LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-23-2023, 06:10 AM   #1
lester29
LQ Newbie
 
Registered: Mar 2023
Posts: 3

Rep: Reputation: 0
Full disk-encryption question


I need to set up full disk encryption of the linux in my laptop.

Questions:

1. Does an encryption key on the USB protect against rubber-hose cryptanalysis?
2. Is it true that key on pendrive is more risky than password because someone can steal the usb key and access data without the need of password?
3. What do you think about simply encrypting the disk with LUKS and do encrypted backups?

My threat model is someone stealing my laptop rather than FBI, government :-D

Thank you, lester29
 
Old 10-24-2023, 12:02 AM   #2
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 22,004

Rep: Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338Reputation: 7338
4, 5. someone can lose that flash drive or it can just stop working.
6. they will not steal the laptop, but your data when the drive is unlocked and in use (and connected to the net).
7. or probably they will steal it together with that pendrive

Once upon a time we used a card (such as Visa or Mastercard) to lock/unlock the host, now we use fingerprint or face recognition.

LUKS is quite good as far as I know.
 
Old 10-24-2023, 05:04 AM   #3
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,341
Blog Entries: 3

Rep: Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733Reputation: 3733
Quote:
Originally Posted by lester29 View Post
3. What do you think about simply encrypting the disk with LUKS and do encrypted backups
Encrypted home directories might be the way to go. However, I'm still not sure about LUKS on removable media. I have several backups and the old drives, which are unencrypted and they Rsync nicely. The old drives which are encrypted with LUKS go noticeably slower. The newer drives with LUKS are really slow and take an hour+ for what takes single digit minutes on the first mentioned set. Much of that seems to be a problem with the new drives which furthermore run for up to 8 seconds at a time before the light goes off and the platter stops spinning after being unmounted and ejected.

tldr; you'll just have to test performance on the hardware you happen to have available
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Volume Encryption or Full Disk Encryption with Veracrypt? lisamint Linux - Security 4 11-07-2019 08:43 AM
How to have luks encryption with keyfile OR passphrase (efi full disk encryption including boot)? byroncollege Linux - Security 2 03-30-2017 07:45 AM
Mint 18 Full disk encryption VS Veracrypt Full Disk encryption: Help a Noob Decide Please ! APeacefulRig Linux - Security 2 11-11-2016 08:10 AM
[SOLVED] plan to get rid of lvm/full disk encryption question mtdew3q Linux - Software 3 12-01-2014 11:10 PM
Multiboot Full Disk Encryption Polarian Linux - General 1 07-12-2007 08:37 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration