[dm-crypt] Cascading encryption how-to?
fb1729 at posteo.de
Wed Jan 22 14:31:41 CET 2014
I also found this
On 22.01.2014 00:56, Claudio Moretti wrote:
> (sorry, hit the wrong button)
> It was proposed in a brainstorming session in 2008, but AFAIK it's never been
> I also found this in which Milan said it's possible by creating LUKS over a
> LUKS device, but it's hell in terms of performance and you need to open every
> single device by itself (e.g. for aes-serpent-twofish you'd have to issue 3
> separate luksOpen commands).
> Since it creates performance issues, it might be best for you to create a regular
> LUKS device for - say your root filesystem and then, if you need it and your OS
> supports it, you can try
> a) using /etc/crypttab to "luksOpen" a part of that already encrypted partition (I
> haven't tried, but it might be possible), or
> b) use Truecrypt to unlock encrypted files you keep somewhere.
>  http://code.google.com/p/cryptsetup/wiki/LUKSSpec20BrainStorming#Cascade_Ciphers
>  http://comments.gmane.org/gmane.linux.kernel.device-mapper.dm-crypt/3020
> On Tue, Jan 21, 2014 at 11:50 PM, Claudio Moretti <flyingstar16 at gmail.com
> <mailto:flyingstar16 at gmail.com>> wrote:
> It was proposed in a brainstorming session
> On Tue, Jan 21, 2014 at 8:59 PM, Falko <fb1729 at posteo.de
> <mailto:fb1729 at posteo.de>> wrote:
> Hey there,
> I was wondering how I set up cascading encryption like in Truecrypt (e.g.
> aes-twofish or even twofish-serpent-aes...). I tried this: cryptsetup -v -c
> serpent-twofish-xts-plain64 -s 512 -h sha512 --verify-passphrase -y
> luksFormat /dev/sdx which, of course, didn't work :o). I couldn't find
> anything in
> the man or internet either - only that it should be possible :o).
> Kind regards
> dm-crypt mailing list
> dm-crypt at saout.de <mailto:dm-crypt at saout.de>
More information about the dm-crypt