From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Fri, 11 Feb 2011 14:42:36 +0100 (CET) Date: Fri, 11 Feb 2011 14:42:35 +0100 From: Arno Wagner Message-ID: <20110211134234.GA28853@tansi.org> References: <20110205065255.GB11953@tansi.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Subject: Re: [dm-crypt] cryptsetup FAQ montly posting 2/2011 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Roscoe Cc: dm-crypt@saout.de Hi Roscoe, ahem, no? I assume exactly 256 bits, which happens to be the default with current cryptsetup 1.2.0. Is there any reason why a significant number of people would have 512 bits or any other value than 256 bits? The only option I see is to manually specify a different cipher, but at least my kernel (2.6.37 with all crypto-options compiled in) does not have any ciphers with 512 bit key size. Hmm. Does some distro use XTS mode with 512 bit keys as default? Which one? If so, I will have to change some other answers as well, in particular "What does the on-disk structure of LUKS look like?". Arno On Fri, Feb 11, 2011 at 11:06:06PM +1100, Roscoe wrote: > Morning, > > In "How do I securely erase a LUKS (or other) partition?" it's > probably worth mentioning that you are assuming <=256 bit master keys. > Many folks out there will have 512 bit master keys. > > -- Roscoe > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt > -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier