It's soooo easy to \"misplace\" your removable drive, so encrypting it is a good way to help protect your data should it be lost :)<\/p>\n
In this example, I will be using a USB2 2Gb flash drive.<\/p>\n
The first port of call is to ensure you have the DEVICE_MAPPER driver compiled into the kernel.\u00a0 If you're using a binary distro, this almost certainly is already present.<\/p>\n
Device Drivers ->
\nMultiple devices driver support (RAID and LVM) ->
\nDevice mapper support
\nCrypt target support<\/p>\n
Also ensure you have compiled the required encryption...<\/p>\n
Cryptographic API -> (both options below are the default encryption used)
\nAES cipher algorithms (x86_64)\u00a0 <---- only available on 64bit OS
\nAES cipher algorithms (AES-NI)<\/p>\n
Now insert your drive then run the following commands:<\/p>\n
cryptsetup -y luksFormat \/dev\/sdX# (whatever your node is)
\ncryptsetup luksOpen \/dev\/sdX# <name>\u00a0 <-- this opens the encrypted device ready for mounting.\u00a0 The new device will now exist under \/dev\/mapper\/<name>
\nmke2fs -j -L <name> \/dev\/mapper\/<name>\u00a0 <-- formats the partition
\ncryptsetup luksClose \/dev\/mapper\/<name>\u00a0 <-- unmounts the encryption<\/p>\n
You can now unmount the drive and test it by re-inserting it.\u00a0 Your GUI should<\/strong> prompt you for the passphrase if all has worked ok.<\/p>\n If you need to mount from the cli do the following:<\/p>\n cryptsetup luksOpen \/dev\/sdX# <name> To unmount from the cli do the following:<\/p>\n cryptsetup luksClose \/dev\/mapper\/<name> That's it... simple :)<\/p>\n","protected":false},"excerpt":{"rendered":" It's soooo easy to \"misplace\" your removable drive, so encrypting it is a good way to help protect your data should it be lost :) In this example, I will be using a USB2 2Gb flash drive. The first port of call is to ensure you have the DEVICE_MAPPER driver compiled into the kernel.\u00a0 If … Continue reading Simple File System Encryption<\/span>
\nmount \/dev\/mapper\/<name> \/mnt\/usb\/<\/p>\n
\numount \/dev\/mapper\/<name><\/p>\n