Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [disk-encryption]

283 questions
51
votes
4 answers

Using a single passphrase to unlock multiple encrypted disks at boot

My machine has an SSD, where I installed the system and an HDD, which I use as a storage for large and/or infrequently used files. Both are encrypted, but I chose to use the same passphrase for them. SSD is mounted at / and HDD at /usr/hdd…
user116402
26
votes
1 answer

Pre-encryption wipe, why?

I wanted to know why, before encrypting and installing itself on the drive , Kali : wiped the whole drive filled the drive with 0s filled the drive with 1s filled the drive with Random data wiped the drive again I know that Kali isn't meant to be…
Taz8du29
  • 301
  • 3
  • 10
21
votes
2 answers

How can I install Debian with full-disk encryption and a custom sized swapfile?

I'm trying to use a Debian network cd to install it, via the advanced graphical installer. I want to use the full-disk encryption option, but I'm trying to install it on an older machine. I think it has about 1GB of RAM. I installed Pop!_OS on…
CodeLurker
  • 313
  • 1
  • 2
  • 7
18
votes
4 answers

Is disk encryption without requiring a password at boot possible?

Is it possible to encrypt the boot disk but not require users to input a password when the system boots? I have some headless boxes in remote locations for which I cannot guarantee they will be securely disposed off. I want to avoid somebody being…
sjaak
  • 564
  • 2
  • 8
  • 17
18
votes
2 answers

Is there a way to encrypt disk without formatting it?

When I was installing my OS, I didn't encrypt. Is there a way to encrypt it now without formatting and without losing any data? I read a few guides how to encrypt and every one says that I need to backup all my data because I will lose it. Is there…
user
  • 181
  • 1
  • 1
  • 3
14
votes
2 answers

Bit Rot within LUKS Encryption

How does bit rot affect a LUKS container and the filesystem inside? Suppose you have a filesystem that is well suited to deal with bit rot. Now put it inside a LUKS container. In case bit rot corrupted the container, I assume the decrypted…
Semnodime
  • 327
  • 2
  • 13
14
votes
1 answer

How to encrypt a btrfs subvolume?

I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions. I have found this article on archlinux wiki, and find this method…
renyuneyun
  • 377
  • 2
  • 3
  • 11
14
votes
2 answers

Is it possible to encrypt a hard disk with a key file instead of a password?

Looking into hard disk encryption. the go to solution seems to be dm-crypt with LUKS using a password. I work with multiple independent hard disks mounted into a disk pool for reading. In this case, I have to type a password multiple times. Is…
Nithin
  • 473
  • 1
  • 5
  • 13
13
votes
1 answer

"cryptsetup: ERROR: Couldn't resolve device" combined with "cryptsetup: WARNING: target 'sda3_crypt' not found in /etc/crypttab"

After setting up hibernation on ubuntu 20.04 and modifying it that it works for encrypted swap partitions, I'm getting several issues: First, after rebooting from hibernation, I got "Gave up waiting for suspend/resume device" along with "Volume…
Andreas L.
  • 275
  • 1
  • 3
  • 9
12
votes
2 answers

Defending against the evil maid, how to handle removal of the /boot partition

When using LUKS full disk encryption, how would you go about protecting against evil maids ? The evil maid attack is when someone gets physical access to your computer while you're away and compromises the unencrypted /boot partition to capture…
user67289
12
votes
2 answers

Does QEMU/KVM use Intel AES instructions for encrypted qcow2 images if the host CPU has them?

The qcow2 image file format for KVM can use AES encryption. The encryption is applied at the cluster level: Each sector within each cluster is independently encrypted using AES Cipher Block Chaining mode, using the sector's offset (relative to the…
user12810
10
votes
1 answer

How to create a new encrypted LUKS-partition in GParted?

I want to create a new encrypted LUKS-partition in GParted. I've searched the UI and the help, but the only thing I can find is how to open and close an existing LUKS partition and how to to copy and paste an existing one. However, I can find no way…
rugk
  • 2,806
  • 6
  • 28
  • 58
10
votes
2 answers

Windows/Linux dual boot full disk encryption

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data. The partitions are organized as following: 1Tb HDD : |_ sda1 : exFAT partition, readable by both W$ and Linux 256 Gb SSD : |_…
mhham
  • 563
  • 1
  • 6
  • 13
9
votes
1 answer

Low performance of encrypted SSD

I have a 128GB Somnambulist SSD. I know this brand is one of the worst. I measured the speed using GNOME Disk Utility, and it showed a read/write speed of 420/340. After encrypting the SSD with Debian 12, the read speed, as measured by the GNOME…
Daniel
  • 341
  • 11
9
votes
2 answers

What is the epoch of LUKS that is shown when running luksDump?

When you run luksDump on a LUKS device, I get this: $ sudo cryptsetup luksDump /dev/sda1 LUKS header information Version: 2 Epoch: 3 Metadata area: 16384 [bytes] Keyslots area: 16744448 [bytes] UUID: 4640c6e4-[…] Label: …
rugk
  • 2,806
  • 6
  • 28
  • 58
1
2 3
…
18 19