Collaborate Disseminate
I have been researching LUKS vs TrueCrypt topics — my only concern is security, but most of the discussions I see focus around usability / interoperability .
I know TrueCrypt has a bunch of nice passphrase features — slow … Continue reading TrueCrypt VS LUKS Bruteforce Resilience
To use tails, I have always used a DVD, because of the fact I know it will not be tampered with, at least within reason. However there are endless reasons why a USB boot option would be faster, and in the current project I am building, it … Continue reading Encrypting Tails USB Boot Disk (Live)
It seems that one of the weak points in LUKs encryption is that the LUKs header can be a single point of failure if you do not create a backup header for it.
My question is: What methods of securing your backup LUKs header do you take to … Continue reading LUKs Header Backup Security
Linux, NetBSD, etc. can be installed with LUKS, so besides the /boot, all other FS will be encrypted. Probably the kernel needs to be booted before the password prompt gets to the user. The LUKS password
My question: Does i… Continue reading Does it makes sense to change the LUKS password in every 90 days?
Although this is closely related to the recently closed question Evil maids in the server room [closed], I believe that it’s more answerable.
I’d like to unlock LUKS volumes on remotely hosted servers, using initramfs with BusyBox, and Dr… Continue reading For remotely unlocking LUKS volumes via SSH, how can I verify integrity before sending passphrase?
Say I have two partitions on a Linux system, a root partition (/) and a /home partition. Both of them are encrypted with LUKS.
The /home partition needs only to be decrypted if / is unlocked and mounted. At boot time, I enter the passphra… Continue reading Is using decrypt_derived more secure than a keyfile?
I’m about to encrypt two of my hard drives using LUKS, since I can’t really do it myself I use the guide on the Arch Linux wiki (which can be found here). In an example in the guide the cipher specified is aes-xts-plain with a 512-bit key … Continue reading For LUKS: The most preferable and safest cipher?