[dm-crypt] Few questions from a new user

Milan Broz gmazyland at gmail.com
Fri Jan 10 17:08:30 CET 2014


On 01/10/2014 03:31 PM, Arno Wagner wrote:
> If you look at the header specification linked here:
>   http://code.google.com/p/cryptsetup/wiki/Specification
> 
> in Figure 1 you find the cipher and mode for the actual disk 
> encryption, and the "hash-spec" which is the hash-function 
> used by PBKDF2. 

Just one more addition - specified hash algorithm (in hash-spec
header field) is also used in LUKS anti-forensic filter.

Also there using SHA1 causes no problem, AF solves different problem
there (split key into multiple sectors). See spec above as well.

Milan


More information about the dm-crypt mailing list