Questions tagged [encryption]
encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
881
questions
0
votes
1
answer
36
views
Ext4 filesystem in LUKS container - container size calculation
On my Linux system I have a file "1gb.file" that is 1073741824 bytes in size.
This file I'll put into a LUKS container ("1gb.file.crypt") with ext4 filesystem inside.
What size ...
- 153
0
votes
0
answers
21
views
"Insmod cryptodisk" is missing from grub.cfg?
I am following this guide this guide on /boot encryption for my Ubuntu system. I am currently on section 3, after deciding to not complete section 4. (i.e, I don't wish to avoid multiple password ...
- 69
1
vote
1
answer
39
views
What stage of boot is asking for my password?
I just finished this guide on (almost) full disk encryption. So now my root directory and /boot directory are both encrypted, and GRUB is password-protected. /boot/efi is still unencrypted. I haven't ...
- 69
1
vote
0
answers
22
views
Can't import or create keys in Kleopatra in Arch Linux using KDE (x11)
I'm still new to linux, so please give me time if you need something from me.
As the title says I cannot create new key pairs or import existing keys into Kleopatra 3.2.0.240501 (24.05.1). I've just ...
- 21
0
votes
0
answers
32
views
grub 2.12 compiled - grub-install gives error for encrypted boot or encrypted root with --boot-directory option
I have ubuntu 22.04 and grub compiled from git source 2.12. After grub is installed in separate directory, from there I executed grub-install with below command and it gives error for encrypted ...
- 1
0
votes
1
answer
50
views
GRUB password seems useless, so why even bother?
My system has full disk encryption except for /boot. I've set a GRUB password by following this post, but then was able to disable it by booting into Kali Live and running:
mkdir /mnt/dev/sda2
sudo ...
- 69
2
votes
1
answer
77
views
LUKS - How can / be encrypted but /boot and /boot/efi are not?
This is more of a educational and curiosity question, rather than tying to fix a problem. I have an Ubuntu system using LUKS. lsblk shows this:
Noteably, / is encrypted but /boot and /boot/efi are ...
- 69
6
votes
2
answers
905
views
Editing/viewing a password protected file?
Is there a utility for editing password protected files that re-encrypts the file once editing is complete?
e.g.
env PASSWORD=$(my-secret-command) \
encrypted-edit secrets.txt.enc
Which (for ...
- 1,323
2
votes
1
answer
234
views
How to pass a salt to mkpasswd with yescrypt algorithm
I am trying to verify this hashed password from my /etc/shadow file:
$y$j9T$eia4V8bEUD9QBJAEwilXU.$TLUJexdhrx/q3Nc/YaCrlkVkrxUkimYn3o432pxFr90
I would like to pass the hash to mkpasswd this way but it ...
- 123
1
vote
0
answers
45
views
Debian installer's partitioner stuck on encrypted NVME SSD
I have two NVME SSDs on my system. The first, M.2_1, has Windows installed on it, and I encrypted it with sedutil. Now I want to install Debian on the second one, M.2_2, which is not encrypted, and I ...
- 111
0
votes
1
answer
54
views
Ensuring no sensitive information is left unencrypted on disk after editing text file
I used a bootable Linux Mint USB to open a sensitive text file and add sensitive information to it. This text file is encrypted by Veracrypt and was only opened and edited while I was offline.
After ...
1
vote
1
answer
87
views
ZFS dataset encryption on top of LUKS
There has been discussions about using ZFS on top of a LUKS-encrypted partition vs. using ZFS's native per-dataset encryption. However, they are always presented as either-or.
My question is about ...
- 845
0
votes
1
answer
35
views
Is it possible to directly encrypt a drive using any card in a smart card reader (even credit card, perhaps?)
As I understand it, a credit card chip or smart card works by sending challenges to the tiny computer on the card, at which point it completes the challenge and replies back with the data. Is it ...
0
votes
0
answers
72
views
How do you decrypt an f2fs partition?
I have got an encrypted f2fs image, I know the password, I'm able to mount it via sudo mount -t f2fs mmcblk0p64.img /mnt/mmcblk0p64 so it doesn't appear broken or anything, and f2fscrypt recognizes ...
- 407
0
votes
0
answers
53
views
Encrypt .deb content
I have a .deb package that I want to install in my customers devices. Currently I have these packages in a private repository that can only be accessed with a private key. But I also want to prevent ...
- 51