Super User
Super User

Questions tagged [dm-crypt]

32 questions
16
votes
4 answers

How do I determine what ciphers & cipher modes I can use in dm-crypt/LUKS?

I'm using an Ubuntu-based system, and I'm having difficulty determining what ciphers and cipher modes are available to me. The cryptsetup man page says: "See /proc/crypto for a list of available options. You might need to load additional kernel…
Emma
15
votes
2 answers

LUKS on Ubuntu 16.04 : unknown filesystem type 'crypto_LUKS'

I'm using (L)Ubuntu 16.04. I would like to backup my files on an external hard drive (sdd) with LUKS. There was no partition (sdd1, etc.) before the cryptsetup command. #sudo cryptsetup -v --cipher aes-xts-plain64 --key-size 512 --hash sha512…
aldaron
  • 513
  • 2
  • 5
  • 7
5
votes
2 answers

Is it possible to add a key to an open luks volume whithout providing a current key?

As the title states, I need to know if there is a method to add a key that doesn't require the user to retype the password / provide a keyfile for an already open luks volume. I'd actually need to implement it so an example would be appreciated.
Gava
5
votes
1 answer

Load dm-crypt on Ubuntu Server 18.04 LTS in Windows Subsystem for Linux 1 or 2

I'm using Windows Subsystem for Linux (WSL1) on my Windows 10 system and tried to delete all data from a USB device and overwrite it with pseudorandom numbers following this tutorial (found it only in German, but is not really important for this…
AnHeuermann
  • 153
5
votes
1 answer

How to configure grub.cfg to decrypt root partition?

I'm using common "pattern" well known as LVM on LUKS. I have /dev/sda1 which is used for /boot and /dev/sda2 which is dm-crypted partition (default aes-sha512-xts). There are two lvm partitions: one for swap and one for root. The problem is that the…
user8896663
  • 61
4
votes
0 answers

Is there a tool like dm-crypt/luks using RSA encryption?

Is there a library/tool available for linux, similar to dm-crypt/LUKS using RSA encryption instead of symmetric ciphers? I want the "public side" to only be able to create these volumes, and the private side to be able to read them just like a…
Michael Krupp
  • 201
  • 1
  • 4
3
votes
1 answer

dm-crypt+luks: Can I have a separate header without storing it on the luks encrypted device?

I would like to encrypt my external hard drive with dm-crypt+luks, but I am not satisfied with all the information, that the LUKS header is providing in plaintext. So I would like to keep the LUKS header and the encrypted data separated from each…
user1861174
  • 227
  • 3
  • 12
3
votes
1 answer

What is the default encryption key-size for dm-crypt / cryptsetup in LUKS mode?

I'm using cryptsetup 2.1.0, for which the default encryption options are (as reported by cryptsetup --help): Default compiled-in device cipher parameters: LUKS: aes-xts-plain64, Key: 256 bits, LUKS header hashing: sha256, RNG: /dev/urandom …
haelix
  • 438
2
votes
1 answer

Can I make a encrypted image by using openssl encrypt tools instead of dmsetup?

Generally, I can create a encrypted ext4 image by do this: fallocate -l 6553600 encrypt.img losetup -f encrypt.img dmsetup create encrypt_disk --table "0 12800 crypt aes 32BYTEKEY 0 /dev/loop0 0" mkfs.ext4 /dev/mapper/encrypt_disk Then I can mount…
shuofei
  • 21
2
votes
2 answers

Can we do the full disk encryption of an already installed Linux machine?

I need some information regarding any possibility to do full disk encryption for a already installed Linux system (e.g. centOS or Ubuntu). Is there any default mechanism for FDE present in Linux like FileVault in macOS? I have done some research on…
Govind Karmakar
  • 91
2
votes
1 answer

Setting up remote git repo that is on an encrypted drive?

I would like to set a remote git repo that I will be pushing to regulary, which is easy to do. But I want to set up this remote repo to be on a LUKS (Linux Unified Key Setup) formatted drive (via cryptsetup) and I would like this drive to be…
yarun can
  • 1,060
2
votes
1 answer

Add new LUKS passphrase or key using existing keyfile for LUKS2 encrypted partition

I have two partitions in my laptop where EFI and /boot resides on the first partition and the rest of linux directories including root resides in second partition which is encrypted with dm-crypt and LUKS2. /dev/nvme0n1p1: UUID="7AF4-D518"…
wildnux
  • 123
2
votes
2 answers

Is there a easy way to encrypt my /home directory?

I'm running Arch Linux and would like to encrypt my personal files in my home directory /home/myusername. What is the recommended way of encrypting it? I've already read about dm-crypt and LUKS. But both methods seem to require entering a password…
reonod
  • 21
  • 1
  • 2
2
votes
1 answer

dmcrypt : What happens when userspace crypto wrapper not present?

I am trying to set up an encrypted volume to store files securely. This is done on a NextThingCo pocketchip, but the OS is based on debian so I guessed I would give it a try here first, as my question is more related to dmcrypt than the platform…
Paco
  • 23
2
votes
1 answer

dm-crypt/LUKS, won't mount encrypted drive. Requested offset is beyond real size of device

I screwed up my partition table the other day but had recovered it with TestDisk. After re-writing the partition table, I'm able to boot up into GRUB and subsequently the interface for entering my password to decrypt the encrypted…
Moo
  • 41
1
2 3