Windows/Linux dual boot full disk encryption

disk-encryptiondual-bootencryptionwindows

I have an unencrypted Windows10/Manjaro dual boot on a 256Gb SSD, plus a 1Tb HDD, where I store most of my data.

The partitions are organized as following:

1Tb HDD :    
 |_ sda1 : exFAT partition, readable by both W$ and Linux

256 Gb SSD : 
 |_ sdb1 : EFI system boot partition
 |_ sdb2 : Microsoft reserved partition
 |_ sdb3 : NTFS Windows system partition
 |_ sdb4 : NTFS Windows recovery partition
 |_ sdb5 : ext4 / partition for Linux
 |_ sdb6 : ext4 /home partition for Linux
 |_ sdb7 : linux swap

The bootloader is GRUB, and allows me to choose between the two systems.

What I am looking for is a way to encrypt both hard drives, and decrypting them by entering a password before GRUB. Of course I would like to keep the existing partitions, the fact that both systems can read the contents of the 1Tb HDD, and not break GRUB (if possible)

I have already checked Veracrypt for windows and LUKS for Linux, but Veracrypt seems to break GRUB and encrypts Windows only, and LUKS is Linux only.

Best Answer

You will need to use different windows/linux system encryptions and then use a common data partition with veracrypt and possibly fat or ntfs (as far as i know there is no ext driver for windows anymore due to enforced driver signatures. NTFS is not the best choice for linux, but may have advantages in windows).

If you want to encrypt windows with veracrypt, you need to get it to be installed in the partition not the hard drive bootloader section and chainload it from grub.

Another option which may be easier is to FDE one system and put the other one (with or without FDE) in a VM.

Related Question