Re: SSD encryption using cryptsetup

Thank you for the clarification.
For some reason luksFormat was successful and I was able to encrypt the
disk using plain cbc. The format command passed without errors on both x86
and aarch64 without issues and I was able to feed a password. Also checked
isluKsdevice and luksDump, both were successful.
I will retry aes-cbc-essiv:sha256 and update. Will also share logs.

Thanks

On Sat, Oct 10, 2020, 10:48 AM Milan Broz <[email protected]> wrote:

> On 10/10/2020 05:06, KRISHNAJA MENON wrote:
> > Setup details:
> > Machine 1: Ubuntu x86_64
> > Machine 2: Linux-aarch64 (arm)
> >
> > 1. luksFormat an external SDD on x86 using *aes-cbc-plain:ripemd160* on
> x86 machine
>
> This cipher specification is nonsense, plain IV does not take arguments
> and it will
> be rejected by a recent kernels.
> (Moreover, CBC with plain IV mode is insecure due to predictable IV.)
>
> Please *do* *not* change defaults if you do not understand security impact.
> If you want CBC mode (XTS mode is default for LUKS), use
> aes-cbc-essiv:sha256
>
> (It should fail even in luksFormat, but you did not send neither debug
> output nor version related...)
>
> Milan
>

_______________________________________________
dm-crypt mailing list
[email protected]
https://www.saout.de/mailman/listinfo/dm-crypt