backing up and restoring was going well until I introduced encryption, ...
0
votes
0answers
55 views

CONFIG_EXT4_ENCRYPTION change in .config not persisting after building the kernel

I'm trying to enable encryption config in the kernel for Nvidia Jetson Nano(Tegra), by using menuconfig and rebuilding the kernel. But the specific change is not persisting and is overridden each time ...
3
votes
0answers
165 views

Encryption of existing dataset in ZFS (ZoL 0.8)

Is it possible to encrypt an existing dataset (including snapshots) in ZFS on Linux >= 0.8, e.g. by using send | recv and destruction of the original dataset?
1
vote
2answers
83 views

How can I encrypt my folder so there is no access to its contents?

I was able to encrypt a directory so that it can not be deleted. And I encrypted the file in the folder. But then I was able to delete the encrypted file in the encrypted folder, in which case, ...
0
votes
1answer
192 views

How decrypt a file in nano text editor?

I encrypted a text file in terminal using "gpg -c filename" and got "filename.txt.gpg" created in my file manager. I deleted the original unencrypted file. Now I want to decrypt it in Nano so I can ...
1
vote
0answers
36 views

Network Manager won't connect to open (non-encrypted) Wi-Fi access point

How do I instruct Network Manager to connect to a Wi-Fi access point with no encryption using an already-defined Wi-Fi connection? I have tried: nmcli connection modify "${CONNECTION}" \ 802-11-...
2
votes
1answer
23 views

Does the presence of cleartext sha1 sums in knoppix-data.aes indicate corruption?

This question is about the optional encryption of user data with the live Linux distribution KNOPPIX v6.2 (2009-11-18), which as I understand is based on Debian. I do not use this old version anymore,...
1
vote
1answer
96 views

Tools to lock/encrypt folder in debian

Is there any tools to encrypt folder except encfs for debian?
1
vote
1answer
164 views

Copying ext4 encrypted files

I'm using ext4 encryption. https://wiki.archlinux.org/index.php/Ext4#Using_file-based_encryption Before I decrypt a directory, I can see lots of encrypted filenames in it. I would like to copy the ...
0
votes
0answers
19 views

Find wich mailbox encrypt or not encrypt there passwords for IMAP or POP3

I try to list all mailboxes with the method of encryption passwords. How can I do this? I know that I can grep the method=LOGIN,PLAIN,CRAM-MD5 with: cat /var/log/mail.log | grep method=LOGIN or ...
0
votes
0answers
12 views

GPG Encryption Problem [duplicate]

I think I'm missing something because when I use gpg -c test.txt I'm prompted to put and repeat a password and the test.txt.gpg file appear but if I try to decrypt it gpg test.txt.gpg, It doesn't ask ...
3
votes
2answers
797 views

gpg cannot unlock passphrase-less key: “gpg: public key decryption failed: No passphrase given”

I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
0
votes
1answer
169 views

How to encrypt file with gpg and a passphrase only?

I have a file that is decrypted with a similar command: gpg --batch --yes -q -d --passphrase-fd 0 -o "/var/file.out" "/var/file.gpg" < /var/secret.key I want to change the content of the /var/...
2
votes
2answers
199 views

Encrypt a file on remote host

How to encrypt a file on the remote host using Ad-Hoc command 'ansible-vault'. for example, a myfile.txt on a remote machine needs to be encrypted from the host machine
1
vote
0answers
296 views

How Can I luks encrypt the root and swap partition on a Fedora ARM Server?

On every graphical Linux installation I've used there is typically a checkbox to enable luks encryption. Problem is the installation is different, whereas typically you get a bootable .iso or .img the ...
1
vote
1answer
987 views

CentOS7 full disk encryption

I have one physical server and would like to configure full disk encryption for it. First I was playing around with an virtual machines (CentOS7) and have enabled it during installation: On reboot ...
3
votes
1answer
126 views

How to configure a shutdown at the xth wrong entered password?

Having an encrypted hard drive is all well and good, but chances are that if someone is gonna steal your laptop, it’s probably not going to be turned off. Most likely, it will be stolen in a powered-...
1
vote
1answer
37 views

Rebuild LUKS as extended container

I deleted a LUKS partition by fdisk for some reason; I rebuilt it, but mistakenly did so as an extended container, then hit w. Although I deleted the extended container later, and rebuilt the LUKS ...
1
vote
0answers
80 views

How to create password encrypted backup with gpg

Recently, I made a script that archives important files with gzip, encrypts them with gpg, using gpg --symmetric (which prompts me for a password), then uploads it. I was testing the backup on ...
0
votes
0answers
538 views

Luks UEFI Boot not asking for password?

I've setup an encrypted UEFI-Booting Arch installation1. Why am I not asked for the phrase on booting? Remark: If I change the name crypto in `/etc/crypttab` to e.g. encryptedBOOT I am required to ...
0
votes
0answers
237 views

Linux Mint19.. /home encrypted after Timeshift restore .. I have never encrypted anything on my system

After the Timeshift restore I am unable to login. Entering my password simply returns me to login prompt. This is what I have tried. Using Grub restore and LiveCD(Mint19) I have confirmed that home/...
0
votes
0answers
49 views

How come my encrypted drives/partitions randomly do not decrypt upon booting?

I have the following encrypted. - HOME drive - SWAP partition - BACKUP drive I use a keyfile on a USB stick to decrypt my drives upon booting. Sometimes, and I mean RANDOMLY, upon booting up my ...
3
votes
3answers
8k views

OpenSSL 1.1.1b warning: Using -iter or -pbkdf2 would be better while decrypting a file encrypted using OpenSSL 1.1.0g

Today I got this warning issued by OpenSSL in Cygwin after updating some packages, I believe openssl was included: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be ...
1
vote
0answers
126 views

Hibernation with encrypted home and swap without initramfs

I have a Linux setup with an encrypted /home/<username> (LUKS) and without an initramfs. I currently have an unencrypted swap partition, intended for hibernation. For security reasons, I would ...
0
votes
1answer
285 views

Encrypting a currently used external hard drive such that it can be updated with rsync?

I currently have an unencrypted external hard drive that I use as a backup for my encrypted (with LUKS) main machine. To update my backup, I simply log in to the main machine and rsync to my external ...
0
votes
0answers
120 views

Automounting LUKS encrypted volume at boot time using USB memory as key

I'm setting up a new Debian Stretch installation, and it's all a bit new to me. I've used linux a lot, but I've never really been an administrator of a server before. Because this system, or some ...
1
vote
1answer
147 views

Are btrfs advantages negated with over-the-top encryption?

Are the benefits of btrfs lost if one uses encryptFS on top? What advantages (over ext4) of btrfs remain intact with encryptFS? If I want to have the full benefits of btrfs with encryption, is LUKS ...
0
votes
1answer
82 views

How do you turn on Adiantum on Linux 5.0?

I read recently that Linux 5.0 introduced support for Adiantum, Google's low-power encryption standard, and I felt like playing around with it. But, I can't find anything on the Internet about it, so ...
0
votes
1answer
63 views

Safest way to store TLS private keys without a security module

I am using BeableBone Black devices running Debian which communicate securely with an AWS server over TLS using signed certificates. I need to store my private keys securely on the devices. The best ...
1
vote
1answer
2k views

Shell Script: Decrypt the encrypted password and store it in variable

I have a file "credential.txt" which contains the password of mysql. I have another script which calls this text file and retrieves the password from it. For security purposes, I don't want to store ...
2
votes
2answers
433 views

Decrypting GnuPG-encrypted files

I have some RNA-seq files need to be decrypted. For example 1672_WTSI-OESO_005_w3.tar.gz.gpg Likely I have key for that in same folder 1672_WTSI-OESO_005_w3.gpgkey I have also have a file name ...
2
votes
1answer
660 views

Is it possible to LUKS require both password and key file?

My goal is to be able easily destroy medium with key file in emergency situation and make system unbootable, even is potential advisor knows right password for the system. I'd store this key file in ...
-1
votes
1answer
98 views

Protecting an email-proxy (Gmail) account being used by a Mail Transfer Agent (MTA)

On Debian LAMP with different PHP based CMSs I use the MTA sSMTP to send email via an email proxy (Gmail); the emails I send are only contact-form inputs transferred from any such CMS to my own email ...
0
votes
1answer
1k views

Can openssl convert SSH public key to a PEM file without private key?

So I've seen many many posts on how to do the conversion with private key; but does anyone one know how I can do this with just only public key? As I'm trying to convert someone else's public key. Or ...
-1
votes
1answer
242 views

Unix File Permissions and Decryption with OpenSSL's enc command

I have a specific question about OpenSSL's enc command, but I suppose it applies more generally to Unix/Linux file permissions. I have a bash script which has the following decrypt command: openssl ...
3
votes
1answer
2k views

How to change luks encryption difficulty on manjaro full disk encrypt

I am using manjaro with full disk encrypt, however, the wait time at boot for decrypt is very long ( i assume because of a high difficulty setting) . How can I change encryption difficulty/ wait time ...
1
vote
0answers
129 views

Encrypting connection strings in a shell file

I work in a large organization with dozens if not hundreds of dev teams working on various products, and one of our goals is to try and establish some standards around encrypting confidential ...
0
votes
1answer
47 views

Using cores on multiple servers for bruteforce-luks [closed]

BACKGROUND: I have already created a passphrase list to use with bruteforce-luks. Unfortunately, that list was not enough to find the correct passphrase. I am assuming I missed out a word or 2. I ...
0
votes
4answers
182 views

Automate multiple password enties to decrypted LUKS + Ext4 USB stick

I have a USB stick encrypted with LUKS + Ext4. I have forgotten the password... However, I know which words will be included in the password and have a list of all permutations of those words. ...
0
votes
1answer
284 views

crypttab: location of luks header file

Hi my crypttab looks as follows: crypt_device /dev/sda luks,header=/boot/header.img update-initramfs -u -k all works with success, but for some reason cryptsetup will not find the header.img which ...
1
vote
0answers
85 views

Encrypting hard drive containing the MBR with Veracrypt

I have three hard drives in my laptop: /dev/sdc (an mSATA drive) is where the system is installed and is completely encrypted with LUKS. /dev/sdb (for media/text files - the majority of /home) was ...
13
votes
1answer
3k views

Is this a zip encryption bug?

I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password: #zip --encrypt encrypted.zip -r dir1/ The above will ...
1
vote
2answers
2k views

fingerprint-gui on Linux Mint 19 “Tara” cinnamon works but not on first boot or in software center

On my Lenovo Thinkpad X1 Carbon 3rd. Gen., fingerprint-gui works fine when locking the screen or requesting sudo in terminal. It doesn't work when I freshly boot up the system at first login, and it ...
0
votes
0answers
44 views

How to create an encrypted partition and how does Linux then decrypt it [duplicate]

I'm still very much in the learning phase of Linux especially for the use in embedded systems. My intention is to create a separate encrypted partition on an SD card, possibly by using dm-crypt. ...
2
votes
1answer
161 views

Creating an encrypted partition to store private keys [closed]

I am using a BeagleBone Black board running Debian. My intention is to create a separate encrypted partition to store private keys in the internal emmc. The keys are used for SSL communication. The ...
0
votes
1answer
411 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
1
vote
0answers
206 views

How to change encryption for SSHD in Fedora Server 29?

CRYPTO_POLICY field is empty and I do not know where to start. I only read about LEGACY, DEFAULT and FUTURE options (what is not clear for me absolutely how it is relates to SSHD). # Ciphers and ...
1
vote
0answers
511 views

Understanding how MobaXterm keeps an ssh connection alive

I want to have a stable ssh connection to a server where I do things. That would last for days or weeks. In general, one can set TCP keepalive to more than 7200 seconds: Socket reset by peer ever 2 ...
1
vote
1answer
1k views

Password Encryption [duplicate]

I have a Migrate.ksh file, in that some passwords are available, I would like to encrypt this file in the Unix. The Passwords file being used in another script. Can you please let me know the process ...
0
votes
1answer
59 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...

1 2 3 4 5 14