Privacy, Security, and OSINT Show

336 readers

1 users here now

Lemmy Community for fans of the Privacy Security and OSINT show podcast to talk about the latest episode and bounce ideas off of each other how they can improve their privacy, security, or OSINT knowledge. This is just a fan based community, and is no way connected to or involved with Michael Bazzell, Inteltechniques.com, or the Privacy, Security, & OSINT podcast.

founded 2 years ago

MODERATORS

[email protected]

PSA: Upgrade your LUKS PBKDF to Argon2id !! (tails.boum.org)

submitted 2 years ago by maltfield to c/[email protected]

3 comments fedilink hide all child comments

TIL the French government may have broken encryption on a LUKS-encrypted laptop with a "greater than 20 character" password in April 2023.

https://nantes.indymedia.org/posts/87395/une-lettre-divan-enferme-a-la-prison-de-villepinte-perquisitions-et-disques-durs-dechiffres/

When upgrading TAILS today, I saw their announcement changing LUKS from PBKDF2 to Argon2id.

https://tails.boum.org/security/argon2id/index.en.html

The release announcement above has some interesting back-of-the-envelope calculations for the wall-time required to crack a master key from a LUKS keyslot with PBKDF2 vs Argon2id.

And they also link to Matthew Garrett's article, which describes how to manually upgrade your (non-TAILS) LUKS header to Argon2id.

https://mjg59.dreamwidth.org/66429.html

top 3 comments

sorted by: hot top controversial new old

[–] [email protected] 3 points 2 years ago (1 children)

https://unix.stackexchange.com/questions/260533/how-to-determine-what-encryption-is-being-used-a-luks-partition

Use these methods to see which version of LUKS your volume is using. Make sure you are using version 2 or higher.

[–] maltfield 2 points 2 years ago* (last edited 2 years ago)

afaik LUKS1 is fine. And AES is fine.

What matters is which KDF is used in your luks slots (which hold your AES master encryption key)

[–] maltfield 2 points 2 years ago