4 ms·
I have to re-enter my passphrase on my LUKS encrypted laptop when resuming from hibernation. Does anybody know if LUKS (which uses cryptsetup/dm-crypt) is safer
by drcube 14y ago
I have to re-enter my passphrase on my LUKS encrypted laptop when resuming from hibernation. Does anybody know if LUKS (which uses cryptsetup/dm-crypt) is safer in this regard?
- dietrichepp 14y agoI believe so, if configured correctly, but LUKS always gives you enough rope to shoot yourself in the foot, so to speak.
- yungchin 14y agoIf you stick to a recommended partition layout, the swap partition (which will contain the hibernation image) should be contained in the LUKS partition, so yes, that's safe from this type of attack.
- drcube 14y agoYeah, my swap partition is encrypted. The only thing that isn't is a small /boot partition. I figured as much, but I would have figured TrueCrypt and the like would be the same way. Being a relative novice with encryption, I just wanted to clarify. Thanks.