Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I previously had been using TrueCrypt, but recently re-installed Ubuntu and used 12.10's full disk encryption option (re-installed for other reasons). I never got any choice in how it did that. I don't know what cipher is used or the key size, or anything besides the passphrase really. Where can I find details about this sda5_crypt?

Edit: Seeing this mistake is humorous, but for those curious, sda5 refers to the hard drive and partition, not the encryption system.

share|improve this question
2  
possible duplicates - askubuntu.com/questions/102271/…, and askubuntu.com/questions/187874/… –  jrg Dec 12 '12 at 22:04
2  
Not an exact dupe but I think your answer is here. –  Tom Brossman Dec 12 '12 at 22:16
    
eCryptfs, flexible and easy to use. The only drawback I can think of is that it is NOT cross-platform like TrueCrypt (file container is so flexible). help.ubuntu.com/12.04/serverguide/ecryptfs.html –  Terry Wang Dec 12 '12 at 22:16
    
Thank you Tom. I don't understand why that's not expressed to the user when they're setting it up. –  Dakota West Dec 12 '12 at 22:28
3  
To commentators above: please don't confuse eCryptfs (homedir) and dm-crypt (FDE). –  gertvdijk Dec 12 '12 at 22:44

1 Answer 1

up vote 4 down vote accepted

Full disk encryption is using the dm-crypt kernel module, managed by Luks/cryptsetup. If you choose to encrypt your home directory, eCryptfs is used instead. These are two different technologies. I assume you chose full disk encryption here in my answer.

Use the command

# cryptsetup luksDump /dev/sda5

to view the current detailed configuration for sda5. And another example:

# cryptsetup status sda5_crypt
/dev/mapper/sda5_crypt is active and is in use.
  type:    LUKS1
  cipher:  aes-cbc-essiv:sha256
[...]

Read more on dm-crypt on Wikipedia: dm-crypt and more on eCryptfs on Wikipedia: eCryptfs.

share|improve this answer
1  
Thank you. Mine shows AES-XTS with a 512 bit key. Is that the default or does it vary by CPU? –  Dakota West Dec 12 '12 at 22:55
    
Varies by Ubuntu default options in the installation I guess. This may have changed since 12.10 as I'm still on 12.04 and it was possible to select the cipher yourself in the 'alternate' installer, unavailable since 12.10. –  gertvdijk Dec 12 '12 at 22:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.