Package ecryptfs-utils

The eCryptfs mount helper and support libraries

eCryptfs is a stacked cryptographic filesystem that ships in Linux
kernel versions 2.6.19 and above. This package provides the mount
helper and supporting libraries to perform key management and mount

Install ecryptfs-utils if you would like to mount eCryptfs.

General Commands (Section 1)
ecryptfs-add-passphrase is a utility to manually add a passphrase to the kernel keyring. If the --fnek option is specified, the filename encryption key...
This program will attempt to match encrypted filenames to their decrypted counterpart, and attempt to match decrypted filenames to their encrypted counterpart...
ecryptfs-generate-tpm-key is a utility to generate a sealing (storage) key bound to a specified set of PCRs values in the current TPM's PCR's.
ecryptfs-insert-wrapped-passphrase-into-keyring is a utility to manually unwrap a passphrase from a file, and insert the unwrapped passphrase into the kernel...
ecryptfs-mount-private is a wrapper script for the mount.ecryptfs_private utility that will interactively prompt for the user's login password, if necessary.
This utility is intended to help eCryptfs recover data from their encrypted home or encrypted private partitions. It is useful to run this from a LiveISO or a...
ecryptfs-rewrap-passphrase is a utility to change the wrapping passphrase on a wrapped passphrase file.
This script takes one or more files/directories/symlinks as arguments, moves each of them to a temporary file, and then moves them back to the original name...
ecryptfs-setup-private is a program that sets up a private cryptographic mountpoint for a non-root user. Be sure to properly escape your parameters according to...
This script will detect existing swap partitions or swap files, and encrypt them, using cryptsetup. Encrypted swap is essential to securing any system using...
This program will present statistics on encrypted eCryptfs file and its attributes.
ecryptfs-umount-private is a wrapper script for the umount.ecryptfs_private utility. It will unmount the user's private directory and clear any associated keys...
ecryptfs-unwrap-passphrase is a utility to unwrap an eCryptfs mount passphrase from file, using a specified wrapping passphrase, and display the decrypted...
Note that options are additive. ALL checks must pass in order for this program to exit 0. Any failing check will cause this program to exit non-zero.
ecryptfs-wrap-passphrase is a utility to wrap an eCryptfs mount passphrase, using a specified wrapping passphrase, and write the encrypted output to file.
mount.ecryptfs_private is a mount helper utility for non-root users to cryptographically mount a private directory, ~/Private by default. This program...
umount.ecryptfs_private is a mount helper utility for non-root users to unmount a cryptographically mounted private directory, ~/Private. If, and only if: - the...
Miscellanea (Section 7)
eCryptfs is a POSIX-compliant enterprise-class stacked cryptographic filesystem for Linux. It is derived from Erez Zadok's Cryptfs, implemented through the FiST...
System Administration (Section 8)
ecryptfsd is a userspace daemon that runs as the user performing file operations under the eCryptfs mount point. It services public key requests from the...
ecryptfs-manager is an application that manages eCryptfs objects such as keys. You can use ecryptfs-manager to ask key modules to generate new keys for you, for...
WARNING: Make a complete backup copy of the non-encrypted data to another system or external media. This script is dangerous and in case of an error, could...
mount.ecryptfs is eCryptfs mount helper. The mount utility will defer to the mount helper to perform various configuration tasks; use the -i option to bypass...
pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically...
umount.ecryptfs is an eCryptfs umount helper, that will also unlink keys from the keyring.