Question about journal integrity / encryption
LRS <[email protected]> Sun, 3 Dec 2023 15:31:09 +0100
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <CAFKOM5mU9M2qdfyU4sOYgfJe4anQ+uB80Wcs3GYRbD7L0=av4w@mail.gmail.com> |
I tried to create a volume with the following command:
cryptsetup luksFormat --type luks2 /dev/sdb --cipher aes-xts-plain64
--integrity hmac-sha256
If I see the json header of Luks2 i see the following part:
"integrity": {
"type": "hmac(sha256)",
"journal_encryption": "none",
"journal_integrity": "none"
}
}
in which I understand that the journal is not encrypted, isn't this a
security issue? Is it possible to encrypt it somehow?