From: Matthias Schniedermeyer <ms@citd.de>
To: Xavier MONTILLET <xavierm02.net@gmail.com>
Cc: dm-crypt@saout.de
Subject: Re: [dm-crypt] Encrypting several disks with the same password + keyfile combinaison
Date: Tue, 15 Apr 2014 00:20:06 +0200 [thread overview]
Message-ID: <20140414222006.GA1691@citd.de> (raw)
In-Reply-To: <CAAMre_M9DKHtMSaschrAGVGYrTDrizU4FeNkMnqQmdFr5AMO9A@mail.gmail.com>
On 14.04.2014 21:24, Xavier MONTILLET wrote:
> Hi,
>
> - (b) Use LUKS (which I would prefer to avoid, if it doesn't comprimise the
> security, because it adds a weak spot against disk failure: the header)
Interesting point.
There are more "weak spots". Yyou even add one, but i guess adding two
is "too much"?
- Partition Table
- Superblock(s) of the filesystem(s)
- LVM
- There are or at least i think there are a few "critical" blocks in
each filesystem that i think will ruin your day if damaged.
- ...
Personally i unintentionaly did away with one (Partition Table) and
don't use another (LVM), but that still leaves at least the
superblock(s) of the filesystem.
Btw. You can also use LUKS with a deattached header and/or backup the
header, so it's not weaker than the other weak spots.
--
Matthias
next prev parent reply other threads:[~2014-04-14 22:20 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-04-14 19:24 [dm-crypt] Encrypting several disks with the same password + keyfile combinaison Xavier MONTILLET
2014-04-14 22:20 ` Matthias Schniedermeyer [this message]
2014-04-15 9:52 ` Xavier MONTILLET
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140414222006.GA1691@citd.de \
--to=ms@citd.de \
--cc=dm-crypt@saout.de \
--cc=xavierm02.net@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.