First page Back Continue Last page Graphics
cryptsetup-luks
LUKS (Linux Unified Key Setup) is an extension to cryptsetup available in a separate cryptsetup-luks package.
Adds a metadata block where the master key is stored.
Device can be unlocked by multiple passphrases stored in “key slots”. Unreadable mappings won't be set up.
Passphrases can be added, changed or removed.
An “anti-forensic splitter” hardens brute-force attacks on keys in the metadata by using huge numbers of iterations in the key generation