Hardy encryption details

Can anyone point me to a site that has the details of the install time encryption used in Hardy?

I'd like to know:

• Is the swap partition encrypted?

• How can the password be changed after the installation?

Not sure on your password question, however, yes, the swap partition is encrypted, the only thing that isn't is the /boot partition which must remain unencrypted to be bootable.

For those of you who are using Hardy with encryption, how's it working for you? Is there any noticeable speed difference? I have a perfectly good unencrypted Hardy system (upgraded from Gutsy), but I think I'm going to start fresh with encrypted Hardy on a new drive.

Quote:

---

Originally Posted by michaelzap

For those of you who are using Hardy with encryption, how's it working for you? Is there any noticeable speed difference? I have a perfectly good unencrypted Hardy system (upgraded from Gutsy), but I think I'm going to start fresh with encrypted Hardy on a new drive.

---

no, not much speed difforence, (on my core duo laptop), if it's an older machine, there might be a problem.

make sure you get the Text Installer "Alternative" CD or the DVD to install using full disk encryption

Quote:

---

Originally Posted by update_manager

Is the swap partition encrypted?

---

yes

Quote:

---

Originally Posted by update_manager

How can the password be changed after the installation?

---

Yes, it can

I wrote this how-to, which is focused on intel Macbook Pros dual-booting ubuntu, but the instructions for the encryption should be the same.

I've noticed zero speed difference.

Quote:

---

Originally Posted by update_manager

How can the password be changed after the installation?

---

Code:

---

sudo cryptsetup luksAddKey /dev/sdX

---

You can have up to 10 slots of passwords or keyfiles and with luksAddKey you add new ones.... and with luksDeleteKey you remove existing ones.

Have a look at the cryptsetup man pages how to use those commands at fully extend.

Quote:

---

Originally Posted by hyper_ch

Code:

---

sudo cryptsetup luksAddKey /dev/sdX

---

You can have up to 10 slots of passwords or keyfiles and with luksAddKey you add new ones.... and with luksDeleteKey you remove existing ones.

Have a look at the cryptsetup man pages how to use those commands at fully extend.

---

Thanks!

If I wanted to take an existing mapping, I could boot into my current setup, then use:
cryptsetup reload luksAddKey

Does this sound right?

not sure what you mean

Quote:

---

Originally Posted by hyper_ch

not sure what you mean

---

Its not clear to me from the man page if cryptsetup can be used on mounted drives.

In other words - can I do a default install, boot into encrypted partition then make changes.