LUKS (Linux Unified Key Setup) is a disk-encryption specification.

learn more… | top users | synonyms

1
vote
3answers
237 views

About SHA1 in default Disk Encryption in Linux

Link to the Thread: Recommended options for LUKS (cryptsetup) I wonder what's the exact difference between SHA1 and SHA512. I know that SHA512 has a longer key but I've read that it doesn't matter ...
2
votes
1answer
161 views

access to mounted luks partition by non-root user

Recently I searched substitute for truecrypt and played a bit with cryptsetup. The steps I did: mkfs -t ext4 /dev/sdb1 sudo cryptsetup open --type luks /dev/sdb1 enc_vol sudo mount ...
3
votes
0answers
60 views

LUKS key not available immediately after 'cryptsetup luksFormat'

I'm trying to create a file that will serve as a LUKS filesystem, with cryptsetup 1.6.1 under Ubuntu 14.04 LTS. This is what I'm doing: $ dd if=/dev/zero of=rfs bs=1048576 count=4 $ sudo cryptsetup ...
2
votes
0answers
38 views
+100

Right way to use the TPM for full disk encryption

I'm currently setting up a BitLocker equivalent using a TPM and LUKS. I've got the basics right and I'm able to measure the boot process and seal the FDE key using the TPM. Every time the sensitive ...
1
vote
0answers
35 views

Would using an interation count greater than 1 with a random keyfile of length greater than the master key be of any benefit?

If I were to have a 4096-bit file of random data (/dev/random) used as a keyfile for LUKS, would there be any benefit to having a key iteration count higher than 1? My reasoning is that the attacker ...