From: "Thomas Bächler" <thomas@archlinux.org>
To: dm-crypt@saout.de
Subject: [dm-crypt] [Feature request] Support for "raw" key slots
Date: Fri, 14 Aug 2009 09:36:09 +0200 [thread overview]
Message-ID: <h6345a$3mc$1@ger.gmane.org> (raw)
The iterated hashing process used in LUKS' key slots is useful for
(potentially weak) passphrases. However, it is useless if the key slot
is locked with a cryptographically strong key file (like a file created
from /dev/random).
Therefore I propose the addition of a "raw key slot" feature to LUKS,
where a key that has the exact length of the master key is simply XOR'ed
to the master key and saved in the key slot (after the usual striping of
course).
I don't see any obvious security implications with this feature. If
there are any, I'd be interested. Please consider this for a future LUKS
specification.
next reply other threads:[~2009-08-14 7:36 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-08-14 7:36 Thomas Bächler [this message]
2009-08-14 8:09 ` [dm-crypt] [Feature request] Support for "raw" key slots Roscoe
2009-08-14 10:50 ` Heinz Diehl
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='h6345a$3mc$1@ger.gmane.org' \
--to=thomas@archlinux.org \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.