From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yBuj563tIiFZ for ; Fri, 25 Jan 2013 20:31:20 +0100 (CET) Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Fri, 25 Jan 2013 20:31:20 +0100 (CET) Received: from gatewagner.dyndns.org (84-74-164-49.dclient.hispeed.ch [84.74.164.49]) by v4.tansi.org (Postfix) with ESMTPA id E545B1404002 for ; Fri, 25 Jan 2013 20:31:19 +0100 (CET) Date: Fri, 25 Jan 2013 20:31:19 +0100 From: Arno Wagner Message-ID: <20130125193119.GA23010@tansi.org> References: <20130124133441.GA8986@li61-168.members.linode.com> <20130124154251.GA13496@tansi.org> <20130124173624.GA15994@li61-168.members.linode.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20130124173624.GA15994@li61-168.members.linode.com> Subject: Re: [dm-crypt] --key-file size... List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On Thu, Jan 24, 2013 at 05:36:24PM +0000, Andrea wrote: > On Thu, Jan 24, 2013 at 04:42:51PM +0100, Arno Wagner wrote: > > Hi Arno, > and thanks a lot for your quick reply. > > > You are using plain dm-crypt (you really should use LUKS). > > I really like the "stealth" mode of plain. With LUKS header they can see > there's encrypted stuff. The only stealthy thing between "plain" and LUKS is that with LUKS there is an ambiguity between encrypted and "secure wiped", but that is all. > Anyway, maybe I should just set an offset. > > > So nothing wrong. > > Yep. Is there a way for me to have a big key? Using LUKS? LoopaesOpen? > Does it worth it? No. A good passphrase is enough. > I mean, I am a little bit paranoid about leaking our patient info (they > are about AIDS and so on). Go LUKS. More secure anyways. And you can have a recovery-passphrase in a sealed envelope in your safe. > Thanks a lot for your time, > A. No problem. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- One of the painful things about our time is that those who feel certainty are stupid, and those with any imagination and understanding are filled with doubt and indecision. -- Bertrand Russell