Tagged Questions

10
votes
2answers
454 views

How to encrypt data on the server?

I have some data on the server (running Linux) which needs to be encrypted (company policy). This data is being served by an application running on this machine. Now I consider a few possibilities: ...
1
vote
1answer
127 views

Dual Linux System with Whole Disk Encryption

(This is a continuation of my question on Ask Ubuntu.) My goal is I want to have a Xubuntu/Ubuntu dual boot, with a catch - I want the disk to be fully encrypted with the dm-crypt (native supplied) ...
0
votes
0answers
124 views

TrueCrypt Windows FDE Multi-Boot [closed]

I tried to achieve Matt's setup in my VM with Ubuntu and Debian (both having their separate /boot partition). Everything worked smoothly, but enabling TrueCrypt-FDE on Windows, I could still access ...
2
votes
2answers
201 views

Possible implementations of networked+encrypted filesystem

Is it possible to implement scheme where remote server just share its filesystem (or resizable container file in it) and it's locally encrypted and mounted? And what is best practical method? (On ...
4
votes
2answers
244 views

Detect changes in /boot when using full disk encryption

When running a fully encrypted linux system using dm-crypt, the /boot partition has to be unencrypted to boot, as far as I know. I've setup a server that can be unlocked remotely by connecting to a ...
1
vote
1answer
177 views

Is using decrypt_derived more secure than a keyfile?

Say I have two partitions on a Linux system, a root partition (/) and a /home partition. Both of them are encrypted with LUKS. The /home partition needs only to be decrypted if / is unlocked and ...
6
votes
7answers
2k views

Physical computer security, how to disable USB ports when the computer is 'locked'?

Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there. Now the data is encrypted on the hard drive with TrueCrypt. ...
4
votes
2answers
240 views

Securing data on laptop's hdd

I was wondering which is the best way to secure/encrypt data in the hard disk on a laptop that runs Ubuntu Oneiric? Setting LVM encryption? I am mostly concerned about having my laptop lost or what ...
6
votes
1answer
1k views

loop-aes or dm-crypt for linux hard encryption?

loop-aes and dm-crypt are both used by partman-crypto for linux hard encryption, but dm-crypt needs no patch to kernel and is more supported. dm-crypt keeps it's key on first hard block, is it a ...
0
votes
0answers
430 views

Ubuntu home folder encryption, compared with file vault [closed]

I want to know if there are any limitations that are imposed on you when you enable home folder encryption in ubuntu. Example, in the mac file vault, at least on Snow Leopard, time machine, and ...
2
votes
1answer
279 views

NFS and encrypted File systems

Can a NFS mounted file system be used for encrypted /home, and can the encrypted Home Directories be mounted/decrypted for the user when they login?
7
votes
2answers
1k views

For LUKS: The most preferable and safest cipher?

I'm about to encrypt two of my hard drives using LUKS, since I can't really do it myself I use the guide on the Arch Linux wiki (which can be found here). In an example in the guide the cipher ...
4
votes
2answers
124 views

Can my /boot be compromised if I Suspend my notebook?

So if I use e.g.: LUKS, and I always suspend my notebook, then are there any methods to modify the unencrypted /boot? It contains the kernel! Or if someone tries (evil maid) to modify the /boot then ...
5
votes
1answer
1k views

Using TPM for full disc encryption?

E.g.: Can I make a better full disc encryption with e.g.: LUKS using the TPM? How?
2
votes
3answers
101 views

Could an Encrypted VG/Image compromised?

I mean if I encrypt my ""full system"" so that everything (besides the /boot) is in an encrypted VolumeGroup (Linux). So I store my /boot on a flash drive, thats always next to me. Q: can the ...