Re: Two questions
Michael Kjörling <michael-/[email protected]>
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <bzq3zjbmwbcxtmv4zg9sw47w@localhost> |
On 13 Nov 2019 15:15 +0000, from [email protected]: > 2) Are there security implications of using a single detached header > with multiple encrypted volumes? Yes; it implies that the two volumes are encrypted using the same master key (as well as being accessible using the same set of passphrases), _and_ it makes it obvious that this is the case. Whether that's a problem _in practice_ is another matter. It's possible that in your scenario that's unproblematic, but it would be nearly impossible to tell from just a single-sentence question. For the general case, I would definitely very strongly suggest to have different headers, with different master keys, even if the passphrases are the same. -- Michael Kjörling • https://michael.kjorling.se • [email protected] “Remember when, on the Internet, nobody cared that you were a dog?” _______________________________________________ dm-crypt mailing list [email protected] https://www.saout.de/mailman/listinfo/dm-crypt