4 ms·
LUKS supports detached headers, maybe this would be useful for your setup? https://wiki.archlinux.org/title/Dm-crypt/Specialties#Encrypted_system_using_a_detach
by gameoverhumans 3y ago
LUKS supports detached headers, maybe this would be useful for your setup? https://wiki.archlinux.org/title/Dm-crypt/Specialties#Encrypted_system_using_a_detached_LUKS_header https://wiki.archlinux.org/title/Dm-crypt/Specialties#Encryp...
Your approach sounds pretty cool, by the way. I've thought about such an approach in the past, and I've used it for some auxiliary computers under my control, but not for my daily driver. I have a Framework laptop and I could indeed use this approach in quite a stylish way, though: https://frame.work/de/en/products/storage-expansion-card?v=FRACCFBZ02 https://frame.work/de/en/products/storage-expansion-card?v=F...
- adrian_b 3y agoThanks for pointing to this LUKS feature. The last time when I have looked at LUKS was some years ago, when this feature did not exist yet. In my opinion, this is the only right way to do SSD/HDD encryption. The detached header allows plausible deniability and it avoids downgrading the strength of the encryption key to the strength of the passphrase. By using the detached header option, LUKS could be used exactly like in my custom setup.