Tag Info

New answers tagged

0

I would use encfs which is available for linux, osx and windows. Advantage is that you can also use it with cloud storage since encfs encrypts on filesystem level and therefore the changes only affect the files changed not a partition as a whole.


0

There is DoxBox: Open-Source disk encryption for Windows Easy to use, with a 'wizard' for creating new 'DoxBoxes'. Full transparent encryption, DoxBoxes appear as removable disks in Windows Explorer. Explorer mode lets you access DoxBoxes when you don't have admin permissions. Compatible with Linux encryption, Cryptoloop "losetup", ...


0

Well, the error "No key available with this passphrase" sounds like the key you're looking for is not in the LUKS header anymore. Could be the wrong passphrase, or could be something happened to that key, or the whole LUKS header. If you have a backup of the LUKS header you can try using it with the cryptsetup option --header And try the --verbose & ...


0

You can easily install the Disk Utility in 14.04: sudo apt-get install gnome-disk-utility If this doesn't work, please post the exact error messages that you get. To then open Disk Utility check this question: How do I open Disk Utility in Xfce? It allows to very easily create encrypted partitions: How to encrypt external devices?


2

When you login to Ubuntu your disks are automaticly decrypted. So when you copy files on external storage they are decrypted.


0

It is very unlikely that you can easily recover the encryption code and access your data. Unless you're a security expert, or have access to some brilliant minds from the NSA, you must recover your password to be able to access your data. That's in a gist the trouble with securely stored data: if you lose your key, no one can access it anymore. Not easily, ...


0

Well, the long answer may be "yes, but be aware of losing compatibility to 16 byte encoded directories". Applying the following patch against the recent ecryptfs-utils-104 sources should do the job - however, it simply changes the hardcoded value to 32 without the possibility to choose. But if it's useful to someone: diff -ruN ecryptfs-utils-104/README ...


0

Download Ubuntu 14.04 or 14.10 and then burn to disk and fresh install with that. Post back if still have encryption problems. If you don't have access to another computer, if the disk you have has a try Ubuntu option, you may be able to use that to download and burn. If you don't have a disk to burn to, you can also write image to USB. If you need to ...


0

Suspend locks the disks because the power is cut. It is up to the computer's bios to unlock the drive again during resume. If it fails to do so, it is a bug in your bios and you will have to hope ( don't hold your breath ) that your motherboard vendor fixes it.


1

According to, http://www.pugetsystems.com/labs/articles/Introduction-to-Self-Encrypting-Drives-SED-557/ In the case of SEDs, the main downside is that once the drive has been unlocked, it remains so until the power to the drive has been cut. In other words, if you simply reboot the computer or put it into sleep, the drive remains unlocked. It is not ...


1

Sure it increases security, as long as you are using different passphrases for each one. And just in case one method is found to be flawed (could happen, see shellshock) or you wrote the passphrase on the case or something, there's a "backup" encryption.


0

You can postpone apache to start by renaming the symlinks which were created byupdate-rc.d apache2 defaults - "defaults" mean that such symlinks were created for default runlevels set in /etc/init.d/apache2, so in /etc/rc2.d, /etc/rc3.d, /etc/rc4.d, /etc/rc5.d directories.. In each above directory, you will see something like "S91apache2 -> ...


2

shred is well suited to the task. Personally I would actually want to WRITE to the blocks rather than wrap the whole thing in encryption. Example, http://serverfault.com/questions/6440/is-there-an-alternative-to-dev-urandom Zap the disk with the openssl random data generator and then shred it. If you're really that concerned with the data that might be ...


0

You're only looking at the the super-easy scripts like ecryptsfs-setup-private and ecryptsfs-mount-private, they use the more "generic" tools you seem to be looking for: mount.ecryptfs and ecryptfs-add-passphrase. See their man pages for more info. And the link Rinzwind posted has all the info you need, further down the page under Manual Setup. They're ...


0

Just copy paste the following line in terminal and it will create 2 GB of swap sudo su Then Copy Pate the following mkdir /swap && cd /swap && fallocate -l 2g 2GB.swap && mkswap 2GB.swap && swapon 2GB.swap && echo "# # # Swap File # # #" >> /etc/fstab && echo "/swap/2GB.swap none ...


0

I tried to comment, but I lack the reputation :-) Anyway, I used successfully the amazing guide by Hamish to migrate to a ssd on my linux-based luks-encrypted work laptop. Just a few remarks: 1. After creating the swap lv also use # mkswap /dev/mapper/crypt-swap to initialize the swap, otherwise it fails during boot, as indicated in the comment above. ...


0

ecryptfs /destination/to/encrypted/storage /destination/to/seeing/unencrypted/data e.g: ecryptfs /home/YOURUSERNAME/EFILES /home/YOURUSERNAME/Downloads/RANDOMDIRECTORY use the commmand above to create and mount encrypted system where files saved in RANDOMDIRECTORY are encrypted and saved to EFILES. additional notes. make sure RANDOMDIRECTORY is empty ...


4

My apologies for posting this as an answer, but comments would not get the attention this needs. It is my considered opinion, that your drive is in imminent danger of failing. Please make a full system backup right now. If you don't know how to make a system backup, please refer to this question. You're user type 4. If you need any further help on making ...


0

Thank you for your answer, it helps me going forward. Now getting deeper into the encryption thing, I wonder if it would be possible / if I would run into issues if : Ubuntu is installed on a crypted partition(1) VirtualBox is installed on a hidden crypted partition(2) On that partition(2) there's a VeraCrypt volume file (double-password protected) which ...


0

Short answer: stick to the default of ext4, unless you know why you want something different. The Ubuntu installer offers the option to encrypt your partition for you using LUKS, however if you wish to use TrueCrypt then you should encrypt the partition before you install! Note that TrueCrypt is no longer being developed and it is uncertain if it is still ...


1

the short answer is that ecryptfs is a filesystem encryption and only encrypts files not partitions, so it should be safe to resize the partition, but make a backup first! I'm flagging this as a duplicate, because this question has been asked before.


3

I'm going to say overkill. You incur a penalty in performance for the decryption twice, while only gaining a marginal increase in security. If an adversary is able to bypass the full disk encryption in some way, by stealing the keys from memory, using a keylogger or just beating it out of you with a wrench. Then breaking any secondary encryption is only ...


0

Already answered: http://superuser.com/questions/564926/profile-is-not-loaded-when-using-ssh-ubuntu In short, SSH don't use ~/.profile, but it's own script ~/.ssh/rc.


0

The error means ~/show directory is not involved in mounting at the time of command (mount failed or encfs unmounted by some other action). Records in /etc/mtab created (automatically) when file system is mounted and removed after unmount. By the way, while encfs is pretty straightforward, but it could be even more simplified by using any of the article ...


1

(Assuming FDE is Ubuntu disk encryption, since INTEL SSDSC2BW240A3 has build-in encryption feature.) Looks like common SSD behavior with Ubuntu, not FDE connected. Common current FDEs, including cryptsetupt/LUKS which is default Ubuntu disk encryption mechanism, use transparent approach (don't add additional writes) and so harmless to SSD. But ...


1

that's indeed quite disturbing. May be you can double check from the command line with: cryptsetup luksDump /dev/mmcblk0p1 It should spit out something like LUKS header information for /dev/mmcblk0p1 Version: 1 Cipher name: aes Cipher mode: xts-plain64 Hash spec: sha1 Payload offset: 4096 MK bits: 256 MK digest: 50 21 48 ...


2

Offhand, I'm thinking that if your using the entire device (/dev/sdb) and your LUKS header is at the start of the drive, and if some other tool or OS "helpfully" decides that your disk is unformatted with no MBR or GPT, if it were to overwrite your LUKS header that would be bad. If you were using a partition for LUKS then at least a new MBR or GPT wouldn't ...


1

I had the same problem and I found a solution that worked for me in this post. Basically: Open fstab: sudo gedit /etc/fstab Change this line: /dev/mapper/cryptswap1 none swap sw 0 0 to this: /dev/mapper/cryptswap1 none swap sw,noauto 0 0 Then go to sudo gedit /etc/rc.local and immediately before exit 0 add these two lines: sleep 5 swapon ...


0

UPDATED INFO: Just noticed the probable problem buried there: You said "The external HD was encrypted some months ago, with an older version of Ubuntu." Newer versions of eCryptfs do not always work on data encrypted with older versions. It's not fully backwards-compatible. You should decrypt the data using the original version that encrypted it. Or, ...


1

You must decide which directory with enough space to create the swap file, you suppose is in /, (/swapfile). Open a terminal,Press Ctrl+Alt+T Run it for 2 Gb (bs=2048): sudo -i dd if=/dev/zero of=/swapfile bs=2048 count=256k mkswap /swapfile swapon /swapfile Now You can ensure that the swap is permanent by adding it to the fstab file. Continue running ...


-2

I recommend using a tool called gparted. (http://gparted.org/download.php) Burn it onto a CD and boot into it like you did with the Ubuntu installer. There you have the option to resize and move any partition you want. Be aware that editing partitions can always lead to data loss, so please consider making a full backup! Also, you mustnt move the Ubuntu ...


1

The files are files from your old encrypted home directory. If you mount the directory containing those encrypted files without encryption enabled or with a different key/passphrase they will fail decryption and show up as ECRYPTFS_FNEK_ENCRYPTED.... To fix that you have to mount the directory with the proper key/passphrase that was originally used to ...


-2

My response is probably very late for you, nevertheless it may help you if you haven't found another solution already. The 100% vino compatible VNC client you can use is vinagre. I am using it for years. You can find it in the repos. :) p.s. Vino is the name of the default VNC server in Ubuntu.


-2

had to start from scratch, everything works great. this article was a life-saver: http://iwtf.net/2010/01/05/encrypting-your-ubuntu-swap-partition/ in case link gets moved basically all i had to do is: a) format as swap b) set encryption using command: sudo echo cryptoswap /dev/sda5 /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,hash=sha256,swap ...



Top 50 recent answers are included