Somewhat related to a previous question, is stacking encryption under and via file systems a good idea?

For example, for the device, and then eCryptfs or for the file system.

If it's not a good idea, why is it a bad idea?

  • The answer to your question is fundamentally the same as the answer to the previous question. Using one good cipher is enough, adding more won't help with security and will slow things down.
    – ztk
    Commented Aug 10, 2015 at 13:21
  • @ztk - it is different: the previous question is looking at it form a single user perspective. This question is looking at it from a system perspective (whereon, of course, there could be multiple users)
    – warren
    Commented Aug 10, 2015 at 15:17
  • Encrypting parts of the filesystem with veracypt will protect only those parts (opposed to the whole filesystem with dm-crypt), but it will enable you to decrypt them independently. The later can be useful in a multiuser scenario when the computer is shared between users and the 2 sessions are never used at the same time. If you are in this multiuser scenario, using dm-cypt will add value by better protecting your computer when turned off. Otherwise, you are better protected by only using dm-crypt. Commented Aug 10, 2015 at 16:16
  • 1
    @AnonymousCoward - can you expand that into a sourced answer?
    – warren
    Commented Aug 10, 2015 at 18:21


You must log in to answer this question.

Browse other questions tagged .