encrypted hard drive laptop

Excuse me if not on topic ... Was somewhat bemused on looking through this article about trying to purchase a laptop with encryption. Partly because it mentions hardware aspects hitherto unknown to me. https://www.theguardian.com/technology/askjack/2019/apr/25/how-do-i-buy-a-la... Is this sort of thing easier with Linux?

It's very easy with Linux, and offered as part of most OS install processes (at least Debian and Red Hat variants). It's called LUKS https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup It works by having an unencrypted /boot partition (1GB on my laptop), and the rest of the file system is then in one or more encrypted partitions. And it's totally seamless. When the OS boots, you'll be prompted for the passphrase which you specified in the installation process. -- Simon On Thu, 25 Apr 2019, at 11:25 PM, Ian Young wrote:
Excuse me if not on topic ...
Was somewhat bemused on looking through this article about trying to purchase a laptop with encryption. Partly because it mentions hardware aspects hitherto unknown to me.
https://www.theguardian.com/technology/askjack/2019/apr/25/how-do-i-buy-a-la...
Is this sort of thing easier with Linux?

Is this sort of thing easier with Linux?
For encryption without having to know much about it, then using the TAILS<https://tails.boum.org/> product may be the easiest Linux solution. On the USB drive that you install TAILS on, it offers the ability to create a data persistence area. They claim<https://tails.boum.org/contribute/design/persistence/>, "The persistent data is stored using strong, well-known, Free Software, peer-reviewed encryption tools (dm-crypt and LUKS)". However they do have a few things they want to warn<https://tails.boum.org/doc/first_steps/persistence/warnings/index.en.html> you about. With the small physical size of USB drives these days, then, under duress, you could put it in your mouth and swallow it. This may result in some delay and reduce the enthusiasm of someone trying to decrypt your data ;-) === I notice with my Ubuntu Mate 18.04.2 if I open the Caja file manager and right-click on a folder then in the pop up menu there is the option to "Encrypt" the folder. I from what I vaguely recollect from looking into this home folder based encryption on Linux a while ago the meta-data of the encrypted files off the folder could still be obtained. Thus although someone might not know the passphrase and be able to decode your data, they could see the names of all your files. So it might be better to have file names like, "a_guide_to_growing_pansies" than "where_i_buried_the_gold_bars". There was also discussion<https://askubuntu.com/questions/1029249/how-to-encrypt-home-on-ubuntu-18-04> that the current form of home folder based encryption (fscrypt) was being phased out and its replacement (ecryptfs) had bugs and wasn't ready yet. The interim solution was to use volume based encryption. cheers, Ian.
participants (3)
-
Ian Stewart
-
Ian Young
-
Simon Green