Collaborate Disseminate
I created test LUKs container in a file, the luksDump says
MK bits: 256
Payload offset: 4096
implying that the header is 4096*512 = 2MiB
but the file produced by
cryptsetup luksHeaderBackup –header-back… Continue reading cryptsetup luksHeaderBackup file smaller than Payload Offset?
I created test LUKs container in a file, the luksDump says
MK bits: 256
Payload offset: 4096
implying that the header is 4096*512 = 2MiB
but the file produced by
cryptsetup luksHeaderBackup –header-back… Continue reading cryptsetup luksHeaderBackup file smaller than Payload Offset?
Is it possible to prevent a root user (user space) from running dmsetup table –showkeys to dump the LUKS master key?
I know of the TRESOR patch which essentially prevents the key from persisting in memory, and for all purposes makes the … Continue reading Preventing LUKS key dump
I ask this because encrypting an hard drive using LUKS takes a few seconds while encrypting the same drive using Bitlocker takes several hours. Does that mean LUKS encryption is weaker?
These two FDE solutions are similar, but I noticed different executions speed: specially mounting a device it seems that Veracrypt takes more time decrypting it.
So I would like to compare it with LUKS analizing the header f… Continue reading Differences between LUKS and Veracrypt
I’m currently setting up a BitLocker equivalent using a TPM and LUKS. I’ve got the basics right and I’m able to measure the boot process and seal the FDE key using the TPM.
Every time the sensitive parts (firmware, bootloader, kernel) are… Continue reading Right way to use the TPM for full disk encryption
What is contained inside the LUKS header? I know, the header has size of 2MB. Also, cryptsetup supports “detached header”, where the header can be stored in a separate file.
Thus, for example, I can format luks device and specify detached… Continue reading What does LUKS header contain?
I have read in:
http://css.csail.mit.edu/6.858/2013/readings/bitlocker.pdf
that Bitlocker does not provide data integrity since it takes more space in the disk. The PDF says also that drive encryption systems do not offer integrity of th… Continue reading Does LUKS protect the filesystem integrity?
Let us say I have a volume encrypted under LUKS with a 512-bit key. That would mean there are 2 ^ 512 possible values which the key may be.
Now I need a passphrase which is at least as resistant to brute force as the actual 512-bit volum… Continue reading LUKS, how to make strongest possible and reasonable passphrase?
let’s say we have encrypted our drive with AES 256 XTS and the following Hash:
SHA1 with ~500k Iterations and a 20+ password
SHA512 with ~250k Iterations and the same 20+ password.
Let’s think of the best hardware and the fastest hardwa… Continue reading Brute Forcing LUKS Full Disk Encryption – Time?