LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-27-2016, 05:02 AM   #1
ilesterg
Member
 
Registered: Jul 2012
Location: Kuala Lumpur
Distribution: Debian, CentOS/RHEL
Posts: 575

Rep: Reputation: 60
Encrypted HDD/flash drive or HDD/flash drive encryption


Hi,

I will be storing sensitive work-related data on an external HDD and on a flash drive, and I am trying to look around for a solution how to do this. From google, I can see a lot of HDD and USB flash drive products with "built-in" encryption and security features, such as Ironkey's. Then I also have the option to encrypt the drives myself using LUKS or any other encryption tools.

I would like suggestions from people who actually use encrypted external HDDs and flash drives to protect confidential/sensitive company data. Again, mine's some work related stuff (private keys, HOWTO's, etc.) and some private stuff (Cornhub tutorials, IYKWIM ).

Of course, I am looking for free tools.

I expect to open these HDDs and flash drives only on my work laptop (running Windows 7) and on my personal laptop (running Windows 8.1 and OpenSUSE).

Thanks in advance.
 
Old 09-27-2016, 07:41 AM   #2
PenGUiN_6_1
Member
 
Registered: Oct 2006
Location: Brunswick, MD
Distribution: gNewSense 2.3 (deltah) i386
Posts: 57

Rep: Reputation: 22
Eric Hameleers (search 'slackware alienbob') has written some instructions for installing Linux on an encrypted drive (I use Slackware64-14.0); if you are using Linux at all, as in your information from Linux goes to Windows sometimes, you can follow the instructions only until they tell you to set up the encrypted system.

However....

IF you are using Windows only, occasionally to use Linux, you can use something like VeraCrypt (this can be compiled on Linux and Windows; you can download it from their website; of course read the documentation to ensure your drive is encrypted as you desire)

GnuPG (https://www.gnupg.org/index.html) is another tool, although I do NOT think it does what you want it to (you want encryption with volumes, such as the portable hard drive? GPG works with encrypting files; I am uncertain, though, if it does drives)

There may be other tools; I am, though, uncertain of their existence or whereabouts, so here are some that could help:

Eric Hameleers' instructions:
http://mirror.lug.udel.edu/pub/slack...ADME_CRYPT.TXT


VeraCrypt website:
https://veracrypt.codeplex.com/

GnuPG:
https://www.gnupg.org/index.html

I am uncertain of the tools, as I have primarily set up using LUKS

I hope this helps
 
Old 09-27-2016, 08:24 AM   #3
BlackRider
Member
 
Registered: Aug 2011
Posts: 295

Rep: Reputation: 101Reputation: 101
We use software encryption systems at work. Hardware encryption systems are too expensive and don't provide much benefit. Another problem with hardware encrypted devices is that if a device needs an update due to a security bug, you need a replacement for the whole device.

Here, portable drives and flash units that must store sensitive material are overwritten with pseudorandom data, and then a LUKS container is created in them with an encrypted filesystem inside. These devices can be used both at the workstations at the office or on the personal computers of the authorized people - all of them running Linux at the moment.

If you need a multiplatform solution, one that can run on both Linux and Windows, LUKS is not going to cut it. You might use VeraCrypt instead.

File level encryption, such as the one provided by OpenPGP, is ok but very impractical if all you want to do is to have a safe vault. OpenPGP is something you use for isolated messages or files.
 
Old 09-27-2016, 10:00 AM   #4
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
I always used to use double zipped password protected files. That is zipped with a password, then zipped again with a different one.
No propriety software needed.
 
Old 09-27-2016, 07:42 PM   #5
jefro
Moderator
 
Registered: Mar 2008
Posts: 18,837

Rep: Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822Reputation: 2822
There always seems to be some defect in how secure this stuff is. Wonder how secure the encryption wizard is in the TENS linux?

Not sure how good the hardware based ones are. There was a report of one very well known brand having a major flaw. Some of the hardware types could be used in linux under wine.
 
  


Reply

Tags
encryption, flash drive, hdd, luks, usb


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Cannot copy files to USB flash drive from internal HDD. erik2282 Linux - Desktop 8 10-04-2014 12:23 PM
How to install to a USB flash drive as if it was a USB HDD? ddalley Linux - Software 15 09-16-2009 08:14 PM
How To Install any Debian image into a Flash drive/disk or HDD Dexter_ObrigadO Linux - Newbie 4 03-11-2009 01:00 PM
save work to usb flash drive or HDD ninadb Linux - Distributions 1 03-27-2007 06:09 AM
LXer: EDGE Tech Corp Announces Portable Flash Drive With Muscle - the New 8GB DiskGO!(TM) Now Available; Swap and Go With This Secure Thumb-Sized Flash Drive LXer Syndicated Linux News 0 12-14-2005 02:16 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration