7

I previously had been using TrueCrypt, but recently re-installed Ubuntu and used 12.10's full disk encryption option (re-installed for other reasons). I never got any choice in how it did that. I don't know what cipher is used or the key size, or anything besides the passphrase really. Where can I find details about this sda5_crypt?

Edit: Seeing this mistake is humorous, but for those curious, sda5 refers to the hard drive and partition, not the encryption system.

5

Full disk encryption is using the dm-crypt kernel module, managed by Luks/cryptsetup. If you choose to encrypt your home directory, eCryptfs is used instead. These are two different technologies. I assume you chose full disk encryption here in my answer.

Use the command

# cryptsetup luksDump /dev/sda5

to view the current detailed configuration for sda5. And another example:

# cryptsetup status sda5_crypt
/dev/mapper/sda5_crypt is active and is in use.
  type:    LUKS1
  cipher:  aes-cbc-essiv:sha256
[...]

Read more on dm-crypt on Wikipedia: dm-crypt and more on eCryptfs on Wikipedia: eCryptfs.

  • 1
    Thank you. Mine shows AES-XTS with a 512 bit key. Is that the default or does it vary by CPU? – Dakota West Dec 12 '12 at 22:55
  • Varies by Ubuntu default options in the installation I guess. This may have changed since 12.10 as I'm still on 12.04 and it was possible to select the cipher yourself in the 'alternate' installer, unavailable since 12.10. – gertvdijk Dec 12 '12 at 22:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.