1
vote
2answers
184 views

Unencrypted /boot partition can be infected from windows on dual-boot system?

I have dual-boot with windows 7 and ubuntu. /dev/sda1 ext4 (/boot) /dev/sda2 ntfs (windows partition) /dev/sda5 ext4 (root encrypted) I don't have any concern of adversaries gaining ...
5
votes
1answer
626 views

why is it a risk to clone a LUKS container?

I recently installed Ubuntu onto an encrypted partition using the LUKS+LVM combination that the 'alternate' installer offers. Now I want to create backups of my HD. From the LUKS FAQ: 6.15 Can I ...
8
votes
3answers
17k views

How to change LUKS passphrase?

Having installed Ubuntu 11.10 with whole disk encryption and LVM, I need to provide a way for users to easily change LUKS passphrase. Preferably, this should be done using GUI tools, thus, enabling ...
8
votes
1answer
2k views

How can one unlock a fully encrypted Ubuntu 11.10 system over SSH at boot?

In previous versions of Ubuntu, and current versions of Debian, you can unlock a fully encrypted system (using dmcrypt and LUKS) at boot time over SSH. It was as easy as: Installing the encrypted ...
11
votes
3answers
3k views

Is AES-NI fully supported?

Has support for the Intel AES-NI hardware crypto acceleration been added to Ubuntu (LUKS, kernel, OpenSSL libs, etc)? If so, starting with which version? Here is a list of Intel processors supporting ...