Skip to main content
10 events
when toggle format what by license comment
Apr 26, 2016 at 20:43 history edited Thomas Dickey CC BY-SA 3.0
fix a typo
May 10, 2014 at 17:24 comment added xavierm02 @Gilles : I asked a new question there: crypto.stackexchange.com/questions/16109/…
May 10, 2014 at 14:32 history edited xavierm02 CC BY-SA 3.0
added 73 characters in body
May 9, 2014 at 22:29 comment added xavierm02 I want to protect all data at rest with a password and a keyfile and be able to back up the keyfile using secret sharing. This implies that I can't encrypt the keyfile with the password because otherwise, I would have to replace all the backups everytime I changed the password. The only other way to require both is to derive a key from both (atm using xor). And I have any tools I want available since I can just add hooks to make update-initramfs add things to the ramfs. Aside from the derivation method, there is no real choice, unless I want to mess with dm-crypt directly, and I don't.
May 9, 2014 at 17:57 comment added Gilles 'SO- stop being evil' Given what you've said in comments about wanting to feed a key to cryptsetup, I think you're barking up the wrong tree. You should carefully think about your security requirements (what are the risks? what are the attack vectors?) and infrastructure (when are you doing this — presumably in the boot process? what information and tools do you have available?) and ask one or more higher-level question about that.
May 9, 2014 at 1:35 vote accept xavierm02
May 9, 2014 at 0:19 answer added Gilles 'SO- stop being evil' timeline score: 5
May 8, 2014 at 23:00 history edited Gilles 'SO- stop being evil'
edited tags
May 8, 2014 at 22:08 answer added Joseph R. timeline score: 3
May 8, 2014 at 21:58 history asked xavierm02 CC BY-SA 3.0