2

My question in particular is:

Does using the same key multiple times ease bruteforcing the used keyfile or passphrase?

1
  • 1
    You understand that with LUKS that you aren't actually encrypting the volume with your passphrase, instead you are encrypting a block of data that actually has your volume key.
    – Zoredache
    Sep 2, 2015 at 18:14

1 Answer 1

3

LUKS's current default is AES-XTS. AES-XTS does not have significant chosen plain test attacks.

No it should not be an issue. The weak link is typically your password. Also for key generation consider using an option like PBKDF2 with SHA-512 with the highest number of iterations practical for you. This will increase the time needed to unlock. Try to make it a second or more instead of small fractions of a second. This makes it harder for the attacker to brute force test all possible keys. recommended-options-for-luks-cryptsetup

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .