Re: [dm-crypt] cryptsetup FAQ montly posting 2/2011

[Arno Wagner <arno@wagner.name>]

Hi Roscoe,

ahem, no? I assume exactly 256 bits, which happens to be the 
default with current cryptsetup 1.2.0.

Is there any reason why a significant number of people would 
have 512 bits or any other value than 256 bits? The only
option I see is to manually specify a different cipher, 
but at least my kernel (2.6.37 with all crypto-options
compiled in) does not have any ciphers with 512 bit key size.

Hmm. Does some distro use XTS mode with 512 bit keys as
default? Which one?

If so, I will have to change some other answers as well,
in particular "What does the on-disk structure of LUKS 
look like?".

Arno



On Fri, Feb 11, 2011 at 11:06:06PM +1100, Roscoe wrote:
> Morning,
> 
> In "How do I securely erase a LUKS (or other) partition?" it's
> probably worth mentioning that you are assuming <=256 bit master keys.
> Many folks out there will have 512 bit master keys.
> 
> -- Roscoe
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
> 

-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier