Tag Info

New answers tagged

2

the files that I store on the Dropbox folder, will be sent to Dropbox encrypted? No. When using full disk encryption the kernel will unencrypt the data and send it in plain to the dropbox daemon, it will then copy this unencrypted data to the cloud. The second question is an obvious no, but you should probably ask it as a separate question.


0

You used the word folder, which makes you might be talking about an encrypted /home folder. If that's the case, here's a really good answer. How do I move my encrypted /home to a new computer? If you're talking about moving an entire LVM, maybe this discussion will help. How to migrate an encrypted LVM install to a new disk Good luck.


0

You can use disk utility. Install the cryptsetup package: sudo apt-get install cryptsetup Disk Utility is included by default, it should be under: System -> Administration -> Disk utility (or type palimpsest in terminal). If the gnome-disk-utility package is not installed: sudo apt-get install gnome-disk-utility. Back up everything and be sure to ...


0

The passphrase unwrap did not work. I needed to execute: ecryptfs-unwrap-passphrase /media/DISK/home/.ecryptfs/USERNAME/.ecryptfs/wrapped-passphrase


0

This actually worked for me, but i'm not sure if it is a good solution (multiple users): sudo gedit /etc/init/cryptdisks.conf search line near bottom of the file containing do_start and add /etc/init.d/cryptdisks reload just below; assuming all stuff in michel's answer is done


0

Do you have a pinentry package installed? Try: sudo apt-get install pinentry-gtk2 See: http://baitisj.blogspot.com/2014/07/enigmail-key-not-found-or-not-valid.html


3

There are several potential solutions to this. The question is: does this folder need to be encrypted, or not? Not encrypted If it does not need to be encrypted, the easiest solution is the following: move the folder to /var/avoshare: sudo mv /home/avo/share /var/avoshare Set up a soft link ln -s /var/avoshare /home/avo/share Then update your ...


1

The Kingston Locker+ G3 can be accessed through linux. Here are two (non-officialy supported by Kingston) methods: Using a windows virtual machine to un-lock the drive, and then releasing it to the host OS. It works for me with VMware Workstation. Using the binaries shipped with another Kingston key, namely the "DataTraveler Vault Privacy 3.0". (Works ...


0

Solution 1: Using a crypttab script to query LDAP Full-disk encryption needs the key before the user authenticates. For that reason, you need to write/find a script that gets executed by crypttab when you use default Ubuntu full-disk encryption. A very simple example (without LDAP) can be found here. An example LDAP authentication python script can be found ...


2

You cannot encrypt your Home directory whilst you are logged in You need root privileges to encrypt a user’s Home directory. So create a temporary administrator account to do the encryption of /home/avo/.


0

What you need is this command: sudo ecryptfs-recover-private The scenario: boot from your new Ubuntu installation and issue the command above. It will take a while until it will find your encrypted /home folder (assuming that it is accessible and mounted, if not, follow the instructions here.)


0

Actually you can change the default location (at least in version 2.0 beta). http://basket.kde.org/screenshots.php If you have a folder already: ...go to Basket > Bakup and restore > Use another existing folder If you want to move a folder ...go to Basket > Bakup and restore > Move to another folder


1

I fix this problem with those steps: check the size (parted) of the physical partition (ie. /dev/sda5) is smaller than the lvm Physical volume (PV) (pvscan) disable lvm pvchange -an with fdisk -l, write down the starting block for each partition with fdisk delete the partition (ie. /dev/sda5) and write changes with fdisk create a new partition of the same ...


0

According to this, it's automatic. Usually generic implementations of an algorithm have a priority of 100, assembly optimized 200 and hardware support 300. The API takes the algorithm with the highest priority if there is more than one available. It'll just use aes-asm because it has a higher priority.


0

On Linux, you can safety encrypt your home directory only. All your personal files will be encrypted while system files will remain untouched, thus safe. You also can use TrueCrypt drive encryption: it installs its own bootloader that supports booting from encrypted partitions (Windows and Linux), unlike Ubuntu's GRUB (best of my knowledge). If you can get ...


1

Yes, combining the two is safer, but its marginally safer and depends entirely on your passwords. As a regular user, there is no need for the combined, the home folder cant be accessed in any way before the disk is decrypted, using full disk encryption and a strong passphrase will protect your private information sufficiently.


1

Sorry, I've read a lot of nonsense here. First: TrueCrypt 7.1a IS considered quite secure and it will be more secure when the current audit will be completed (next fall). Only the very suspicious and restricted version 7.2 is absolutely NOT recommended. Second: file-level encryption is much more handy than disk-level (BTW, TC also works at disk-level), ...


2

Current problem When using Ubuntu Full Disk Encryption(that is based on dm-crypt with LUKS) to set up full system encryption, the encryption key is kept in memory when suspending the system. This drawback defeats the purpose of encryption if you carry around your suspended laptop a lot. One can use the cryptsetup luksSuspend command to freeze all I/O and ...


1

Unfortunately, per man cryptsetup “LUKS header: If the header of a LUKS volume gets damaged, all data is permanently lost unless you have a header-backup. If a key-slot is damaged, it can only be restored from a header-backup or if another active key-slot with known passphrase is undamaged. Damaging the LUKS header is something people manage to do with ...


0

type into a terminal "sudo su" then "sudo nautilus" then go into the /home/ directory and delete the folder from there.


0

I think you could have solved this if you kept a copy of master boot record. So that you can copy it where it needed to be.


0

LUKS is configured via cryptsetup which has a compiled-in limitation of 512 characters for an interactive passphrase. In theory there is no limitation on the length of the passphrase as it is processed through a key derivation function. $ crypsetup --help ... Default compiled-in key and passphrase parameters: Maximum keyfile size: 8192kB, Maximum ...



Top 50 recent answers are included