Hello everybody!

Some days ago, I got an idea to test the linux file system (ext4) on my pen drive. My purpose was to make sure, whether the files on my pen drive are accessible on other computers or not.

I cp some files to the device and changed the ownership and access rights of them.

I checked later these files, if I'm able to read them or not. Unfortunately I was able on another Linux, what more, when I was root I could change all rights and ownership features.

Well, I thought, there must be one way against theft and securing my data. I thought to encryption.

But I don't really understand the functioning of a fully encrypted drive. Does it mean, that:
1, you always have to decrypt your data with every boot? (I can imagine a program, which asks a password for decryption with every boot. And if you don't have the password you can not use your linux machine for anything. Is that right?)

2, if the man, who theft your device, connect it to his Linux-based computer, he can not see neither the contents nor the access rights. So he is not able to look what he exactly gained.

3, and if the man, who theft your device, has no idea what kind of program you used to encrypt your data has to firstly find out what was the program to crack your device?

If you have answers, please share them!
Thx!

RedHat uses luks - I'm pretty sure cryptsetup is available for Debian too. I know with cryptsetup you can encrypt the drive and then put in the passphrase 1 time for that box and add it to /etc/fstab. After that as long as the device is connected you will be able to see what is on it. That is contingent upon the passphrase not being changed.

On a removable drive, depending on where the drive is mounted will depend on who the permissions apply to. In any event, root on a given system has access to any file on the system.

Any partitions you encrypt will remain inaccessible until mounted. Assuming LUKS, the system can mount them decrypted once supplies with the passphrase or a keyfile. You can set them up to mount decrypted automatically at boot but it somewhat defeats the purpose of encryption.

If you forget your password then the data will remain inaccessible. Unless you encrypt the root partition as well, the system should still be usable. If you encrypt the root partition and forget the password you are pretty much out of luck.

Correct

No. He can know you used LUKS (for example) and it won't do the thief any good. He could even likely know the algorithm you used and it still wouldn't help unless you use something with a known exploitable flaw.

1 members found this post helpful.

Almost all formats are only useful when you maintain physical security. Encryption of a partition or within files does prevent access when physical security has been breached. It does not guarantee you will always have access to the data. Many a file has been lost by not having a protected backup.

There are only so many encryption schemes. There are many ways to simplify cracking and not sure there is any that some of the big governments can't crack by brute force.

Some of the simple encryption would prevent casual thief. Many of the ways can be tied to a scheme so that you never notice it's use. You can make a self signed certificate or other means to open that drive/files.

Not too long ago hardware based usb world wide company found out the hard way that their stuff was easy to crack. Assume that your choice may already be breached by skilled hackers.


http://www.truecrypt.org/

http://www.gnupg.org/


https://www.cs.arizona.edu/computing...ncryption.html

1 members found this post helpful.

They were very helpful in theory and in practice, as well! Thank you!