Re: SSD encryption using cryptsetup
Milan Broz <[email protected]> Sat, 10 Oct 2020 19:48:25 +0200
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
On 10/10/2020 05:06, KRISHNAJA MENON wrote: > Setup details: > Machine 1: Ubuntu x86_64 > Machine 2: Linux-aarch64 (arm) > > 1. luksFormat an external SDDÂ on x86 using *aes-cbc-plain:ripemd160* on x86 machine This cipher specification is nonsense, plain IV does not take arguments and it will be rejected by a recent kernels. (Moreover, CBC with plain IV mode is insecure due to predictable IV.) Please *do* *not* change defaults if you do not understand security impact. If you want CBC mode (XTS mode is default for LUKS), use aes-cbc-essiv:sha256 (It should fail even in luksFormat, but you did not send neither debug output nor version related...) Milan _______________________________________________ dm-crypt mailing list [email protected] https://www.saout.de/mailman/listinfo/dm-crypt