Collaborate Disseminate
I have a LUKS encrypted file filled with around 160GB of data that I use a lot. For safety, I created the file with 400GB. That is of course a lot of wasted space. So I switched to a sparse file, basically following the advice here, simply… Continue reading Encrypted LUKS fs inside a file: sparse or not?
I accidantally formatted the entire hard disk (quick format into NTFS)
it contains multiple partitions of different filesystem
ext4 encrypted with luks (whole partition encryption)
ext4 no encrypted
ntfs not encrtpted
I restored partitio… Continue reading Restoring lost encrypted partition [migrated]
Its a tale as old as full-disk encryption. Another victim of complicated passwords succumbs to LUKS on the Linux system.
I recently changed my LUKS encrypted drive password on a laptop, but my laptop shut down accidentally before I could c… Continue reading Recovering LUKS Encrypted Data
I use Linux on my laptop and I do Full Disk Encryption with the LUKS keys enrolled into TPM2 against proper PCRs to make sure firmware, UEFI and Secure Boot setup are in a known-good state. Additionally, my TPM setup has a 6-digit PIN with… Continue reading Is it possible to know when my TPM was last used to decrypt my disk?
From what I understand, argon provides a delay between password attempts. Does luks allow increasing or reducing the delay?
Continue reading luks increase delays between password attempts
From what I understand, argon provides a delay between password attempts. Does luks allow increasing or reducing the delay?
Continue reading luks increase delays between password attempts
I’m using Cubic (https://github.com/PJ-Singh-001/Cubic) to create a custom Ubuntu. So far so good, everything is going smoothly.
However, I would like to encrypt the USB stick that contains my custom Ubuntu image so that I:
boot usb (load… Continue reading How to encrypt with LUKS a live Ubuntu usb stick that has been customized with Cubic? [migrated]
The luksFormat command accepts iteration time as a parameter, not iterations. That obviously leads to quite different number of iterations depending on the hardware doing the encryption. However if I am protecting the same data on system… Continue reading LUKS: How many iterations are enough?
I am trying to understand the risks of configuring passwordless decryption via TPM of a LUKS/dm-crypt system with something like:
systemd-cryptenroll –tpm2-device=auto –tpm2-pcrs=0+1+2+3+4+5+7+8 /dev/disk/by-uuid/XXX-XXX
The idea would … Continue reading Using TPM to unlock LUKS/dm-crypt volume
I have developed a web service for customer. The web service is written in Python and running in Docker containers. It is managed by docker compose.
The customer wants my web service to run on their own Ubuntu servers, but I have control o… Continue reading Is deploying a web application to a customer’s encrypted drive a secure solution against code theft?