Object encryption on linux - Revision history

Lilith2 at 16:14, 25 July 2015

2015-07-25T16:14:03Z

Lilith2 at 22:24, 23 July 2015

2015-07-23T22:24:25Z

Lilith2: Created page with "For cryptography concepts see Encrypting all the things. == Steganography == == Disk encryption == * All Operating Systems (linux, windows, mac) support Logical Virtual..."

2015-07-23T22:18:30Z

Created page with "For cryptography concepts see Encrypting all the things. == Steganography == == Disk encryption == * All Operating Systems (linux, windows, mac) support Logical Virtual..."

New page

For cryptography concepts see [[Encrypting all the things]].

== Steganography ==

== Disk encryption ==

* All Operating Systems (linux, windows, mac) support Logical Virtual Memory (in alphabet-soup-speak named ''LVM'').
* On linux distro’s you can encrypt the entire disk (LVM). Why full disk encryption? Encrypted hard drives may not be safe. And when using full disk encryption (LVMs), most of the file system is encrypted but your boot partition and GRUB are not. And this is a vulnerability that can get you pwnd.
* Recommended for linux are dm-crypt + LUKS. It comes with the kernel.
* The swap-partition is not located within ram but on your hard drive – writing into this partition will leave traces of activities on the hard drive itself. If your computer happens to use swap during your use of encryption tools it can happen that the passwords to the keys are written to swap and can then be extracted. You can encrypt the swap space to prevent unauthorised people from reading your virtual memory. Ecryptfs is an excellent tool for that.

== File encryption ==

There are 3 ways to hide files: You can physically hide files (put yer files on a CD or USB stick, then hide the stick), you can encrypt files (encrypted data cannot be read directly, it must be unlocked with a key first) and you can use misdirection (hiding the file within another file, container or vault where people do not think to look). And of course you can combine these techniques. How about an encrypted USB stick with an encrypted vault on it that is kept in a secret safe place where nobody would look for it?

Note: The fact that an encryption program "works" does not mean that it is secure. ''Functionality does not equal quality, and no amount of beta testing will ever reveal a security flaw.'' ~ Bruce Schneier.

← Older revision		Revision as of 16:14, 25 July 2015
Line 20:		Line 20:

	Note: The fact that an encryption program "works" does not mean that it is secure. ''Functionality does not equal quality, and no amount of beta testing will ever reveal a security flaw.'' ~ Bruce Schneier.		Note: The fact that an encryption program "works" does not mean that it is secure. ''Functionality does not equal quality, and no amount of beta testing will ever reveal a security flaw.'' ~ Bruce Schneier.
		+
		+	== Email ==

@@ Line 1: / Line 1: @@
-For cryptography concepts see [[Encrypting all the things]].
+For cryptography concepts see [[Encrypting everything]].
 == Steganography ==
@@ Line 5: / Line 5: @@
 == Disk encryption ==
 * All Operating Systems (linux, windows, mac) support Logical Virtual Memory (in alphabet-soup-speak named ''LVM'').
 * On linux distro’s you can encrypt the entire disk (LVM). Why full disk encryption? Encrypted hard drives may not be safe. And when using full disk encryption (LVMs), most of the file system is encrypted but your boot partition and GRUB are not. And this is a vulnerability that can get you pwnd.
 * Recommended for linux are dm-crypt + LUKS. It comes with the kernel.
-* The swap-partition is not located within ram but on your hard drive – writing into this partition will leave traces of activities on the hard drive itself. If your computer happens to use swap during your use of encryption tools it can happen that the passwords to the keys are written to swap and can then be extracted. You can encrypt the swap space to prevent unauthorised people from reading your virtual memory. Ecryptfs is an excellent tool for that.
 == File encryption ==