3 ms·
>And if several people need to be able to boot a shared computer, they need to share the disk encryption password (which isn't winning any security awards). At
by ginko 5y ago
>And if several people need to be able to boot a shared computer, they need to share the disk encryption password (which isn't winning any security awards).
At least with LUKS you can have multiple passwords for unlocking a disk so you can have one master password and user password(s) for the same machine.
Having to enter two passwords doesn't seem like a big issue for high security HW like a CEO's laptop. In fact that's standard procedure at my company.
- sva_ 5y agoIf you use LUKS full disk encryption you can also just suspend it while logged in, so you only need to enter the LUKS password on resume.
- Sebb767 5y ago> At least with LUKS you can have multiple passwords for unlocking a disk Luks implements this by encrypting the actual key multiple times, once with each password. So if one person turns evil before you remove their password or a password is leaked, you can still consider the disk compromised.