3 ms·
Not having encrypted drives is some kind of misfeature nowadays, especially for mobile devices. Fallbacks can be key escrow (i.e. put a printout or a physical
by jcynix 4y ago
Not having encrypted drives is some kind of misfeature nowadays, especially for mobile devices.
Fallbacks can be key escrow (i.e. put a printout or a physical key into a sealed envelope and deposit it at a family member, friend, or notary), and backups, encrypted with a different (or more than one) key.
https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup for example allows the use of multiple keys, so a backup could use the same (primary) key as your drive and some secondary key(s) to access the backup if the primary key is lost somehow. As I mentioned in another comment here, keys should have been physical features for a long time, but hardware vendors would had to standardize on a general implementation and as we know, they all like to "standardize" on exactly their way of doing things.