this post was submitted on 23 Jun 2023

1 points (100.0% liked)

Linux

5197 readers

34 users here now

A community for everything relating to the linux operating system

Also check out !linux_memes@programming.dev

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 1 year ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

1

PSA: Upgrade your LUKS PBKDF to Argon2id !! (tails.boum.org)

submitted 1 year ago by maltfield@lemmy.ca to c/linux@programming.dev

1 comments fedilink hide all child comments

TIL the French government may have broken encryption on a LUKS-encrypted laptop with a "greater than 20 character" password in April 2023.

https://nantes.indymedia.org/posts/87395/une-lettre-divan-enferme-a-la-prison-de-villepinte-perquisitions-et-disques-durs-dechiffres/

When upgrading TAILS today, I saw their announcement changing LUKS from PBKDF2 to Argon2id.

https://tails.boum.org/security/argon2id/index.en.html

The release announcement above has some interesting back-of-the-envelope calculations for the wall-time required to crack a master key from a LUKS keyslot with PBKDF2 vs Argon2id.

And they also link to Matthew Garrett's article, which describes how to manually upgrade your (non-TAILS) LUKS header to Argon2id.

https://mjg59.dreamwidth.org/66429.html

you are viewing a single comment's thread
view the rest of the comments

[–] maltfield@lemmy.ca 0 points 1 year ago

See also https://anarchistburecross.noblogs.org/post/2023/04/27/chiffrement-du-disque-dur-linux-mettez-a-niveau-votre-fonction-de-derivation-de-cle-luks/