| 1 |
On Tue, Apr 29, 2014 at 01:32:46PM -0400, Rick "Zero_Chaos" Farina wrote |
| 2 |
|
| 3 |
> On 04/29/2014 12:27 PM, Walter Dnes wrote: |
| 4 |
> > |
| 5 |
> > Another couple of things I didn't realize. According to |
| 6 |
> > https://wiki.gentoo.org/wiki/Dm-crypt I have to build in support for the |
| 7 |
> > crypt target in the kernel. It also suggests |
| 8 |
> > <*> SHA224 and SHA256 digest algorithm |
| 9 |
> > |
| 10 |
> > Any comments on their strength? I'm not worried about the NSA or CSIS |
| 11 |
> > as much as opportunistic criminals. |
| 12 |
> |
| 13 |
> I use whirlpool. Why you ask? It sounds cool! Also it supported 512bit |
| 14 |
> which seems nice. |
| 15 |
|
| 16 |
Sorry to pester you, but I'm beginning to realize just how much is |
| 17 |
involved here that I'm a newbie at. Two more questions... |
| 18 |
|
| 19 |
1) If multiple encryption algorithms are enabled in the kernel, how does |
| 20 |
the system decide which one to use? |
| 21 |
|
| 22 |
2) I assume that if I want to use the same encrypted USB key on 2 or |
| 23 |
more machines, then the kernels of all the machines must be built with |
| 24 |
the same encryption algorithms? |
| 25 |
|
| 26 |
-- |
| 27 |
Walter Dnes <waltdnes@××××××××.org> |
| 28 |
I don't run "desktop environments"; I run useful applications |
Archives