News for hackers. Stuff that matters.
Re:Authenticated Boot and Disk Encryption on Linux by BiteCode_dev on Thursday September 23, 2021 @07:57AM (#28627960)
Are other people experiencing too many corruption problems on encrypted disks?

I have a veracrypt drive, and I regularly have to run a scan and fix on it because it's very sensitive to power cut, brutal restart, etc.

Also, it's slow. I put my firefox conf folder in it, but it slows the browser down.

Once I went full encrypted disk, but one day corruption happened, and it stopped booting. So I went back.

Re:Authenticated Boot and Disk Encryption on Linux by amarshall on Thursday September 23, 2021 @08:56AM (#28628435)
Don’t generalize your problems with a specific software (Veracrypt) to all drive encryption software. Plenty of drive encryption solutions are fast, reliable, and resilient. (You could also be having a hardware problem exacerbated by adding an abstraction layer.)

I’ve used LUKS, GELI, ZFS encryption, FileVault, and BitLocker across numerous drives over the past decade (albeit in different individual proportions and timelines) with no corruption problems.

Re:Authenticated Boot and Disk Encryption on Linux by lathiat on Thursday September 23, 2021 @08:43AM (#28628310)
I’ve not used verycrypt, only normal Linux LUKS device mapper encryption, ZFS encryption and windows bitlocker full disk encryption with a paraphrase entered on boot (no tpm). But I haven’t had this problem with any of those.

I’d suggest either your SSD just loses data on power off which is a problem with some SSDs or it’s some veracrypt specific issue that I wouldn’t be familiar with.

Id encourage you to try out one of the above options.

Re:Authenticated Boot and Disk Encryption on Linux by withinboredom on Thursday September 23, 2021 @08:20AM (#28628121)
You probably have some fun disk caching turned on in the OS or your disk has a built in cache that it’s not properly flushing. I’ve seen this before with cheap SSDs.
Re:Authenticated Boot and Disk Encryption on Linux by BiteCode_dev on Thursday September 23, 2021 @08:21AM (#28628133)
Maybe, I don't know enough about this, but I've been using this veracrypt disk on 6 machines, now, and I have the problem with each of them.

Also, I don't have any problem with non encrypted data.

Re:Authenticated Boot and Disk Encryption on Linux by orthecreedence on Thursday September 23, 2021 @03:21PM (#28633945)
Maybe a dumb question, but are you on windows? Check that Defender isn't scanning every single time data is written to your veracrypt drive. When I was on windows, the most painful slowdowns were almost invariably caused by Windows Defender.
Re:Authenticated Boot and Disk Encryption on Linux by blablablub on Thursday September 23, 2021 @01:52PM (#28632631)
Looks like a veracrypt problem then.
Re:Authenticated Boot and Disk Encryption on Linux by theandrewbailey on Thursday September 23, 2021 @09:19AM (#28628690)
No. I run a server in my basement, and for the past 5+ years, every one of its drives have been LUKS encrypted, including external backup drives. I've had no issues with encryption (corruption, speed, or otherwise), only disk hardware failing outright.
Re:Authenticated Boot and Disk Encryption on Linux by BiteCode_dev on Thursday September 23, 2021 @11:25AM (#28630567)
Servers and consumer laptop are very different beast though, so not sure the comparison hold. You don't shut them off often, they don't go to sleep, rarely undergo shock, plane travel or forced shut down...
Re:Authenticated Boot and Disk Encryption on Linux by privacyxpert on Thursday September 23, 2021 @06:15PM (#28636280)
Friend, LUKS is reliable. LUKS doesn't just eat data in those edgecases you talk about, there would be tons of reports if that were the case. LUKS is used all over the place for non-server uses too.

I can count at least 3 devices that are all LUKS-encrypted that are used as consumer devices daily. I trip over the power cord, I let the battery die, I drop it, I fly regularly, etc, etc. Never once had a single issue.

In fact, the single time that I've had FS issues under Linux was running under Hyper-V but that's because of the slowly-being-uncovered serious issues w/ Hyper-V.

Re:Authenticated Boot and Disk Encryption on Linux by deckard1 on Thursday September 23, 2021 @02:51PM (#28633516)
Never had a problem with LUKS over a decade of usage.

In fact, I'm actually having the opposite issue: I have a drive that is failing and LUKS is still able to decrypt it by some miracle.

> Also, it's slow.

Modern CPUs have AES instructions built-in. I would check to make sure you're utilizing them. You should not see any slowdown when using encryption.

Re:Authenticated Boot and Disk Encryption on Linux by snassar on Thursday September 23, 2021 @08:23AM (#28628153)
The better solution to these kind of problems is having a backup concept with an implementation and regular testing of backups.

The encryption exposed a problem with your disks or system in general. Depending on what the problem was, the problem is still there but you are not seeing it. Now you have a possible problem and unencrypted files.

Re:Authenticated Boot and Disk Encryption on Linux by BiteCode_dev on Thursday September 23, 2021 @08:43AM (#28628314)
I have a backup, but this is not a solution. Only a crutch. I had those problems on several machines, including brand new ones.
Re:Authenticated Boot and Disk Encryption on Linux by vbezhenar on Thursday September 23, 2021 @09:31AM (#28628854)
I started using full disk encryption (except /boot) this year, so far no problems at all. I'm using ordinary luks on Fedora.