Apr 182023
 

Here’s an article from a French anarchist describing how his (encrypted) laptop was seized after he was arrested, and material from the encrypted partition has since been entered as evidence against him. His encryption password was supposedly greater than 20 characters and included a mixture of cases, numbers, and punctuation, so in the absence of any sort of opsec failures this implies that even relatively complex passwords can now be brute forced, and we should be transitioning to even more secure passphrases.Or does it? Let’s go into what LUKS is doing in the first place. The actual data is typically encrypted with AES, an extremely popular and well-tested encryption algorithm. AES has no known major weaknesses…

External feed Read More at the Source: https://mjg59.dreamwidth.org/66429.html

 2023-04-18  Comments Off on Planet Debian – PSA: upgrade your LUKS key derivation function
Apr 182023
 

Here’s an article from a French anarchist describing how his (encrypted) laptop was seized after he was arrested, and material from the encrypted partition has since been entered as evidence against him. His encryption password was supposedly greater than 20 characters and included a mixture of cases, numbers, and punctuation, so in the absence of any sort of opsec failures this implies that even relatively complex passwords can now be brute forced, and we should be transitioning to even more secure passphrases.Or does it? Let’s go into what LUKS is doing in the first place. The actual data is typically encrypted with AES, an extremely popular and well-tested encryption algorithm. AES has no known major weaknesses…

External feed Read More at the Source: https://mjg59.dreamwidth.org/66429.html

 2023-04-18  Comments Off on Planet Debian – Matthew Garrett: PSA: upgrade your LUKS key derivation function