1 |
-----BEGIN PGP SIGNED MESSAGE----- |
2 |
Hash: SHA1 |
3 |
|
4 |
On 04/29/2014 03:58 PM, Walter Dnes wrote: |
5 |
> On Tue, Apr 29, 2014 at 01:32:46PM -0400, Rick "Zero_Chaos" Farina wrote |
6 |
> |
7 |
>> On 04/29/2014 12:27 PM, Walter Dnes wrote: |
8 |
>>> |
9 |
>>> Another couple of things I didn't realize. According to |
10 |
>>> https://wiki.gentoo.org/wiki/Dm-crypt I have to build in support for the |
11 |
>>> crypt target in the kernel. It also suggests |
12 |
>>> <*> SHA224 and SHA256 digest algorithm |
13 |
>>> |
14 |
>>> Any comments on their strength? I'm not worried about the NSA or CSIS |
15 |
>>> as much as opportunistic criminals. |
16 |
>> |
17 |
>> I use whirlpool. Why you ask? It sounds cool! Also it supported 512bit |
18 |
>> which seems nice. |
19 |
> |
20 |
> Sorry to pester you, but I'm beginning to realize just how much is |
21 |
> involved here that I'm a newbie at. Two more questions... |
22 |
> |
23 |
> 1) If multiple encryption algorithms are enabled in the kernel, how does |
24 |
> the system decide which one to use? |
25 |
|
26 |
dmcrypt/luks stores the proper encryption algorithm, as long as the |
27 |
correct one is supported you are all set. |
28 |
> |
29 |
> 2) I assume that if I want to use the same encrypted USB key on 2 or |
30 |
> more machines, then the kernels of all the machines must be built with |
31 |
> the same encryption algorithms? |
32 |
> |
33 |
No, but they do both need the encryption and hashing algorithm you are |
34 |
using. |
35 |
|
36 |
- -Zero |
37 |
-----BEGIN PGP SIGNATURE----- |
38 |
Version: GnuPG v2.0.22 (GNU/Linux) |
39 |
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ |
40 |
|
41 |
iQIcBAEBAgAGBQJTYGTkAAoJEKXdFCfdEflKmd8QAIYHiSe6oPPDjHcbuzQBxqmf |
42 |
xCx0bdcs3vaHCgb8Nh0AZrckR4tgyedkk2OWyXVkPI29fQl5up1PLnSBqgePJQou |
43 |
oJT/q/kNXhFOoWVc0iNCWASoSjmv6X/F5JQGCK/kfJMR0FOM373JPx2iBk6Dhbxf |
44 |
FGepnQkDKGLSlm+BUjLfNPX161EC+EwEw5B29gtKZZpk9VlI7aeRDTPtjXQClB8g |
45 |
sdJA5h/1g21YX47gqvgQ3KKH7dJjav4l0eom+yO/WkhDAzySqtXl0OaGLg2vnqND |
46 |
OIy8sX3Dc6qwMr6h0G6o3Wdc7YpRlIPYuINv4HQFfl9l745/Cmv6SDBLF5BHpIg2 |
47 |
pXGOimwc/drSkzxjC9i8f2boa8piSAAE+YITykarVaJnlF8pqs+lB2fMt0kW34aH |
48 |
oFlzuPLZjb4Rdzq5MwypGfTumRKTa2zn6A9EdrvJugazY9b5WGtTet2Du8i5o7Xp |
49 |
z6bwS97+1GvwhybzKCk2BE+h1FQAaTQo0hBhCIKwxn5AHyL5VS2yA53Oz8c2yM8B |
50 |
xKfu96hwTBCIVSBXEWU1QM++vFRYhPuOtug4GgLixbXi7WEed2q3eUEDyb0I5Oba |
51 |
CJTrrAfl97wuL8RJrZyVVlXkcsHAqVeDtmT2IWeDU1CmAi58aXsDfRGDRoRHq7e/ |
52 |
a3/DHVGvebwUxEac8NgB |
53 |
=53C+ |
54 |
-----END PGP SIGNATURE----- |