All of lore.kernel.org
 help / color / mirror / Atom feed
From: Cristian KLEIN <cristiklein@gmail.com>
To: Roscoe <eocsor@gmail.com>
Cc: dm-crypt@saout.de
Subject: Re: [dm-crypt] yet another "lost my partition" message
Date: Fri, 15 Apr 2011 16:21:29 +0200	[thread overview]
Message-ID: <4DA85469.3080503@gmail.com> (raw)
In-Reply-To: <BANLkTinno4SB8H_TS7qPeSfQDEhehSGA_Q@mail.gmail.com>

On 15/04/2011 16:15, Roscoe wrote:
> On Fri, Apr 15, 2011 at 11:52 PM, Cristian KLEIN <cristiklein@gmail.com> wrote:
> ...
>> A posteriori, I cannot help wonder why such pretious information isn't
>> kept redundantly. Surely LUKS could have stored the header in 10 random
>> sectors with an easy-to-grep "HERE I AM" banner. Wouldn't this allow
>> users to recover the master-key (and part of the file-system) without
>> compromising security?
> ...
> 
> It's supposed to be fragile and easily destroyed, this is by design.

I think users expect it to be *secure*, i.e., if a laptop gets stolen in
an airport, the user has no worries. I'm not sure users appreciate
"fragile". Personally, this is not what I expect from full-disk encryption.

> Accidently running cryptsetup luksFormat is unfortunate, as is running
> mkfs or dd on the wrong device. Good thing for backups.

Still, mkfs and dd give you a second chance (see testdisk and friends).
Why not luksFormat?

Cristi.

  reply	other threads:[~2011-04-15 14:21 UTC|newest]

Thread overview: 22+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-04-12 20:13 [dm-crypt] yet another "lost my partition" message Hugo Melo
2011-04-13  1:10 ` Arno Wagner
2011-04-13 18:06   ` Hugo Melo
2011-04-15 13:52 ` Cristian KLEIN
2011-04-15 14:15   ` Roscoe
2011-04-15 14:21     ` Cristian KLEIN [this message]
2011-04-15 16:27       ` Arno Wagner
2011-04-15 16:18     ` Arno Wagner
2011-04-15 16:13   ` Arno Wagner
2011-04-15 19:37     ` Jonas Meurer
2011-04-15 21:58       ` Arno Wagner
2011-04-16 16:37         ` Cristian KLEIN
2011-04-16 17:13           ` Rick Moritz
2011-04-15 16:58   ` [dm-crypt] Bug Report to Ubuntu regarding dangerous installer Arno Wagner
2011-04-15 19:38     ` Claudio Moretti
2011-04-15 22:01       ` Arno Wagner
2011-04-16 11:06         ` Claudio Moretti
2011-04-16 16:18           ` Cristian KLEIN
2011-04-17  0:14             ` PsiStormYamato
2011-04-17  0:20             ` M Thomas Frederiksen
2011-04-17  1:53               ` Arno Wagner
2011-04-15 20:54     ` PsiStormYamato

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4DA85469.3080503@gmail.com \
    --to=cristiklein@gmail.com \
    --cc=dm-crypt@saout.de \
    --cc=eocsor@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.