0
votes
0answers
10 views

openSUSE encrypted root over RAID, given Yast doesn't support encrypted root?

This is for a fresh install of 13.1 I'll be making. Four drives in RAID10 need to be on the bottom. I'd rather the RAID be software, MD, rather than hardware, though I'd use hardware RAID if all else ...
0
votes
0answers
18 views

Recovering files without .encfs6.xml

I've lost my .encfs6.xml file for a encfs volume. I still know my passphrase. Is there anyway to regenerate the .encfs6.xml based on similar volumes and the passphrase? Any chance of brute-forcing? ...
7
votes
2answers
580 views

ZFS RAID and LUKS encryption in Linux

I'm planning to setup a set of 3x 2TB 7200rpm drives as a LUKS-encrypted Z-RAID pool in Linux (for a NAS solution). My understanding of the problem at hand is that the only way to achieve this is to ...
1
vote
1answer
54 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
2
votes
1answer
51 views

Sharing ENV variables between multiple linux servers

I need to be able to share ENV variables between multiple linux servers. These variables are used by my application. I'd like to keep these variables in sync between all servers. Application ...
-2
votes
1answer
74 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
1
vote
1answer
140 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
-6
votes
2answers
89 views

Authentication of both client and server in subscription based model [closed]

My current business model takes a loss upfront on hardware in the hopes that the service will be paid for continuously. When service is not paid for the instructions are sent to the client hardware to ...
1
vote
0answers
77 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
-2
votes
1answer
105 views

On the fly encryption of data ( not your average type) [closed]

I'm looking to build my first nas. And i intend to connect over the internet to it. Because i will have some work documents too on it i want to make it as secure as possible. I have no ...
24
votes
6answers
11k views

What is a good solution to encrypt some files in unix?

I am looking for a utility to encrypt certain directories in Linux. I am not looking for any full disk encryption services, but simply to encrypt a few directories for the purposes of storing files in ...
0
votes
1answer
145 views

Can encfs be compromised if attacker knows a file name on the encrypted file system?

Good morning, I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
4
votes
2answers
773 views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
0
votes
1answer
212 views

Aside from tools like 7-Zip, AxCrypt, and Kryptel, what is available that has multicore functionality and does AES-256? [closed]

I have a PowerEdge 1950 with 2 x E5405 2.00Ghz CPUs and 4GB of RAM sitting around. It's currently not doing anything at all so it's a perfect fit for this task. I have traditionally used 7-zip's ...
0
votes
1answer
495 views

PPTPd - configuration error?

an 5 01:09:12 vpn pptpd[1832]: GRE: read(fd=6,buffer=611860,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax ...
2
votes
0answers
56 views

How to encrypt disk transparently without destroying data [closed]

On a Linux system, be it Debian, Redhat or any distro, I would like to encrypt the disk on the fly. That is, encrypt the disk transparently to the OS whilst it is running, reboots, shuts down etc. In ...
1
vote
1answer
362 views

Why are these dmsetup commands there?

On this page are there examples of LUKS encryptions. Example below. Why are the dmsetup commands there? What do they do? dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1 losetup ...
2
votes
2answers
65 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
1
vote
0answers
237 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
1answer
83 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
0
votes
3answers
406 views

Shared encrypted filesystem for ec2 instances

Me and my company intend to start using ec2 for distributing some cpu-intensive pieces code, involving a few 10s of gb of data, however I have some concern about the protection of the intellectual ...
3
votes
2answers
161 views

Encrypt content of disk without entering password at boot time

I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I ...
3
votes
1answer
512 views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. After this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 ...
3
votes
1answer
623 views

Why is mkfs overwriting the LUKS encryption header on LVM on RAID partitions on Ubuntu 12.04?

I'm trying to setup a couple of LUKS-encrypted partitions to be mounted after boot-time on a new Ubuntu server which was installed with LVM on top of software RAID. After running cryptsetup ...
3
votes
1answer
309 views

Reboot Encrypted System Remotely Without Password Query

Are there any standard solutions to rebooting an encrypted system remotely without requiring a password on the next boot? The system in question is an Ubuntu encrypted with LUKS root partition and an ...
5
votes
1answer
2k views

Resizing a LUKS encrypted volume

I have a 500GiB ext4 filesystem on top of LUKS on top of an LVM LV. I want to resize the LV to 100GiB. I know how to resize ext4 on top of an LVM LV, but how do I deal with the LUKS volume? ...
2
votes
3answers
393 views

Possible to per file encrypt cloud storage? [closed]

With the many cloud storage providers that there now exist, would it be possible to add a layer of encryption before the files are saved? It would be possible to make an encrypted partition in a ...
2
votes
2answers
844 views

Different results from GnuPG and OpenSSL when using AES256 encryption

Text: apple Pass: password openssl aes-256-cbc -e -a -in apple.txt Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ= gpg -c --cipher-algo AES256 apple.txt Output: ...
7
votes
2answers
893 views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
2
votes
1answer
81 views

practical document encryption in shared environment

I can't seem to find a good, practical way to encrypt documents on a shared drive... This is a samba share on centos using ADS auth. The primary doc format will be PDF. Is there a good on-thy-fly ...
21
votes
13answers
35k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
7
votes
1answer
384 views

State of hardware-assisted disk encryption in Linux

I use dm-crypt to encrypt partitions. I am building a small office server from consumer (or pro-sumer) category hardware. It made me wonder, hardware-assisted encryption is a notion in the air for ...
21
votes
2answers
11k views

I have a keypair. How do I determine the key length?

Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?
3
votes
1answer
131 views

verify integrity of encrypted tar

I'm using tar along with openssl to create encrypted tar archives of some large directories (about 30GB). What is the possibility of corruption in this process, and how would I verify that the ...
0
votes
1answer
138 views

Encrypting files within a container on a virtual linux system without kernel modules

I have a virtualized linux system (vserver) that gives me all root privileges except manipulation of kernel modules. Now I wish to have a solution similar to TrueCrypt where I can create an encrypted ...
0
votes
2answers
844 views

md-RAID5 - How fast should it be or where is the bottleneck?

I set up a new server with a LUKS encrypted RAID5. On the former server, the bottleneck was definitely the CPU, as it was a 7y old single core and the load went up to 100%. Now it is different. I ...
8
votes
3answers
3k views

How to create a randomly keyed, encrypted swap partition, referring to it “by-uuid”, on Debian?

It is sensible that if you have any sort of block device encryption implemented on your GNU/Linux system, to encrypt your swap partition too, as any decrypted data may be written in cleartext at any ...
2
votes
2answers
107 views

Decrypting a Linux/Ubuntu encryptedfs? [closed]

I have an image of a linux machine with an encryptedfs (/home/.private, etc). Is it possible to export the file structure and mount it from a different linux box/VM?
6
votes
3answers
3k views

Is it possible to hardware accelerate LUKS encryption?

My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
2
votes
2answers
213 views

Is it safe to alter the underlying encrypted files for a live mounted ecryptfs volume?

I want to do live synchronization of an encrypted directory with a server, such that the server only sees encrypted data. Suppose I put the underlying ecryptfs data in: /home/user/.Private And I ...
0
votes
2answers
521 views

Execute encrypted files but don't let anybody read them

I want to provide a virtual machine image with an installed web application. The user should be able to boot the vm (don't login, just boot) and a webserver should start automatically. The point is I ...
0
votes
1answer
365 views

is it possible to create a hidden encrypted /home partition in linux

i know it's possible to encrypt your home partition (migration of home shown in the link) http://sysphere.org/~anrxc/j/articles/ecryptfs/index.html but later i found out that this is possible to ...
1
vote
4answers
496 views

Remotely enter encryption key?

This might be a really dumb question but here goes, anyway. I just bought a couple servers. I already installed Ubuntu with encrypted LVM on one and I'm planning on doing the same with the other. ...
1
vote
3answers
2k views

Encrypt entire Linux drive with TrueCrypt

I've found plenty of info online about how to encrypt a drive with TrueCrypt, but everything I found was either outdated or not for Linux. Here's what I'm after: I want to encrypt my entire drive ...
0
votes
2answers
46 views

Encrypting user folders

When installing Ubuntu 10.04 on a new machine, it seems I forgot to enable user folder encryption. Is there any way to add this feature after the fact?
0
votes
4answers
547 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
7
votes
3answers
4k views

Encrypted Remote Backups via Rsync?

I run a small modest CentOS server at my house for misc backups, etc. My friend on the other side of town also runs a small modest server at his house for similar purposes. We have been toying with ...
0
votes
1answer
176 views

eCryptFS Initialization Issues

I'm having issues with the first mount of eCryptFS. Currently when I attempt to mount it mount -t ecryptfs ~/.Private ~/Private However it's erroring. The error in dmesg is the following: Error ...
1
vote
2answers
1k views

Encrypting all outgoing email

I have a client requirement to encrypt all outgoing email from a linux server. This can be done using any software, sendmail/postfix etc. They have given me the key they want to use, and want all ...
1
vote
2answers
2k views

What should I encrypt in Debian during install?

I have seen various guides and recommendations on web about how best to do this but nothing that clearly explains the best way and why. So I understand there is a need for part of Debian during ...