0

I have certain information on my drive that I don't want anyone (not even me ;) ) to gain access to. I read recently that Fedora only offers EAS 256 LUKS encryption. This just isn't secure enough for me. I want 256 or stronger for my entire drive.

Now I'm confused because on this site: http://docs.fedoraproject.org/en-US/Fedora/14/html/Security_Guide/sect-Security_Guide-LUKS_Disk_Encryption.html it says that Fedora only supports 128 - bit. Though here: How secure is Ubuntu's default full-disk encryption? it says that LUKS uses 256 - bit, or is this for Ubuntu only.

Is there a way that I can use 256 or stronger AES full disk encryption on Fedora?

closed as off-topic by schroeder, Xander, TildalWave, Mark, Gilles Nov 18 '14 at 23:35

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    Because this is a OS-specific configuration/use question, it might be better asked on superuser. – schroeder Nov 18 '14 at 18:15
  • @schroeder Unix&Linux looks even better. – user42178 Nov 18 '14 at 19:02
  • EAS 256 isn't good enough and you want 256 or stronger? Please at least re-read what you write. Oh, and 128 is good enough. – Gilles Nov 18 '14 at 23:35
1

When you say that 128 bits are not enough for you, and you really want 256 bits, then you are basically saying one of the two following things:

  1. Laws of physics do not apply to you.
  2. You do not understand what key size is, and you just want the biggest number, the cryptographic equivalent of painting your car in red to make it go faster.

Your choice.

See this question on more information on the subject.


As for your specific question, see the documentation and try for yourself with a toy example. If you use "-s 256" as parameter to cryptsetup and it does not blow up in your face, then you can rejoice in your huge key.

See also the contents of the /proc/crypto file on your machine; this will tell you which algorithms are supported by your machine, and with which key sizes (warning: key sizes in /proc/crypto are expressed in bytes, not bits).

  • Replace "Laws of physics do not apply to you." with "Laws of classical physics do not apply to you" and I agree with you. Otherwise, I disagree with your dismissal of 256-bit key length, because quantum physics brings us Grover's algorithm, and Grover's algorithm hints that we may someday need larger keys than 128-bit. – Jay Sullivan Aug 10 at 22:38

Not the answer you're looking for? Browse other questions tagged or ask your own question.