I would like to multi-boot with full hard drive encryption and pre-boot authentication using Fedora 20 or higher and windows 10. Unfortunately all I can find is old information and I can't figure out how to apply it to both Fedora 20 or the newer versions and Windows 10.



I am sorry if this is in the wrong section I could not figure out where to put it.

Interesting. I do not see a question in your post, but that sounds like an interesting project.
I would think you require an encryption tool suitable for full disk encryption that is compatible with linux, with Windows, and with grub all at the same time. Challenging!

I would think Truecrypt might serve, although it is out of development and support and may be NSA compromised. There are projects spawned from the fires of its demise that might serve a well.

I have always encrypted my partitions a bit separately (and reluctantly) using tools that fit the OS involved. Truecryypt may have been involved, but I have not attempted what you propose.

I know next to nothing about these things, but wouldn't it be best to use a HDD/SSD that offers hardware-level full disk encryption (FDE) using the BIOS ATA password as the key?

In that way the encryption would be completely operating system-agnostic, the encryption being at a lower level than any operating systems and data on the drive.

Sorry the post was the question. I just worded it as what I wanted to get done because I am not sure how to go about doing it. I know how to do them each separately but the windows encryption does not play well with the Fedora encryption.

Veracrypt is one of those that came out of TrueCrypt.

I didn't know that there was a term for this:

I know of LUKS for RHEL, however I don't believe it is advised to encrypt the /boot, and typically its for partitions.

Hardware based encryption trumps all of this, and makes the OS somewhat irrelevant. I have never understood what value it has if engaging the decryption is automatic. You have not PROTECTED anything.

TruCrypt, the last versions anyway, was quite capable of encrypting the entire drive INCLUDING boot partitions, linux partitions, and Windows partitions. The TC loader got control first, and you had to enter the key to get past it. Once the TC loader was happy, it would fire up the decryption code and load the boot image (which could be the grub loader) and you were off to the races. I never used it that way, but a few people on my team did.

If you fired up a live-cd and examined the disk, it looked blank and unformatted. There were settings to apply a honey-pot of sorts: decoy partitions that looked real and from within which would disallow access to or even detection of your encrypted data.

LUKS is nice for Linux, if you need encrypt only data partitions. You can do more with it, but not like what you could with TrueCrypt. As far as I know, it does not do Windows.

I may have to look into VeraCrypt. Sounds interesting.

Fedora 20 reached it's end of life/support in June of 2015-
https://fedoraproject.org/wiki/End_of_life

The current version of Fedora is 23. You'll like the new FC:-
https://getfedora.org/en/workstation/download/

See this Guide for Encryption & Fedora:
https://fedoraproject.org/wiki/Disk_...ion_User_Guide
https://wiki.archlinux.org/index.php/disk_encryption
https://docs.fedoraproject.org/en-US...ncryption.html

Sorry I can't help with Windows I haven't ran Windows in years.
Try here:
http://www.howtogeek.com/234826/how-...on-windows-10/

-::-Your right; this is not a wise practice.-::-

The HDD can be encrypted as well but that makes things interesting to say the least.
Sometimes can get ugly too.