I've accidentally encrypted my 8GB usb stick instead of my 4GB stick and now I need to revert the encryption on the 8GB one. There doesn't seem to be an option like this in the TrueCrypt interface when I mount the USB.
View 2 RepliesI would love to be able to use TrueCrypt consistently across all my machines, be they Windows or Linux. As it stands, I can do full-disk encryption with pre-boot authentication only on Windows.
I don't really understand why this is. Are there technical challenges specific to Linux/Mac that make full disk encryption harder? Does anyone know whether TrueCrypt will support this in the near future.
PS. yes, I'm aware that there are other options. My goal is to simplify my life here and use the one tool across all machines.
Installed Truecrypt onto openSUSE 11.3 (KDE) and noticed that Truecrypt needed to be started as root.Modified visudo using YAST asusername ALL = NOPASSWD: /usr/bin/truecryptHowever, when copying files from my backup drive into the Truecrypt partition, there is an access problem (couldn't remember actual error message)In Konsole , updated visudo to username ALL = (ALL) NOPASSWD: /usr/bin/truecrypt Copying is allowed and working fine.Question:1. What is the difference between the above two visudo setting?2. How to updated visudo to the second setting in YAST?3. How to change the editor for visudo in konsole using nano instead of vi?
View 1 Replies View RelatedI was trying to install Fedora 9 on my new laptop that came with Win XP. I have selected the option to wipe out all partition and create a default layout with the Encryption option selected. But that installation got stopped on the middle, therefore I have started the installation again. This time it asked for the encryption password as expected but don't know why, its not accepting my password. I am 100% sure that the password is correct but it is not allowing me to enter into the hard disk partition section.
My question is, how do I remove encryption from my hard disk? I don't need to preserve the data, I just need to use my hard disk again. Is there any boot CD that allow us to format encrypted disks without prompting for a password?
When I installed, I selected the option to encrypt my home folder. I believe this is causing constant crashes now, since error message is user id/password related. Is there a way to remove the encryption?
View 5 Replies View RelatedIs there any way to remove the whole disk encryption without reinstalling? I'm running Ubuntu 10.04.
View 2 Replies View RelatedWe do use kickstart configuration file to customize the CentOS installation. In the partitioning screen, I do see a check box for encryption (encrypting the disk blocks).
I want to remove this checkbox in my kickstart configuration file. What is the option to use to get rid of this checkbox.
I need such a OS on a old system for mass downloading and experimenting downstairs. Also I would prefer if it doesn't require too much Linux know-how and is operable by my Windows 7 system via networking. It doesn't need to be compatible with TrueCrypt or JDownloader specifically if alternative software for it exists.
View 2 Replies View RelatedI am changing the password of a truecrypt file container. This takes around 1 minute. Why?
time truecrypt --text --change /tmp/user1.tc --keyfiles= --new-keyfiles= --password=known --new-password=known --random-source=/dev/null"
If I use strace I see that it basically does not do anything: it simply reads lots of random data from /dev/urandom (even if i specified /dev/null as random source) and finally changes the password:
open("/dev/urandom", O_RDONLY) = 6
read(6, "36&{35121221234320234313242312I326235245224300354O)270Q200 201J227224311_212367"..., 640) = 640
close(6) = 0
I have a dd image of a full drive (as a file) that was using Truecrypt system encryption under windows. I want to mount the main partition from that image using Linux's Truecrypt. I am familiar with dd loopback devices and have the partition offset, but I don't know how I can mount it like this because I need to use the truecrypt command.
Is there perhaps some way to create a fake device file for the disk image that I can mount from within Truecrypt?
I am thinking of installing Ubuntu on my machine, and I may need to still keep windows 7 around for certain games/apps. I want to do a full disk encryption using Truecrypt. As I understand, Truecrypt is compatible with both linux/windows/OSX, and has an option for a "hidden operating system."I want to Install both win7 and ubuntu, with ubuntu as a hidden OS. I have watched tutorials on ..... showing the method for creating a hidden OS for Windows, in this tutorial the second volume was created from the first volume and was effectively a clone of the original OS. Basically what I am asking is---- Is it possible for a hidden volume with a bootable version of Ubuntu Linux to cohabitate on the same drive as windows?If so, are there any howto's/tutorials you could point me to?
View 2 Replies View RelatedWhat are my options for encrypting the /home directories of my Ubuntu laptops? They are currently setup without any encryption and some have /home as a separate partition whilst others don't. Most of these laptops are single-user standalone laptops which are out on the road a lot.
Is ecryptfs and the encrypted Private directory good enough or are there better, more secure, options? If somebody got hold of the laptop, how easy would it be for them to gain access to the encrypted files?
I have PDF files secured using 256-bit AES, requiring a password to open the file (Acrobat 9 or greater)
I can use Foxit Reader or Adobe Acrobat just fine on Windows, but I can't view those PDF's on Ubuntu or Mac OS X. What PDF readers for OS X and Ubuntu support 256-bit AES?
how to test the AES Encryption in the openSuSE 11.3
View 1 Replies View RelatedQuestion: The USA forbids the export of secure cryptography. NSAKEY has already been discovered in the Windows cryptograhic API. Since the Linux-Kernel is hosted in the USA, how secure is its cryptography ?
View 1 Replies View RelatedCurrently I am wondering whether it is possible to apply asymetric encryption of a directory in Linux.
I would like to achieve the following:
Write log files to /var/log/secret Everything written to /var/log/secret is instantly encrypted by a public RSA key (or something similar)
The encryption programms I know, i.e. ecryptfs do not support asymetric encryption of files, at least as far as I know. (Correct me if I am wrong). Therefore I am asking here whether you know of any possibility to implement this.
I am using dd_rhelp to recover data from a failed 80Gb hard drive with Windows XP and PGP encryption.
My question: How do you mount a drive encrypted with PGP under Windows on a Linux box?
My scenario...
1. I am new to Linux
2. I do not know the PGP passphase
3. I am using Ubuntu and Knoppix
4. I have another 80Gb drive as the target drive
5. Source (bad) drive /dev/sdc1 drive is attached via a SATA-to-USB adapter
6. Target (good) drive /dev/sda1 drive is installed in laptop
My Problem....
Copies data from source to target drive with many errors. When I view the files copied to the target disk they file names are gibberish (extend character sets for file names) with huge file sizes (up to 9Gb).
I plug the target drive into a Windows laptop and it does not recognize it, even though it was formatted as ntfs.
I have been trying to perform a netinstall (of Debian). Will the WPA encryption on my wireless network prevent (or at least make difficult) the netinstall? Will I need to have the WPA password handy or even to temporarily remove the encryption?I haven't actually run into this problem yet; what I was dealing with on the last attempt, before I decided to finish the netinstall later and went back to my working Linux system (I got impatient with being stuck outside it), was that the netinstall couldn't detect my network by DHCP, and wanted me to enter an IP address. I don't suppose that would be any more difficult than going to the host computer and writing down its IP address, but thinking ahead, I wondered whether the WPA encryption would pose another problem.I didn't really think about these issues when deciuding to try a netinstall: whether my internet connection would work. I mean, if it doesn't, trying to netinstall is a waste of time.
View 1 Replies View RelatedI used this password Pass1234 when I search password stored its Nh2yEjhdHIwtY what kind of encryption is used? I thought it was crypt() , but when I create crpypt on my local machine its different.
View 3 Replies View RelatedI connect wireless success
WEP Encryption Key:10chars
Interface Type: 802.11b/g
well now in my windows pcs changed to
WEP Encryption Key:26chars [windows success]
what choices must change in ubuntu 9.10 for the new change?
Can you tell for 26chars WEP, what choices do not try [Not Appropriate], so find the solution for the right choice[selections of the form - WLAN CONN] easier of the remaining? E.g. Do not try "40/128..." but "128 passphrase"...?
Bitlocker is a harddrive encryption data protection tool which comes with Windows Vista Ultimate and 7. Does anyone know an equivalent for Linux distros like Fedora and Ubuntu?
View 3 Replies View RelatedThe only reason why I don't use Linux (even though I prefer Linux over Windows, and can do everything faster and more efficiently) is because each time I try to learn about dm-crypt I give up.
Can someone point me in the right direction for full OTFE on Linux (like TrueCrypt)?
I'm a relative newby to Linux so forgive me if this is a simple question. I know that if you install Ubuntu using the alternate CD, you can create a whole disk encrypted installation, but what about after a normal installation? What is the best procedure to use to get more than just the home folder encryted? Installation of Fedora 13 gives the option during a normal install to encrypt more than just the home folder. I really only want to encrypt my Ubuntu partition. I have a laptop with a multi-boot setup with Windows 7, Fedora 13 and Ubuntu 10.04 all residing in their own partition. Because of this setup I really can't use whole disk encryption. I use Truecrypt on my Windows 7 partition and it works great but encryption of a Linux system partition is not supported.
View 4 Replies View RelatedAm configured SVN on Ubuntu 10.04 ,It's Working fine ;svn access method is svn://ipaddress .In this method am not encrypting the password ,Currently my passwd (/homesvnMyProject/conf )file like that [users]test = testNow i want to Implement the password Encryption for any users, without implementing svn+ssh:// method
View 1 Replies View RelatedI am just wondering what encryption method the shadow file uses, so that I may be able to manually change it. I ask this because I am trying to make a web page that will allow people to change their linux password via a browser.
View 4 Replies View RelatedI am building an active directory and using BIND9 as my DNS. To allow for secure dynamic updates from the domain, I am enabling GSS-TSIG as detailed here and here. Unfortunately, some of the commands and configurations used here seem to be depreciated, at least in the newer versions that I'm using. My issue is one of keytab encryption. I generated a keytab using ktpass.exe on the Windows Server 2008 domain controller. I have tried DES/MD5, AES128/SHA1 and AES256/SHA1, each have been turned down by ktutil on the kerberos server (FreeBSD). Each time, it outputs the following error: ktutil: AES256/SHA1*: encryption type AES256/SHA1* not supported *Respective to encryption used.
I cannot find a list of suitable encryption schemes that ktutil will accept. The FreeBSD handbook details a means of producing a keytab file, but I'm not sure how to configure the Domain Controller to use the keytab.
I'm moving over to Linux when the new SSD arrives. SSD gives increased performance, so I thought that I could encrypt everything.
But then I came to think about TRIM, and garbage collection on the drive. Will a LUKS encrypted drive affect the garbage collection system? (TRIM).
I have set up a Linux software RAID5 on three hard drives and want to encrypt it with cryptsetup/LUKS. My tests showed that the encryption leads to a massive performance decrease that I cannot explain. The RAID5 is able to write 187 MB/s [1] without encryption. With encryption on top of it, write speed is down to about 40 MB/s.
The RAID has a chunk size of 512K and a write intent bitmap. I used -c aes-xts-plain -s 512 --align-payload=2048 as the parameters for cryptsetup luksFormat, so the payload should be aligned to 2048 blocks of 512 bytes (i.e., 1MB). cryptsetup luksDump shows a payload offset of 4096. So I think the alignment is correct and fits to the RAID chunk size.
The CPU is not the bottleneck, as it has hardware support for AES (aesni_intel). If I write on another drive (an SSD with LVM) that is also encrypted, I do have a write speed of 150 MB/s. top shows that the CPU usage is indeed very low, only the RAID5 xor takes 14%.
I also tried putting a filesystem (ext4) directly on the unencrypted RAID so see if the layering is problem. The filesystem decreases the performance a little bit as expected, but by far not that much (write speed varying, but > 100 MB/s).
Summary:
Disks + RAID5: good
Disks + RAID5 + ext4: good
Disks + RAID5 + encryption: bad
SSD + encryption + LVM + ext4: good
The read performance is not affected by the encryption, it is 207 MB/s without and 205 MB/s with encryption (also showing that CPU power is not the problem). What can I do to improve the write performance of the encrypted RAID?
[1] All speed measurements were done with several runs of dd if=/dev/zero of=DEV bs=100M count=100 (i.e., writing 10G in blocks of 100M).
Edit: If this helps: I'm using Ubuntu 11.04 64bit with Linux 2.6.38. Edit2: The performance stays approximately the same if I pass a block size of 4KB, 1MB or 10MB to dd.
I plan to use newsbeuter for console RSS reading.This program has a config text file where I need to store my Google account password,in order to access my Google reader.I don't feel easy at making my password readable to everyone.Is there anyway I can somehow encrypt this information ?
View 1 Replies View RelatedUbuntu 8.4 Just installed Truecrypt yesterday. Would like to be able to start Truecrypt automatically and use the same password as my login password.
View 1 Replies View Related