Skip to main content
Information Security

Return to Question

Tweeted twitter.com/StackSecurity/status/678007501653176320
Formatting
Source Link
Mark
Mark
  • 34.8k
  • 9
  • 88
  • 139

I understand that a TrueCrypt volume may be encrypted with a password AND a keyfile.

As far as I can tell, A LUKS volume may use EITHER a password OR a keyfile, but not both simultaneously for the same user.

  • Can anyone confirm whether this is correct?
  • Can anyone offer an opinion on whether using a password-protected keyfile is better/worse/equivalent than the combination of a password and a keyfile?

Can anyone confirm whether this is correct?

Can anyone offer an opinion on whether using a password-protected keyfile is better/worse/equivalent than the combination of a password and a keyfile?

I understand that a TrueCrypt volume may be encrypted with a password AND a keyfile.

As far as I can tell, A LUKS volume may use EITHER a password OR a keyfile, but not both simultaneously for the same user.

  • Can anyone confirm whether this is correct?
  • Can anyone offer an opinion on whether using a password-protected keyfile is better/worse/equivalent than the combination of a password and a keyfile?

I understand that a TrueCrypt volume may be encrypted with a password AND a keyfile.

As far as I can tell, A LUKS volume may use EITHER a password OR a keyfile, but not both simultaneously for the same user.

Can anyone confirm whether this is correct?

Can anyone offer an opinion on whether using a password-protected keyfile is better/worse/equivalent than the combination of a password and a keyfile?

Source Link
SauceCode
SauceCode
  • 628
  • 7
  • 17

TrueCrypt LUKS keyfile and password

I understand that a TrueCrypt volume may be encrypted with a password AND a keyfile.

As far as I can tell, A LUKS volume may use EITHER a password OR a keyfile, but not both simultaneously for the same user.

  • Can anyone confirm whether this is correct?
  • Can anyone offer an opinion on whether using a password-protected keyfile is better/worse/equivalent than the combination of a password and a keyfile?