[Tails-dev] LUKS update

Supprimer ce message

Répondre à ce message
Auteur: Jan Nielsen
Date:  
À: tails-dev
Sujet: [Tails-dev] LUKS update
Hi all.

I propose that the next release of TAILS come shipped with cryptsetup
version 1.6. Currently, it comes with version 1.4.3 .

I ask this so that the default encryption cipher used by LUKS (when
performing FDE on a USB, for example) becomes aes-xts-plain64 instead of
the older, less secure aes-cbc-essiv cipher.

I am aware that this can be accomplished in version 1.4.3 of cryptsetup.
But an upgrade to the newest version would be greatly helpful in preserving
the encryption security in TAILS.