Robert P. J. Day
2010-Feb-02 17:00 UTC
[CentOS] dm-crypt/LUKS the state of the art for block device encryption?
it's been a while since i've played with filesystem encryption so,
on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered
to be the state of the art WRT encryption? i remember other solutions
like loop-aes and others, but what's considered the gold standard
these days?
rday
--
=======================================================================Robert P.
J. Day Waterloo, Ontario, CANADA
Linux Consulting, Training and Kernel Pedantry.
Web page: http://crashcourse.ca
Twitter: http://twitter.com/rpjday
========================================================================
Joshua Baker-LePain
2010-Feb-02 17:21 UTC
[CentOS] dm-crypt/LUKS the state of the art for block device encryption?
On Tue, 2 Feb 2010 at 12:00pm, Robert P. J. Day wrote> it's been a while since i've played with filesystem encryption so, > on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered > to be the state of the art WRT encryption? i remember other solutions > like loop-aes and others, but what's considered the gold standard > these days?dm-crypt/LUKS is what the installer in Fedora sets up these days, so I'd say it's still the "standard" solution. -- Joshua Baker-LePain QB3 Shared Cluster Sysadmin UCSF
Peter Kjellstrom
2010-Feb-02 17:25 UTC
[CentOS] dm-crypt/LUKS the state of the art for block device encryption?
On Tuesday 02 February 2010, Robert P. J. Day wrote:> it's been a while since i've played with filesystem encryption so, > on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered > to be the state of the art WRT encryption? i remember other solutions > like loop-aes and others, but what's considered the gold standard > these days?Yes, dm-crypt/LUKS/ configured in /etc/crypttab is the "blessed" way afaik. /Peter -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part. URL: <http://lists.centos.org/pipermail/centos/attachments/20100202/669ef074/attachment-0001.sig>
Lucian @ lastdot.org
2010-Feb-02 18:39 UTC
[CentOS] dm-crypt/LUKS the state of the art for block device encryption?
On Tue, Feb 2, 2010 at 5:00 PM, Robert P. J. Day <rpjday at crashcourse.ca> wrote:> > ?it's been a while since i've played with filesystem encryption so, > on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered > to be the state of the art WRT encryption? ?i remember other solutions > like loop-aes and others, but what's considered the gold standard > these days? > > rday > -- > > =======================================================================> Robert P. J. Day ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Waterloo, Ontario, CANADA > > ? ? ? ? ? ?Linux Consulting, Training and Kernel Pedantry. > > Web page: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?http://crashcourse.ca > Twitter: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? http://twitter.com/rpjday > =======================================================================> _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >Got one Centos PC and one Mandriva laptop running luks for a couple of years, work great, never had a problem!