I am looking for strong cipher for LUKS, currently I am thinking about SHA512, but encryption is not my cup of tea, so could you give me your hints, what are you using for encryption?

  • 3
    SHA512 is rather too one-wayish for a crypto cipher... Jan 8, 2011 at 18:53
  • 1
    What is your use case? What kind of data are you trying to protect, what are you trying to protect against, and are there any applicable legal/regulatory compliances involved?
    – Scott Pack
    Jan 8, 2011 at 19:26
  • 2
    Ency, I don't know what country you are in, but in the US (and several others), a Court can order you to turn over your encryption keys and or passwords, and basically keep you in jail until you do. Just an FYI.
    – BenGC
    Jan 8, 2011 at 19:55
  • 1
    @zoredache: Since he is most likely trying to commit crimes (i.e. obstruct legal investigations and court orders) we probably shouldn't help him there either.
    – Scott Pack
    Jan 8, 2011 at 20:35
  • 2
    @packs: You and everyone else has a right on privacy (or are you from china or kldr?) and that's what i want to have, no one is able to see may data without may permission.
    – Ency
    Jan 8, 2011 at 21:29

1 Answer 1


Go with the default unless you know what you're doing.

  • I know what I am doing, I am just not so good in cryptography, that is why i am asking ...
    – Ency
    Jan 8, 2011 at 20:31
  • 2
    I believe the default for LUKS is AES-CBC with a 256 bit key size. This is a pretty good all around choice. As mentioned unless you know more about cryptography than the developers of LUKS, staying with the default is probably a good choice.
    – user62491
    Jan 8, 2011 at 21:00
  • Cryptography is hard, really hard. The key strength, algorithm, use case, and cipher mode need to all fit together like a puzzle, or else the whole is weaker than the sum. Unless you have a strong understanding of all those parts, then the defaults are usually better. That being said, AES-CBC with a 256 bit key sounds reasonable from my understanding of them.
    – Scott Pack
    Jan 9, 2011 at 15:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .