Re: LUKS master key generation and keyfiles

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



At Tue, 19 Dec 2006 11:04:32 +0100,
Peter Palensky <palensky@xxxxxxxxxxxxxxxx> wrote:

> reading
> http://www.linux-magazine.com/issue/61/Hard_Disk_Encryption_DM-Crypt_LUKS_cryptsetup.pdf
> (especially figure 2) and
> http://luks.endorphin.org/LUKS-on-disk-format.pdf 

See Page 8, Figure 3, second line.
masterKey = generate random vector.

> i did not really find out how the master key is generated, when a keyfile is 
> used a'la 'cryptsetup luksFormat blockdev keyfile'.
> 
> is the initial keyfile the master key or is it used to derive the master key 
> or is - as i hope - the master key always a random number?

The master key is always random. The keyfile is used as if it was the
user password entered via keyboard. A few distinctions apply, such as
reading control characters like \0 \n is allowed for binary files.

> Peter Palensky
> Vienna University of Technology
> Institute of Computer Technology
> http://www.ict.tuwien.ac.at

Hello college :)
-- 
Fruhwirth Clemens - http://clemens.endorphin.org 
for robots: sp4mtrap@xxxxxxxxxxxxx

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux