Collaborate Disseminate
I want to completely encrypt my USB drive with luks. In what order should the partition table and luks container be created? First, should I create the partition table and then the luks container, or should I create a container with the pa… Continue reading What is the order in which to create the partition table and luks container?
My goal is to fully encrypt my USB drive with LUKS.
What’s the correct order of encryption?
Should I create the partition table or the LUKS container first?
Motivation behind would be greatly appreciated.
Continue reading In what order should you create the partition table and a LUKS container?
If somebody gets my LUKS header and the encrypted disk (but not the passphrase).
What can he do? What is the security risk of storing the LUKS header on a public or semi-public share?
Continue reading Can I store the LUKS header on a public share?
Let’s say I have password "password" for my drive using LUKS2. And then I change it to something really unguessable. The slot with password is overwritten. But, on SSD it is not really overwritten but remapped. And trimming on my… Continue reading Changing password on LUKS2 and SSD
I have been using cryptsetup for a while now and just found out about the option ‘luksDump’. I am used to similar tools like veracrypt and truecrypt and I am a bit shocked that all these vulnerable data are so easily accessible. If I remem… Continue reading Just found out about luksDump in LUKS (cryptsetup), Is there a way to hide all these sensitive data like used cipher and hash?
In the Cryptsetup Frequently Asked Questions page it says:
You are asked a passphrase of an existing key-slot first, before you can enter the passphrase for the new key-slot. Otherwise you could break the encryption by just adding a new k… Continue reading Bypass encryption by altering source code
UPDATED Summary: I’m looking at Linux FDE options that are transparent to the user (my parents) in that the user doesn’t need to enter 2 passwords. I found/thought of several options and tried to think through the security implications of … Continue reading How good/bad are these transparent Linux consumer FDE setup options? (e.g. for auto-unlocking LUKS)
I use Fedora Linux and was recently looking into doing Full Disk Encryption on data drives such as /home on some of my / my family’s PCs. I understand that LUKS security will be partially dependent on having strong passwords and not doing … Continue reading Is LUKS still an effective option for consumer FDE considering Elcomsoft can break it?
Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" – nothing is perfectly secure; rather I am looking for possible solutions to the specific SSD/FDE encryp… Continue reading Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?
I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it so that only one password could be enter… Continue reading Increase Time to Brute Force Luks Full Disk Encryption [migrated]