So I've been stuck on this question for a very long time.

How do you use double encryption to encrypt a hard disk so that all of the following conditions are met:

  1. All data on the hard disk is encrypted.

  2. There are multiple users and each user has his own key to make the harddisk readable/writable. Think for example of a normal user and the administrator. (everyone can access any file though, no permissions needed)

  3. If a user forgets his key, a new key can be generated for him, with which he simply has access to the stored data.

  • $\begingroup$ What files are encrypted? Only inf user home dir or all directories on all mounted drives? $\endgroup$
    – mentallurg
    May 22, 2020 at 13:34
  • $\begingroup$ for simplicity, we are just talking about .txt files which are all encrypted @mentallurg $\endgroup$ May 22, 2020 at 14:11
  • $\begingroup$ I wouldn't call it simplicity. It is simple to encrypt the whole drive. But dealing with separate files is more complex. Also, the title of your question contradicts to your statement that your want to process separate files only. Please change the title and the text of the question, so that everyone understands that correctly. $\endgroup$
    – mentallurg
    May 22, 2020 at 15:05
  • $\begingroup$ @mentallurg im sorry im new to encrypting, will change it. Do you have an idea how to solve it? $\endgroup$ May 22, 2020 at 15:07
  • 1
    $\begingroup$ If the full disk encrypted than the root/administrator can enable all users to read/write. VeraCrypt - like many disk encryption utilities - provides multiple key slots to that each can be given to a user and all can mount. Is this enough? That is not related to Cryptography, rather superuser... $\endgroup$
    – kelalaka
    May 22, 2020 at 16:50


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.