[dm-crypt] Basic question about LUKS/cryptsetup

Arno Wagner arno at wagner.name
Fri Oct 19 19:38:18 CEST 2012


On Thu, Oct 18, 2012 at 10:38:34AM -0500, Gonzalez-Garay, Manuel L wrote:
> Dear dm-crypt.
> 
> Sorry of the previous email ,anyway I work in a university and the IT
> department is checking every laptop for disk level encryption, I am using
> fedora 17 with LUKS but they are asking me for a proof that the disk has
> been encrypted 

Interesting. It is actually not possible to proof that, except
by giving the key and algorithm and demonstrating that it 
decrypts to something meaningful.

But you could just give them a LUKS header dump. Maybe they
will panic and shut up.

> they want a copy of the key for Filevault and Bitlocker.  I

Tell them to stuff it? It is your laptop hence your 
responsibility and they have no business asking for any keys.
Also tell them that there is more in the world than Windows 
and Apple.

> am not sure if there are such files in my system or where to 
> look for the files.  Can you point me to such files?.

There are not. You could give them a LUKS header dump, although
without your passphrase that is completely worthless. Not that
you need to tell them that. 

Arno
-- 
Arno Wagner,    Dr. sc. techn., Dipl. Inform.,   Email: arno at wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
One of the painful things about our time is that those who feel certainty 
are stupid, and those with any imagination and understanding are filled 
with doubt and indecision. -- Bertrand Russell 


More information about the dm-crypt mailing list