Questions tagged [encryption]

encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties

Filter by
Sorted by
Tagged with
0
votes
1answer
479 views

Full disk encrypted linux + windows

I like to install windows7 with dual boot. I have a linux on my disk with full luks/dm encryption. My question is, can i install windows in this encrypted disk? i can shrink 50-100gb and like keep ...
3
votes
1answer
759 views

SSD Encryption / dm-crypt

I have bought a Samsung 850 EVO 250GB yesterday and I am preparing to install Arch on it. But I have some questions before starting. My SSD supports encryption (ENCRYPTION SUPPORT: AES 256-bit ...
6
votes
1answer
4k views

GRUB takes too long to unlock the encrypted boot partition

I have installed GRUB2 to an encrypted boot partition, as detailed here. The chosen hashing algorithm for my luksFormat is sha512, with the default iter-time (which is 2 seconds). This encrypted ...
1
vote
1answer
841 views

PKCS7 encryption

I require your support. I wanted to do pkcs encryption using my certificate and third party certificate. I have below components and wanted to have pkcs7 encrypted output file. Source file : ...
3
votes
2answers
735 views

Create Encrypted USB Storage

How can I create an encrypted USB storage device that can be accessed on any system if created on Linux using with cryptsetup, dm-crypt or similar programs that can create encrypted containers on USB ...
2
votes
1answer
1k views

Yubikey file encryption without using OpenPGP?

Is there a way to encrypt single files with a Yubikey that doesn't use OpenPGP? I use my Yubikey for ssh logins and encrypting individual files (password stores.) The Yubikey is operating in CCID ...
7
votes
2answers
17k views

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, ...
5
votes
1answer
3k views

How to boot a system with full disk encryption from GRUB rescue

My system uses full disk encryption, including the boot partition. It basically follows the Arch wiki and uses GRUB, dm-crypt and luks. I have a single partition with both the boot and root ...
0
votes
0answers
507 views

Running travis script, decypting ssh key, being asked for passphrase and password

I'm stuck following this tutorial: https://oncletom.io/2016/travis-ssh-deploy/ My .travis.yml code: language: ruby sudo: false rvm: - 2.2 env: global: - domain: <..> - site_path: <.....
4
votes
1answer
908 views

Encrypt & obfuscate filenames

I am looking for a backup solution and while trying to anonymize and protect my data one of the problems I've found is that the filenames leak a lot of information. I am looking for a piece of ...
0
votes
1answer
650 views

Bad magic number error with travis

I get the following error for my github project after commiting my code on travis-ci.org: Deploying application on master ✓ domain: <mydomain> ✓ site path: /srv/http/webapps/Main ✓ zipping ...
10
votes
2answers
13k views

List available methods of encryption for LUKS

I was searching for a valid and still up-to-date way of encrypting hard disks. After some research I encountered LUKS and decided to give it a shot. So I looked up some examples of how to properly ...
1
vote
0answers
272 views

Fetchmail fails to deliver mail locally due to enforced STARTTLS

I have setup a local mail server using postfix and dovecot. I now want fetchmail to get my mails from another server and deliver them locally. I am getting errors, however, since fetchmail does not ...
2
votes
1answer
1k views

Password-protect a LibreOffice or OpenOffice ODT file from Bash

From a Bash terminal in a popular GNU/Linux distro, how can a non-password-protected [OpenDocument Text (.odt)](OpenDocument Text) document be transformed into a password-protected one? Unfortunately,...
1
vote
1answer
293 views

How to migrate a folder encrypted with eCryptfs to EncFS

I have a large folder encrypted with eCryptfs and synced with Dropbox. Is somehow possibile to migrate it to EncFS without re-encrypting it and thus without re-upload it to Dropbox?
0
votes
1answer
174 views

systemd-cryptsetup key file readable warning

Ok, so I've been debugging the last update of my system and found this warning running journalctl -b -p warning: systemd-cryptsetup: Key file <location> is world-readable. This is not a good ...
1
vote
2answers
46 views

What do I need to create backups as reliable and secured archives?

I backup my files to external HDD. I want to backup regularly, and secure them, in case that somebody steals my external HDD. I'd like to make scripts, which will create secured backup archives, with ...
3
votes
1answer
279 views

Asymmetric drive encryption

I have a desire to have an entire drive or volume encrypted and the volume to be write-enabled on restart of a linux system; does a method exist to provide that functionality? What I'm looking to do ...
0
votes
1answer
333 views

Why is duply unable to restore a backup due to signing error?

I manage my backups with duply. Today I wanted to fetch some backuped files from an old machine that got lost on my current machine. Unfortunately I got the error that the storage was signed with ...
1
vote
1answer
1k views

How Secure Is Tails Encryption? [closed]

I know. Tails itself is a very secure operating system, but what about its drive encryption? I would like to encrypt my flash drive with the tails built in drive encryption. What does it use? AES-256?
2
votes
3answers
848 views

vim: is possible to open a encrypted file using cli?

Simple question. With rar rar X file.tar -p"mypass" With 7z 7z X file.7z -p"mypass" Vim can encrypt file using :X and every time you want to open file must use the password. The question is: ...
3
votes
1answer
1k views

Debian : Verify disk encryption password for already mounted system

I am working on our Debian server on which we have a Raid drive encrypted with 2 devices. I did this around 1.5 years back and have never rebooted since. Now, we want to reboot for some reasons, but I ...
1
vote
0answers
349 views

Use dislocker without root access

I installed dislocker using this (excellent) answer. However I'd like to be able to mount and access an encrypter memory stick without root access. Presently, the root password is required in this ...
2
votes
0answers
261 views

Libvirt managed storage volume encryption of a volume on 'logical' storage pool

I can't figure out how to make encrypted storage volume (managed by libvirt) for a volume which sits on 'logical' pool type (ie. on LVM). # virsh vol-create ocz-5ef92v58m9be7jo9 /tmp/in error: Failed ...
8
votes
1answer
873 views

How does journalctl sign the logs if the “The verification key should be stored externally.”?

$ man journalctl ... --setup-keys Instead of showing journal contents, generate a new key pair for Forward Secure Sealing (FSS). This will generate a sealing key and a verification key. The sealing ...
1
vote
0answers
121 views

Should This Fedora Method of Encrypting /boot Work on Deb/Ubuntu?

I found a tutorial for moving the /boot partition to / so that it falls under the LUKS encryption I already have in place. The tutorial was however made with Fedora in mind. Is this safe and will it ...
0
votes
2answers
862 views

Encrypting archive and then dividing it into many parts

I have a personal archive of many files (more than 12Go) I want to encrypt it with a password, then divide it into 100 parts. How can I do so? And how can I regroup it and de-encrypt it to get the ...
-1
votes
1answer
202 views

SSH Tunnelling for Exceed

I have a following requirement. Source (Windows-Exceed) ---> Destination (Linux Running XServer xdm-kdm) I am able to get the complete X GUI when I connect using Exceed to Destination. This works!! ...
6
votes
1answer
3k views

Why can one box decrypt a file with openssl, but another one can't?

I've got a simple encrypted file with a bit of text inside. It's encrypted with des3 and I know the key. However, I can't for the life of me get it to decrypt in my kali VM. It works fine in a LInux ...
1
vote
2answers
4k views

Problem booting into my system: cryptsetup: lvm is not available

I installed Ubuntu 16.04 LTS with full disk encryption using this guide. Normally I have to enter one passphrase to unlock root and then another one to unlock swap, and then the system boots with no ...
1
vote
1answer
831 views

How to find out whether a LUKS encrypted partition is opened of closed?

Which command would you suggest to use in order to find out whether a LUKS encrypted partition is mapped or not (other than looking at or using lsblk output)? By opened device, I mean a device for ...
1
vote
1answer
2k views

Where Should I Store Encryption Keyfiles?

Let's say I use LUKS for all my system except for /boot and I have my /home/user directory encrypted as well. In the context of the security of my user account (Which is more than less isolated from ...
5
votes
1answer
1k views

How do I automatically import a non-root encrypted ZFS pool on boot-up?

I’m running an updated version of Arch Linux with the stock kernel, version 4.9.6, and ZoL version 0.7.0, and I want to import an encrypted non-root pool on boot. The pool is a raid 1 mirror. The ...
1
vote
0answers
488 views

“Wrong salt length” message at login. What algorithm to use to generate user password?

I'm trying to change programmatically a user's password, and got a few messages I can't explain along the way. I ran this command to start with: sudo usermod -p "$(openssl passwd -1 newpassword)" ...
-2
votes
1answer
255 views

I need to send a GPG message and I only have the pubkey of the recipients email [closed]

I have a Centos 7 on my desktop. I have a public GPG key of an e-mail address where I need to send an e-mail. Question: How can I send an encrypted e-mail to the recipient?
21
votes
1answer
14k views

Set default key in gpg for signing

I have created multiple keys using gpg. Whenever I try to sign any file, gpg automatically uses the first one I have created. How to set default key for signing in gpg. I don't want to delete/...
2
votes
1answer
44 views

does non-encrypted swap ever store encryption keys?

I have 2G RAM and 4G swap file. also I have encrypted storage for files. when I boot up my machine there are 100-120M RAM used so plenty of RAM available and swap won't be used (I guess?). If I unlock ...
2
votes
2answers
2k views

LUKS Container creation error: no loop device

I want to create an encrypted LUKS Container: # dd if=/dev/random of=pvt.img bs=1M count=512 # cryptsetup -y luksFormat pvt.img WARNING! ======== This will overwrite data on pvt.img irrevocably. ...
53
votes
5answers
134k views

SSH: How to disable weak ciphers?

Security team of my organization told us to disable weak ciphers due to they issue weak keys. arcfour arcfour128 arcfour256 But I tried looking for these ciphers in ssh_config and sshd_config ...
0
votes
1answer
27 views

What are the folder that I cannot set as encrypted folders decrypted at login? [closed]

I want maximize the number of folders encrypted with ecryptfs and decrypted at login with the module pam_ecryptfs.so. Which folders cannot possibly be encrypted before login in? I guess a lsof ran ...
3
votes
2answers
2k views

How To F2FS Filesystem Encryption?

I read that the f2fs format is good for SSD storage so I formatted one of my drives with it. I also read in some kernel notes that encryption was added for it but there's no documentation to speak of. ...
9
votes
1answer
381 views

gnupg 2.1.16 blocks waiting for entropy

Releases of gnupg from 2.1.16 (currently 2.1.17) block waiting for entropy only on first invocation. Note: this isn't an attempt to generate a key, just to decrypt a file and start the agent. The ...
0
votes
1answer
5k views

OpenSSL Usage to decrypt a string

I apologise if this is not the correct community. I have a string that I believe was encrypted using an RC2 cipher. I know the secret key and the IV but I am struggling to decrypt it using OpenSSL. ...
4
votes
1answer
2k views

How to encrypt the ffmpeg output when generating video chunks?

I can openssl encrypt a ffmpeg video stream with ffmpeg -i video1.mp4-video1.mp4.mp4 -f ogg - | openssl enc -des3 > outptu.ogg.des3 Which strategy would you use to encrypt the ffmpeg output ...
4
votes
1answer
2k views

Encrypt with GPG using a key passed as CLI argument

I want to create a script that would automatically encrypt and push to GitHub into public repo some sensible files I don't want to expose (but do want to keep together with the whole project). As a ...
0
votes
1answer
73 views

Testing password against encrypted ext2 container

I have a encrypted container containing a mountable EXT2 file system with no partition table. How can I mount that file using cryptsetup? My attemps fail with 'VFS: cant find ext4 filesystem'...
2
votes
1answer
1k views

Rewrapping the passphrase makes encryption disappear

I was exploring the possibility of changing the login password of ecryptfs. In this system (Ubuntu 14.04 LTS) the login password for ecryptfs and that for the Linux user are the same. My ecryptfs-...
1
vote
1answer
600 views

AES encryption for openwrt distribution

I'm using openwrt distribution and I want to encrypt a file using AES. How can I do that quickly and easily, and how can I - or someone else -decrypt it again?
1
vote
1answer
81 views

GPG encryption with gradual deletion in parallel

Say I have a 100GB file that I want to GPG encrypt on a system with 120GB hard drive memory and a small RAM. How can I decrypt the file without using an external memory, that is gpg encrypt a file ...
1
vote
0answers
371 views

Is multiple ecryptfs encryption possible?

Is multiple ecryptfs encryption possible? How to encrypt a folder called level2 with ecryptfs that is inside a ecryptfs mounted folder called level1? level1 and level2 folder are organized as # ...

1
3 4
5
6 7
14