2

I am looking for strong cipher for LUKS, currently I am thinking about SHA512, but encryption is not my cup of tea, so could you give me your hints, what are you using for encryption?

  • 3
    SHA512 is rather too one-wayish for a crypto cipher... – Hubert Kario Jan 8 '11 at 18:53
  • 1
    What is your use case? What kind of data are you trying to protect, what are you trying to protect against, and are there any applicable legal/regulatory compliances involved? – Scott Pack Jan 8 '11 at 19:26
  • 2
    Ency, I don't know what country you are in, but in the US (and several others), a Court can order you to turn over your encryption keys and or passwords, and basically keep you in jail until you do. Just an FYI. – BenGC Jan 8 '11 at 19:55
  • 1
    @zoredache: Since he is most likely trying to commit crimes (i.e. obstruct legal investigations and court orders) we probably shouldn't help him there either. – Scott Pack Jan 8 '11 at 20:35
  • 2
    @packs: You and everyone else has a right on privacy (or are you from china or kldr?) and that's what i want to have, no one is able to see may data without may permission. – Ency Jan 8 '11 at 21:29
7

Go with the default unless you know what you're doing.

  • I know what I am doing, I am just not so good in cryptography, that is why i am asking ... – Ency Jan 8 '11 at 20:31
  • 2
    I believe the default for LUKS is AES-CBC with a 256 bit key size. This is a pretty good all around choice. As mentioned unless you know more about cryptography than the developers of LUKS, staying with the default is probably a good choice. – user62491 Jan 8 '11 at 21:00
  • Cryptography is hard, really hard. The key strength, algorithm, use case, and cipher mode need to all fit together like a puzzle, or else the whole is weaker than the sum. Unless you have a strong understanding of all those parts, then the defaults are usually better. That being said, AES-CBC with a 256 bit key sounds reasonable from my understanding of them. – Scott Pack Jan 9 '11 at 15:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.