TIL the French government may have broken encryption on a LUKS-encrypted laptop with a "greater than 20 character" password in April 2023.
When upgrading TAILS today, I saw their announcement changing LUKS from PBKDF2 to Argon2id.
The release announcement above has some interesting back-of-the-envelope calculations for the wall-time required to crack a master key from a LUKS keyslot with PBKDF2 vs Argon2id.
And they also link to Matthew Garrett's article, which describes how to manually upgrade your (non-TAILS) LUKS header to Argon2id.
4 Comments
redacted_user_name@sopuli.xyz · 3 pts · 3y
https://unix.stackexchange.com/questions/260533/how-to-determine-what-encryption-is-being-used-a-luks-partition
Use these methods to see which version of LUKS your volume is using. Make sure you are using version 2 or higher.
maltfield@lemmy.ca · 2 pts · 3y
afaik LUKS1 is fine. And AES is fine.
What matters is which KDF is used in your luks slots (which hold your AES master encryption key)
maltfield@lemmy.ca · 2 pts · 3y
See also https://anarchistburecross.noblogs.org/post/2023/04/27/chiffrement-du-disque-dur-linux-mettez-a-niveau-votre-fonction-de-derivation-de-cle-luks/