Re: list of supported encryption options for LUKS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Sep 08, 2014 at 21:42:06 CEST, .. ink .. wrote:
> On Sun, Sep 7, 2014 at 12:59 PM, Milan Broz <gmazyland@xxxxxxxxx> wrote:
> 
> 
> 
> > But I still think that there should be only few strong predefined
> > combinations.
> >
> >
> The list of option i am going to support for LUKS volumes is listed below
> as taken from cryptsetup benchmark list.
> 
> First condition is for plain volumes,second condition for luks and the last
> one is for truecrypt.
> 
> https://github.com/mhogomchungu/zuluCrypt/blob/c99841c21a6edeea955106134fd54d5935f8e237/zuluCrypt-gui/createvolume.cpp#L238

I would add a warning about gcrypt (see FAQ 8.3) for all
variants with whirlpool. Some people may still use this with
the broken gcrypt implementation.

Apart from that, the list looks fine.

Side-question:
Are the multi-cipher variants like "twofish:aes.xts-plain64.256.ripemd160"
something you do yourself? How do you do them? Additional 
LUKS layers with the same passphrase set-up?

Arno
-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@xxxxxxxxxxx
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt




[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux