LUKS and quantum computing
Patrick Callaghan <[email protected]> Mon, 25 Nov 2024 22:13:17 +0000
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <PH7P220MB1325C03018B9E4F926B5127CED2E2@PH7P220MB1325.NAMP220.PROD.OUTLOOK.COM> |
If we use LUKS encryption with SHA-256 configured (i.e. the default), is this considered safe against attacks by quantum computers? I ask because NIST suggests SHA512 in general for quantum safe algorithms (see "old Q17" in https://csrc.nist.gov/projects/post-quantum-cryptography/faqs) and we want to be LUKS quantum safe now and for several years to come, even if no practical attacks currently exist. Note, the cipher we use is "aes-xts-plain64" so we have no question about this as AES with 256-bit keys is considered quantum safe. Thank you.