LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-31-2008, 09:35 AM   #1
DarkpawT
Member
 
Registered: Mar 2008
Distribution: Fedora (home) - Ubuntu (work)
Posts: 33

Rep: Reputation: 15
LUKS encryption question


I am using two partitions that I setup with LUKS encryption. Obviously, encrypted data is supposed to be written to them while they are unlocked and mounted...but...what happens if you shut down without unmounting the drive (though it will unmount during shutdown)and running:

cryptsetup luksClose

Is it still going to be encrypted, even though the luksClose wasn't run?
 
Old 10-31-2008, 10:49 AM   #2
brianmcgee
Member
 
Registered: Jun 2007
Location: Munich, Germany
Distribution: RHEL, CentOS, Fedora, SLES (...)
Posts: 399

Rep: Reputation: 40
All data gets encrypted on the fly. LuksClose looses the encryption key for your session.
 
Old 10-31-2008, 11:44 AM   #3
DarkpawT
Member
 
Registered: Mar 2008
Distribution: Fedora (home) - Ubuntu (work)
Posts: 33

Original Poster
Rep: Reputation: 15
password

Thanks, that's good to hear.

Another question...I can't seem to find anything on changing the encryption password. There's lots of instructions on how to add new keys for the drive (up to 8, it seems) but nothing on changing the current key. Is it safe to say that this can basically be done by me adding a second key, and then deleting the first (original) one?

And if that would work...how does it go about changing the files that were already written to the drive? Or is it just stored in some kind of header to the file (which would be bad).
 
Old 11-04-2008, 11:05 AM   #4
DarkpawT
Member
 
Registered: Mar 2008
Distribution: Fedora (home) - Ubuntu (work)
Posts: 33

Original Poster
Rep: Reputation: 15
Luke

Bump......
 
Old 11-05-2008, 01:18 AM   #5
brianmcgee
Member
 
Registered: Jun 2007
Location: Munich, Germany
Distribution: RHEL, CentOS, Fedora, SLES (...)
Posts: 399

Rep: Reputation: 40
Yeah. Each password that is added to the LUKS container is able to decrypt the contents.

So if you want to change your password you add a new key and drop the old. I would suggest to test the new key, though.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
luks encryption, swap and hibernate BCarey Slackware 6 04-15-2008 05:48 PM
luks cryptsetup and lvm question ruzzed Linux - Software 3 09-16-2007 07:21 PM
cryptsetup-luks question nomb Linux - Software 4 06-14-2007 10:22 AM
System encryption with dm-crypt and luks? Zmyrgel Slackware 9 09-02-2006 10:40 AM
Encryption question jantman Linux - Security 5 07-20-2006 02:25 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:50 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration