2 ms·

Generally speaking hard drive encryption protects against theft and not tampering. I.e. the idea is that if your laptop or NAS is "lost and found", then you wip

Generally speaking hard drive encryption protects against theft and not tampering. I.e. the idea is that if your laptop or NAS is "lost and found", then you wipe the drive and restore from backup, not continue to use the drive. - Since the protocol used here is broken the fix is to change the protocol - so keep in mind that... > The former reencryption operation (without the additional digest) is no longer supported (reencryption with the digest is not backward compatible). You need to finish in-progress reencryption before updating to new packages. The alternative approach is to perform a repair command from the updated package to recalculate reencryption digest and fix metadata. Just in case you were thinking about upgrading the software during re-encryption - don't.

zokier 5y ago
cryptsetup supports using AEAD modes for encryption, primarily using AEGIS-128 as algorithm. Some background information https://arxiv.org/abs/1807.00309 https://arxiv.org/abs/1807.00309 There is also old presentation, which explicitly refers to protecting against "returned disk" scenario: https://archive.fosdem.org/2018/schedule/event/cryptsetup/attachments/slides/2506/export/events/attachments/cryptsetup/slides/2506/fosdem18_cryptsetup_aead.pdf https://archive.fosdem.org/2018/schedule/event/cryptsetup/at...
sedatk 5y ago
> Just in case you were thinking about upgrading the software during re-encryption - don't. You'd expect such a critical software had necessary failsafe mechanisms around that.