Re: LUKS Question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hey Rense,

On 08/07/2008 Rense Buijen wrote:
> I have encrypted my drive with dm-crypt and Luks.
> Now what I would like to have is that the volume can only be unlocked with
> both a password AND a key.
> So far I have only been able to use a passphrase or just a key, I wonder if
> it is possible to use both.

The simple answer is: encrypt your key with some other encryption
software, like openssl or gnupg.

cryptsetup has no built-in feature to combine password and keyfile.
You'll have to implement it on your own by using a keyfile for the LUKS
encryption, and encrypting that keyfile for additional security with
something else, for example openssl or gnupg.

Which distribution do you use? In debian we do have a wrapper around
cryptsetup (cryptdisks) which supports keyscripts to be executed to
make the keyfile for your LUKS/dm-crypt device available.

greetings,
 jonas

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux