Questions tagged [disk-encryption]
The disk-encryption tag has no summary.
317 questions
4
votes
1
answer
334
views
LUKS keyslot damaged?
I have two LUKS-encrypted SSDs in my laptop: one is the system SSD (nvme0n1), which contains my Home folder encrypted with eCryptfs, and the other is a Data SSD (nvme1n1), which is fully LUKS-...
- 41
1
vote
1
answer
86
views
Can a LUKS volume on a USB drive be opened at boot?
I have a new install of Debian 13 with a LUKS-encrypted hard drive (/dev/sda) with LVM. I am trying to add another encrypted drive to the LVM volume group as a new physical drive. For this, I am ...
- 371
0
votes
0
answers
63
views
How to automount eCryptfs volume at boot (without login)?
We have two servers. Application sever A and NFS file server B. Server B is shared among multiple various applications and it's generic NFS storage host that we don't have access to and it's corporate ...
- 1,363
2
votes
1
answer
246
views
Unable to unlock encrypted drive on Kali Linux installation
A friend of mine had someone install Kali on his Lenovo thinkpad. He provided the username and password which I believe is for logging into the system. The only issue is that I think he encrypted the ...
- 21
1
vote
1
answer
64
views
Does dm-crypt waste device space?
That is, when a device-mapping is created manually with the dm-crypt target, is the resulting device smaller than the backing device?
What is the missing space used for?
Will the answer change ...
- 149
0
votes
1
answer
74
views
Data Recover from Encrypted LUKS Partition | Missing Files
I have been having some issue unmounting my encrypted drive recently. This lead to it being forceably removed instead of ejected.
It appears to have some done some damage to the drive as, although I ...
- 111
0
votes
0
answers
156
views
what is the smallest possible size when creating a luks2 header
What is the smallest possible size when creating a luks2 header?
How to create one under 16 Mib?
- 539
0
votes
1
answer
383
views
ZFS: Keyformat required for new encryption root
I am trying to create a filesystem in ZFS with the following command:
zfs create -o compression=on -o recordsize=1M -o encryption=on pool/dataset
I am unable to do so, since I receive the following ...
- 101
1
vote
1
answer
2k
views
Unable to mount encrypted ZFS filesystem after reboot
Key load error: Failed to open key material file: Input/Output Error.
Command: `mount -o zfsutil -t zfs rpool/ROOT/ubuntu_uy913 /root/`.
Message: `zfs_mount_at() failed: encryption key not loaded`.
`...
- 41
1
vote
0
answers
93
views
Security implications of avoiding extra password prompt in /boot encryption? Do GRUB and Linux compare against the same hash?
I am following this guide on full disk encryption, including /boot. Section 4 involves placing a key that can decrypt /boot and / into the initramfs image contained in /boot, so that once you unlock /...
- 105
0
votes
1
answer
1k
views
GRUB password seems useless, so why even bother?
My system has full disk encryption except for /boot. I've set a GRUB password by following this post, but then was able to disable it by booting into Kali Live and running:
mkdir /mnt/dev/sda2
sudo ...
- 105
1
vote
1
answer
212
views
What is correct cipher name for the cryptsetup to use HCTR2 wideblock encryption?
By googling, trial and error I came up with the following string:
cryptsetup benchmark -c aes-xctr-plain64
but I'm not sure whether it is correct.
The cipher spec aes-xctr-plain64,polyval-generic ...
- 153
0
votes
0
answers
381
views
How do you decrypt an f2fs partition?
I have got an encrypted f2fs image, I know the password, I'm able to mount it via sudo mount -t f2fs mmcblk0p64.img /mnt/mmcblk0p64 so it doesn't appear broken or anything, and f2fscrypt recognizes ...
- 401
0
votes
0
answers
413
views
Issues encrypting root partition with Luks
I was given a "golden image" of an out of date production server and was instructed to update and harden the OS for production delivery. The issue I am running into is that LUKS. I am using ...
- 1
1
vote
0
answers
75
views
Accesing encrypted HDD after reinstalling OS (Linux)
I have two drive on my PC:
SSD
HDD
OS (Debian) was installed on SSD. HDD was formatted and encrypted from Gnome Disks from installed OS.
In Gnome Disks information about HDD looks like:
Now I need ...
- 113
1
vote
1
answer
417
views
erase hardware-encrypted SSD
Disclaimer
I'm not robbing someone, didn't rob someone in the past and don't plan to do so anytime soon.
Situation
Imagine I own a Samsung 2.5" SSD (850, 860 or the like) which is encrypted.
If ...
- 23
0
votes
1
answer
62
views
Deleted LUKS Disk
I had a dual-boot laptop setup with an encrypted BIOS. I then removed my Manjaro installation and deleted all of the partitions, including the Manjaro partition, which included my LUKS disk. When I ...
user594163
1
vote
1
answer
842
views
How to configure waiting time for LUKS password
My /home partition (on Linux Debian testing) is encrypted with LUKS.
$ mount|grep home
/dev/mapper/home-crypt on /home type ext4 (rw,relatime)
Configuration via /etc/crypttab:
home-crypt UUID=...
- 233
0
votes
0
answers
3k
views
Full disk encryption (and decrypt on boot) for existing Debian installation (bookworm)
I have an existing Debian system and there is a need to encrypt the disk at rest. Searching online (and here) I see that the only way to do it is to do a fresh installation, this time with LUKS on. I ...
- 378
1
vote
1
answer
196
views
How to create an entire backup of a disk to fall back to before performing a dist-upgrade?
I am preparing a dist-upgrade. Before I do that I want to make a backup of my entire disk so that even if the upgrade fails I can fall back to a backup. I have two SSDs, /dev/nvme0n1 which is the ...
- 11
1
vote
2
answers
1k
views
Check if a block device is Bitlocker encrypted
Ubuntu 22.04 can decrypt and read a BitLocker-encrypted device/partition without a need of installing any additional software (older releases can as well, perhaps, but I have not seen it)
How can a ...
- 111
4
votes
1
answer
3k
views
Second disk encryption using LUKS
I'm looking for a clear tutorial on how to do this but I'm encountering insufficient information everywhere.
Namely, I have a laptop with the following disk configuration:
Drive one has Fedora 38 ...
- 41
2
votes
1
answer
2k
views
How to increase the size of a LUKS file-container
There are many tips on how to resize (increase) a LUKS2 encrypted device / partition / LVM volume. But how to increase the size of the LUKS container created in the file?
I once created:
dd if=/dev/...
- 177
1
vote
1
answer
551
views
Random wipe free space: dd if=/dev/urandom vs LUKS format-erase, which is more secure, any pitfalls?
The ArchLinux Wiki on dm-crypt advices overwriting new storage devices or partitions with random data before using them for encrypted volumes. There are two ways I have used to achieve this, but I ...
- 11
2
votes
1
answer
626
views
Is it possible to check if a LUKS device has been damaged by a foreign person?
Let's assume I lost a LUKS encrypted USB pen drive. I think the file system type (ext4/fat32/...) doesn't play a role. A foreign person finds it. Of course he cannot access my data because he doesn't ...
- 1,022