Collaborate Disseminate
I wonder if it possible to encrypt an EFI system partition (ESP)?
I would like to set up a virtual machine (VirtualBox) using EFI as boot manager which is supported by the used OS (archlinux). Is there a way to encrypt the boot partition … Continue reading EFI: encrypt ESP
What is contained inside the LUKS header? I know, the header has size of 2MB. Also, cryptsetup supports “detached header”, where the header can be stored in a separate file.
Thus, for example, I can format luks device and specify detached… Continue reading What does LUKS header contain?
I am having a debate with several people regarding how much protection full disk encryption provides. dm-crypt is being used to encrypt data which is required by my company to be encrypted at rest. The Linux servers hosting the data resi… Continue reading Is full disk encryption on a server in a secure data center pointless?
I want to switch from using LUKS for full disk encryption to TRESOR. TRESOR tries to prevent cold boot attacks by storing the encryption key in the CPU’s registers. It uses the kernel’s crypto API for things like getting IVs … Continue reading Linux, TRESOR and XTS