I am looking for strong cipher for LUKS, currently I am thinking about SHA512, but encryption is not my cup of tea, so could you give me your hints, what are you using for encryption?
10
-
3SHA512 is rather too one-wayish for a crypto cipher...– Hubert KarioJan 8, 2011 at 18:53
-
1What is your use case? What kind of data are you trying to protect, what are you trying to protect against, and are there any applicable legal/regulatory compliances involved?– Scott PackJan 8, 2011 at 19:26
-
2Ency, I don't know what country you are in, but in the US (and several others), a Court can order you to turn over your encryption keys and or passwords, and basically keep you in jail until you do. Just an FYI.– BenGCJan 8, 2011 at 19:55
-
1@zoredache: Since he is most likely trying to commit crimes (i.e. obstruct legal investigations and court orders) we probably shouldn't help him there either.– Scott PackJan 8, 2011 at 20:35
-
2@packs: You and everyone else has a right on privacy (or are you from china or kldr?) and that's what i want to have, no one is able to see may data without may permission.– EncyJan 8, 2011 at 21:29
|
Show 5 more comments
1 Answer
Go with the default unless you know what you're doing.
-
I know what I am doing, I am just not so good in cryptography, that is why i am asking ...– EncyJan 8, 2011 at 20:31
-
2I believe the default for LUKS is AES-CBC with a 256 bit key size. This is a pretty good all around choice. As mentioned unless you know more about cryptography than the developers of LUKS, staying with the default is probably a good choice.– user62491Jan 8, 2011 at 21:00
-
Cryptography is hard, really hard. The key strength, algorithm, use case, and cipher mode need to all fit together like a puzzle, or else the whole is weaker than the sum. Unless you have a strong understanding of all those parts, then the defaults are usually better. That being said, AES-CBC with a 256 bit key sounds reasonable from my understanding of them. Jan 9, 2011 at 15:50