Collaborate Disseminate
I’m a college student trying to complete the first part of a rather large project, but I’m new to TPM, and Linux. What I’m trying to do is have TPM handle automatic decryption of the root ext4 partition on the sd card upon bo… Continue reading Use TPM 2.0 to automatically decrypt the SD Card in Raspbian OS
I have a new hdd that I want to encrypt before adding data to it. Should someone steal my hdd, I don’t want the contents read or copied. I am encrypting it for the same purpose of putting a password on an email account – so t… Continue reading Other than 4 purpose of writing over previously deleted data on hdd, is it necessary to 1st write the entire hdd w/ zeros/random data b/f encrypting?
I find the following somewhat confusing, but it doesn’t have many steps. Is this a solid method for encrypting a hdd with LUKS?
Here’s the process in few steps:
Create a LUKS partition
cryptsetup luksFormat –hash=sh… Continue reading Is the following protocol a good method for encrypting a non-OS hdd?
On Linux, I use LUKS to encrypt containers (a filesystem on a file), which is portable as it can be easily copied, stored on any external filesystem, such as FAT or NTFS on external drives or SD cards. It is easy to mount un… Continue reading How to obtain volume encryption interoperability between Android and Linux (LUKS)
I’m using an installation of Ubuntu server on disk, with some extra packages installed and configuration carried out, on disk as a kind of base image for repeatedly creating other systems. I clone this to a new disk, alter a… Continue reading Are there any risks from cloning a LUKS encrypted partition?
The old cryptsetup default is aes-cbc-essiv:sha256. The new one is aes-xts-plain64:sha256. I don’t know that much about cryptography but I assume the standard was changed for a reason.
Also there can be found information like:
[…] i… Continue reading Should I upgrade old volumes to new cryptsetup encryption mode?
This question already has an answer here:
For LUKS: The most preferable and safest cipher?
3 answers
I want to encrypt my… Continue reading Best luks setup disk [duplicate]
Is it safe to encrypt twice with AES, with any mode? Are any combinations of AES, e.g. AES with XTS and AES with CBC, or twice with AES and XTS, more unsafe than just having it encrypted once?
I know CBC isn’t very safe in m… Continue reading Is double encrypting with AES safe?
From What users should know about
Full Disk Encryption based on LUKS
In Linux world, LUKS implementations are based on cryptsetup and
dm-crypt. In order to mitigate the problem of brute force attacks
based on wea… Continue reading LUKS mitigate brute force attacks even if salt parameter is know?
Because of data classification that is stored on one of our servers we need to make sure that it is protected while in transit and at rest. While the first can be addressed with proper TLS configuration I have some doubts abo… Continue reading LUKS partition encryption vs. .vmdk level encryption