[Question] Distinction responsibilities LUKS and dm-crypt
Surmont Jasper <[email protected]>
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <PR3P192MB1087C0EE38951D6391C3B1D5F1E19@PR3P192MB1087.EURP192.PROD.OUTLOOK.COM> |
Dear, keep in mind I’m fairly new to Linux kernel development and similar, so my question might sound stupid. Reading through the documentation of both dm-crypt and LUKS, I understand that LUKS is a format specification to allow FDE, and that dm-crypt is a dm target which allows encryption / decryption of writes / reads to the block device. However, I'm unsure about what each of these now exactly provides (ie what are the responsibilities). In the slides (look link at the bottom) that the author (Milan Broz) made, it mentions that LUKS2 can also provide integrity protection (hence making the encryption authenticated). From this, and also reading the Luks1 specification I think this is not possible in LUKS1. However, later in the slides it talks how dm-crypt allows for authenticated encryption. This is where I'm confused; do we assume we use LUKS2? I feel like I'm not really grasping the main function and responsibilities of both LUKS and dm-crypt. Thanks! Slides: https://archive.fosdem.org/2018/schedule/event/cryptsetup/attachments/slides/2506/export/events/attachments/cryptsetup/slides/2506/fosdem18_cryptsetup_aead.pdf Sincerely, Jasper Surmont