All Questions
15
questions
1
vote
0
answers
855
views
Reset password of an unlocked LUKS encrypted drive
I have a machine running Pop!_OS 22.04 LTS, with an encrypted drive using LUKS encryption.
The machine is running and the drive is unlocked. However, I forgot the passphrase to the drive.
I tried ...
0
votes
1
answer
818
views
`cryptsetup open` fails with correct passphrase - "No key available with this passphrase."
I recently ran (essentially) rm -rf / --no-preserve-root on my LUKS encrypted BTRFS root filesystem. I'm trying to mount the drive from an endeavouros (arch) liveusb, without success.
I created a ...
1
vote
0
answers
272
views
LUKS2 master passphrase in kernel keyring: Token unusable error
I'm trying to follow the documentation on how to pass a key to LUKSv2 via the kernel key ring: https://fossies.org/linux/cryptsetup/docs/Keyring.txt
This does not work for me at all:
# dd if=/dev/zero ...
3
votes
2
answers
5k
views
difference between passphrase and key file in LUKS
I'm trying to understand with no success the difference between a passphrase and a key file in LUKS. At first I thought they were the same thing, with the difference of a key file being a passphrase ...
0
votes
1
answer
946
views
How to decrypt the luks encrypted hard disk password automatically using tpm2 | ubutnu 18.04
I have encrypted my hard disks using default method(Luks encryption) present in ubuntu 18.04 and I have tpm2, now i wanted to save my passwords on tpm2 device and decrypt automatically without ...
0
votes
0
answers
672
views
Kali Encrypted Persistence opens wrong device (HDD instead of USB)
I have created the encrypted live USB as per Kali documentation. I have set up encrypted persistence with cryptsetup as mentioned in the documentation. I've verified that I'm able access the partition(...
3
votes
1
answer
4k
views
How to mount a LUKS encrypted device with password prompt NOT at bootime?
I would like to automate the process of doing
sudo cryptsetup luksOpen /dev/sdc sdc_crypt
sudo mount /dev/mapper/sdc_crypt /mnt/data
in one line with
mount /mnt/data
and only be prompted for the ...
1
vote
1
answer
539
views
Can DoxBox ( or FreeOTFE Encfs Truecrypt ) prompt and mount an encrypted file volume or encrypted disk partition before Windows boots to its GUI?
I would like to Encrypt a secondary drive (NOT the OS/boot drive) and have it mounted and drive letter mapped etc, before Windows 7 gui boots up. This is because I will have mapped some user data onto ...
0
votes
1
answer
209
views
Set parameters for Linux Full Disk Encryption?
How do I change the parameters (algorithm, hash, key-lengh, block-size, IVs, mode-of-operation, key-derivation function etc.) for the encryption being used by Linux built in Full Disk Encryption (...
1
vote
1
answer
4k
views
Is there an AES 256 LUKS encryption option in Fedora?
it was suggested that my post (https://security.stackexchange.com/questions/73140/is-there-an-aes-256-luks-encryption-option-in-fedora?noredirect=1#comment120019_73140) would be better if I asked it ...
16
votes
3
answers
17k
views
How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?
I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me.
The cryptsetup man page says:
"See /proc/crypto for a list of available ...
1
vote
0
answers
102
views
How to install 2 encrypted instances of Linux Mint on the same SSD, both with different encryption passwords?
I'd like to have 2 different Mint installations on the same hard drive, each with each on set of encryption keys, so if I enter one password, it will boot on one, if I enter the other, it'll do the ...
7
votes
1
answer
3k
views
How is LUKS dm-crypt secure if the key is stored with the encrypted data?
I'm not a an expert in cryptography, but I've read the project's faqs.
How is LUKS dm-crypt secure if the key is stored with the encrypted data? To me, this seems like hanging a door key on the door ...
0
votes
1
answer
2k
views
Truecrypt & luks, best from both worlds?
I am looking for multi-platform on-the-fly encryption tool, both truecrypt and luks /dmcrypt/ can provide, but I cant have dual boot /Linux&windows/ in this case, because TC does not support multi ...
8
votes
7
answers
17k
views
System encryption LUKS: What's the strongest and most secure key size?
I'm reading an article on the Arch Linux wiki about system encryption, in an example the author specified a 512 bit key. From what I read on Wikipedia regarding encryption ciphers it doesn't seem to ...