From: Robert Nichols <rnicholsNOSPAM@comcast.net>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] Filling a disk with random data - question
Date: Tue, 18 Mar 2014 17:20:47 -0500 [thread overview]
Message-ID: <lgagrg$uu1$1@ger.gmane.org> (raw)
In-Reply-To: <20140318023351.GA20894@tansi.org>
On 03/17/2014 09:33 PM, Arno Wagner wrote:
> On Mon, Mar 17, 2014 at 19:55:05 CET, Cpp wrote:
>> # cryptsetup -c aes-xts-plain64 -h sha512 -s 512 -d /dev/urandom open
>> /dev/sda --type plain cryptroot
>
> Make ist easier on you, the defaults are really quite enough:
>
> # cryptsetup create -d /dev/urandom /dev/sda cryptroot
>
>> # dd if=/dev/zero of=/dev/mapper/cryptroot bs=4096
>
>> My question is are there any serious drawbacks of using this method in
>> place of the urandom one?
>
> None.
Glad to hear it, since I've been doing that all along. If you happen
to be doing this with an old cryptsetup, you want to select an IV
that does not repeat on a large volume. This, for example would be
a poor choice (from cryptsetup 1.1.3):
Default compiled-in device cipher parameters:
plain: aes-cbc-plain, Key: 256 bits, Password hashing: ripemd160
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
next prev parent reply other threads:[~2014-03-18 22:21 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-03-17 18:55 [dm-crypt] Filling a disk with random data - question Cpp
2014-03-17 23:17 ` .. ink ..
2014-03-18 2:33 ` Arno Wagner
2014-03-18 22:20 ` Robert Nichols [this message]
2014-03-18 23:41 ` [dm-crypt] Filling a disk with random data - use a hige bs= to speed it up Chris Drake
2014-04-10 15:15 ` [dm-crypt] Filling a disk with random data - question Arno Wagner
2014-04-10 15:50 ` .. ink ..
2014-04-10 16:09 ` Arno Wagner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='lgagrg$uu1$1@ger.gmane.org' \
--to=rnicholsnospam@comcast.net \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.