Re: Encrypting an External HDD

2015-04-18 Thread Celejar
On Fri, 17 Apr 2015 14:25:36 -0700 David Christensen wrote: > On 04/17/2015 12:41 PM, Reco wrote: ... > > [Perl's Math::Random::ISAAC::XS] doesn't seem to use kernel-based entropy > > at all. Thank > > you for pointing me out at it, now I know it so I avoid it. > > ISAAC is very useful when I

Re: Encrypting an External HDD

2015-04-17 Thread David Christensen
On 04/17/2015 12:41 PM, Reco wrote: And 'shred' uses /dev/urandom in turn: $ strace -e trace=file shred -s 100M - > /dev/null … open("/usr/lib/locale/locale-archive", O_RDONLY) = 3 open("/dev/urandom", O_RDONLY) = 3 Although, according to strace, 'shred' cheats and only reads 2k bytes fr

Re: Encrypting an External HDD

2015-04-17 Thread Reco
Hi. On Fri, 17 Apr 2015 12:08:31 -0700 David Christensen wrote: > 1. I use 'shred' when I want to fill a disk or partition with random > numbers. It is ~1.7 orders of magnitude faster than /etc/urandom. And 'shred' uses /dev/urandom in turn: $ strace -e trace=file shred -s 100M - > /dev/nu

Re: Encrypting an External HDD

2015-04-17 Thread David Christensen
I don't think it's quite this simple: On 04/16/2015 06:56 PM, Celejar wrote: > I don't think it's quite this simple: > 1) OpenSSl thinks /dev/urandom is good enough for crypto: > https://www.openssl.org/support/faq.html#USER1 > 2) Perl's Math::Random::Secure also thinks it's generally good enough

Re: Encrypting an External HDD

2015-04-16 Thread Celejar
On Wed, 15 Apr 2015 08:30:04 -0700 David Christensen wrote: ... > /dev/random is for cryptographically secure random numbers, such as for > cryptographic keys. It requires a source of entropy to operate, and > will block until entropy is available. Thus, on most desktop computers, > it is o

Re: Encrypting an External HDD

2015-04-16 Thread David Christensen
On 04/16/2015 12:31 PM, ken wrote: ... remembering that partitioning also detects and marks bad blocks, I was then wondering if this was done also by the writing of LUKS container alone. It is my understanding that the drive firmware is where "bad blocks" are detected and marked. I expect th

Re: Encrypting an External HDD

2015-04-16 Thread Henrique de Moraes Holschuh
On Thu, Apr 16, 2015, at 16:31, ken wrote: > After thinking about it, and remembering that partitioning also detects > and marks bad blocks, I was then wondering if this was done also by the > writing of LUKS container alone. Anyone know? The typical install will have the LUKS container (actua

Re: Encrypting an External HDD

2015-04-16 Thread ken
On 04/15/2015 12:33 PM, David Christensen wrote: On 04/15/2015 08:01 AM, ken wrote: What options or features does one get by putting the LUKS container in a partition rather than putting it on a raw drive? I am not aware of any technical advantages or disadvantages of LUKS on a raw drive vs. L

Re: Encrypting an External HDD

2015-04-16 Thread Frédéric Marchal
On Wednesday 15 April 2015 18:33:56, David Christensen wrote : > On 04/15/2015 08:01 AM, ken wrote: > > What options or features does one get by putting the LUKS container in a > > partition rather than putting it on a raw drive? > > I am not aware of any technical advantages or disadvantages of L

Re: Encrypting an External HDD

2015-04-15 Thread David Christensen
On 04/15/2015 08:01 AM, ken wrote: What options or features does one get by putting the LUKS container in a partition rather than putting it on a raw drive? I am not aware of any technical advantages or disadvantages of LUKS on a raw drive vs. LUKS on a partition. For me, it's more a matter o

Re: Encrypting an External HDD

2015-04-15 Thread Ivanov, Konstantin
You can try this guide: http://kaivanov.blogspot.com/2015/03/block-device-encryption-with-cryptsetup.html On Wed, Apr 15, 2015 at 4:53 AM, Stephen R Guglielmo wrote: > Hi list, > > I have a USB external HDD that I would like to encrypt with a > passphrase. After looking into filesystems, I deci

Re: Encrypting an External HDD

2015-04-15 Thread David Christensen
On 04/15/2015 05:17 AM, Frédéric Marchal wrote: I understand that filling the encrypted partition (/dev/mapper/backup2) with zeros is equivalent to filling the unencrypted partition (/dev/sdb1) with random data as explained by other procedures. I've found 'shred' to be the fastest way to fill a

Re: Encrypting an External HDD

2015-04-15 Thread ken
On 04/15/2015 10:50 AM, David Christensen wrote: On 04/15/2015 05:04 AM, Petter Adsen wrote: http://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/ That article shows how to create a LUKS container on the raw drive. I prefer creating a partition tabl

Re: Encrypting an External HDD

2015-04-15 Thread Petter Adsen
On Wed, 15 Apr 2015 07:50:50 -0700 David Christensen wrote: > On 04/15/2015 05:04 AM, Petter Adsen wrote: > > http://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/ > > That article shows how to create a LUKS container on the raw drive. > I prefer creati

Re: Encrypting an External HDD

2015-04-15 Thread David Christensen
On 04/15/2015 05:04 AM, Petter Adsen wrote: http://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/ That article shows how to create a LUKS container on the raw drive. I prefer creating a partition table, creating one large primary partition, and putt

Re: Encrypting an External HDD

2015-04-15 Thread Frédéric Marchal
On Wednesday 15 April 2015 13:53:20, Stephen R Guglielmo wrote : > Hi list, > > I have a USB external HDD that I would like to encrypt with a > passphrase. After looking into filesystems, I decided to go with Ext4. > What's the recommended way of encrypting a drive? Do I partition it > first, then

Re: Encrypting an External HDD

2015-04-15 Thread Petter Adsen
On Wed, 15 Apr 2015 07:53:20 -0400 Stephen R Guglielmo wrote: > Hi list, > > I have a USB external HDD that I would like to encrypt with a > passphrase. After looking into filesystems, I decided to go with Ext4. > What's the recommended way of encrypting a drive? Do I partition it > first, then

Re: encrypting an external HDD filesystem and GNOME3 support

2012-04-24 Thread Josep Llauradó
HI Jon, I've been using truecrypt (available for windows, mac and linux) for a while without problems. It works as a file inside a partiiton on any available system (lvm or not) and can be installed even using fat or other basic filesystems. The solutions uses a graphical interface, and can be sc