# Disk Encryption

> Report disk encryption configuration - LUKS/dm-crypt volumes, cipher and key size, swap encryption, and unencrypted volumes. Use when asked whether disks or swap are encrypted.

- Skill: `open-edge-platform/disk-encryption` (Agent Skill)
- Install (CLI): `npx skillmds@latest add open-edge-platform/disk-encryption`
- Raw SKILL.md: https://api.skillmd.com/api/skills/open-edge-platform/disk-encryption/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: open-edge-platform (https://skillmd.com/u/open-edge-platform)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/open-edge-platform/disk-encryption

---


# Disk Encryption Configuration Skill

## Purpose

This skill reports the current disk encryption configuration on the target system.

## What to Report

- Encrypted volumes and their mount points
- Encryption method (LUKS, LUKS2, dm-crypt)
- Cipher and key size in use
- Swap encryption status
- Unencrypted volumes

## Commands

### List Block Devices

```bash
lsblk -o NAME,SIZE,TYPE,FSTYPE,MOUNTPOINT
```

### Check for LUKS Volumes

```bash
# List active encrypted mappings
ls -la /dev/mapper/

# Check dm-crypt targets
sudo dmsetup table --target crypt
```

### Get LUKS Details

```bash
# For a specific LUKS device
sudo cryptsetup luksDump /dev/sdXn
```

**Key fields to report:**
- Version (LUKS1/LUKS2)
- Cipher (e.g., aes-xts-plain64)
- Key size (e.g., 512 bits)

### Check Swap Encryption

```bash
swapon --show
cat /etc/crypttab | grep swap
```

## Output Format

```
DISK ENCRYPTION
  Encrypted Volumes:
    /dev/nvme0n1p3: LUKS2 (aes-xts-plain64, 512-bit) → /
    /dev/nvme0n1p4: LUKS2 (aes-xts-plain64, 512-bit) → /home
  Swap: Encrypted / Not Encrypted / No Swap
  Unencrypted Volumes:
    /dev/nvme0n1p1: EFI System Partition (expected)
```

## Dependencies

- `cryptsetup` package
- `dmsetup` utility
- `lsblk` utility
- Root/sudo access for LUKS details