[Tails-dev] LUKS update

Nachricht löschen

Nachricht beantworten
Autor: Jan Nielsen
Datum:  
To: tails-dev
Betreff: [Tails-dev] LUKS update
Hi all.

I propose that the next release of TAILS come shipped with cryptsetup
version 1.6. Currently, it comes with version 1.4.3 .

I ask this so that the default encryption cipher used by LUKS (when
performing FDE on a USB, for example) becomes aes-xts-plain64 instead of
the older, less secure aes-cbc-essiv cipher.

I am aware that this can be accomplished in version 1.4.3 of cryptsetup.
But an upgrade to the newest version would be greatly helpful in preserving
the encryption security in TAILS.