Collaborate Disseminate
The dm-crypt LUKS utility ‘cryptsetup’ allows us to specify the key-file in place of passphrase. Looking at the code for cryptsetup I understand that if key-file is specified, the passphrase is not used.
I now want to do tha… Continue reading Passing keyfile to create LUKS header [migrated]
I have a question about LUKS and the overwrite empty disk space option. I know what it does, and why people use it but I have a question about it. Forgive me if this question is dumb, it’s just something that popped in my hea… Continue reading LUKS overwrite empty disk space question
I have a question about LUKS and the overwrite empty disk space option. I know what it does, and why people use it but I have a question about it. Forgive me if this question is dumb, it’s just something that popped in my hea… Continue reading LUKS overwrite empty disk space question
Let’s say someone found a USB drive at their home and wants to try to figure out what it is (and they don’t know the encryption phrase). What information could be determined about this encrypted drive, in theory?
For example… Continue reading What information can be found about a LUKS-encrypted drive?
Let’s say someone found a USB drive at their home and wants to try to figure out what it is (and they don’t know the encryption phrase). What information could be determined about this encrypted drive, in theory?
For example… Continue reading What information can be found about a LUKS-encrypted drive?
I have a dd of a computer which has a LUKS-encrypted partition. I do not have the password but I do have a recovery key which would allow me to change the password through a GUI interface when the computer is booted. Unfortunately, I no lo… Continue reading Resetting LUKS password from CLI with the recovery key
I read that LUKS uses 256-bit AES with CBC by default. CBC, of course, has the disadvantages that if you change something in the plain text, you have to change everything that comes after it. In the case of hard drive encrypt… Continue reading Why does LUKS use CBC?
I screwed up my partition table the other day but had recovered it with TestDisk. After re-writing the partition table, I’m able to boot up into GRUB and subsequently the interface for entering my password to decrypt the encr… Continue reading dm-crypt/LUKS, won’t mount encrypted drive. Requested offset is beyond real size of device [migrated]
Are there any preferred filesystems that have some boni regarding security and confidentiality? Or does it really not matter if I, for example, encrypt a HDD with LUKS?
As an example, I read that the ZFS file system has some… Continue reading Security of different Filesystems
I want to setup a system for use in banking/financials/medical. I would store all my records as images/pdfs on this system. It could be a minimal linux install (basic RTF editor, browser w/o plugins for online banking) not mu… Continue reading Setting up pen drive for banking