Questions tagged [luks]

LUKS (Linux Unified Key Setup) is a disk-encryption specification.

17 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
0answers
108 views

How to secure remote console LUKS passphrase entry?

Say I have a Linux server running on my own metal and wish to encrypt the hard drive using LUKS. After a power failure, how can I enter my passphrase remotely without compromising it?
1
vote
0answers
140 views

Better security for storing certificates in LUKS or softhsm?

What is the best place to store certificates and keys which are confidential and sensitive? As I understand LUKS is fine and kernel transparently handles encryption/decryption. Also, the LUKS volume ...
1
vote
0answers
100 views

Entered FDE password in GRUB by mistake

For several reasons (I have an external monitor, etc.) when I booted the laptop I typed the FDE (Full Disk Encryption on Linux, LUKS) without looking at the monitor, and I ended up typing the full ...
1
vote
0answers
96 views

Backing-up to an untrusted cloud

Not sure if this kind of review/validation question is allowed - please delete if it isn't. Like many before, I'm looking for ways to do cloud backup in a way where I trust that I'm still the only one ...
1
vote
1answer
379 views

LUKS - Too large detached header size when large offset

I find cryptsetup to have an inconsistent way of dealing with headers, I'm tempted to call it a bug I would like to achieve a very large LUKS offset without resulting in a very bulky detached header ...
1
vote
0answers
789 views

Use TPM 2.0 to automatically decrypt the SD Card in Raspbian OS

I'm a college student trying to complete the first part of a rather large project, but I'm new to TPM, and Linux. What I'm trying to do is have TPM handle automatic decryption of the root ext4 ...
1
vote
0answers
110 views

Would using an interation count greater than 1 with a random keyfile of length greater than the master key be of any benefit?

If I were to have a 4096-bit file of random data (/dev/random) used as a keyfile for LUKS, would there be any benefit to having a key iteration count higher than 1? My reasoning is that the attacker ...
1
vote
1answer
415 views

Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?

Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" - nothing is perfectly secure; rather I am looking for possible ...
0
votes
0answers
67 views

In what order should you create the partition table and a LUKS container?

My goal is to fully encrypt my USB drive with LUKS. What's the correct order of encryption? Should I create the partition table or the LUKS container first? Motivation behind would be greatly ...
0
votes
0answers
105 views

Changing password on LUKS2 and SSD

Let's say I have password "password" for my drive using LUKS2. And then I change it to something really unguessable. The slot with password is overwritten. But, on SSD it is not really ...
0
votes
1answer
187 views

Security against local attack for remote FDE decryption?

Is there any remote FDE decryption that is resistant to an attacker that has local physical access? Tools like dracut-sshd need to store the private key used for the sshd server on the unencrypted ...
0
votes
0answers
135 views

SecureBoot: PCR to use or not

Context I'm working on the hardening of a Debian Bullseye box. At the moment, every works perfectly: SecureBoot enabled, "Admin" password for BIOS set, every partitions except EFI one are ...
0
votes
0answers
553 views

How to find the encrypted master key in LUKS header

One assignement of my teacher is driving me crazy because I don't think I'm that far from the solution but I still can't get it so I hope someone will be able to help me figure it out. Assignment The ...
0
votes
0answers
553 views

How secure is LUKS encryption?

I have encrypted a hardsik with a 12 charachter random alphanumeric passwrod using LUKS encryption on Ubuntu 18.04 on a 2.5" SATA disk partitioned with ext4. I'm wondering how secure is such ...
0
votes
0answers
348 views

Possible to restore LUKS header from partition that uses the exact same password and keyfile?

I was in Windows 10 and it told me I needed to Initialize Disk so I clicked it and now my LUKS header has been overwritten. I created my encrypted partitions in Linux with cryptsetup command. However, ...
-1
votes
1answer
187 views

Just found out about luksDump in LUKS (cryptsetup), Is there a way to hide all these sensitive data like used cipher and hash?

I have been using cryptsetup for a while now and just found out about the option 'luksDump'. I am used to similar tools like veracrypt and truecrypt and I am a bit shocked that all these vulnerable ...
-1
votes
1answer
1k views

Full disk encryption vs file based encryption

I need to protect a few hundred thousand files stored on a drive on a Linux server. I am thinking full disk encryption with file encryption on top would be the best option. Failing that, file based ...