News for hackers. Stuff that matters.

A comment on Decryption through LUKS2 reencryption crash recovery.

Re:Decryption through LUKS2 reencryption crash recovery by gray_-_wolf on Thursday January 27, 2022 @05:39PM (#30107989)
> The attack is not applicable to LUKS1 format, but the attacker can update metadata in place to LUKS2 format as an additional step.

First time I'm glad grub cannot boot LUKS2.

[ Parent | on HN ]
Re:Decryption through LUKS2 reencryption crash recovery by fernovus on Thursday January 27, 2022 @06:35PM (#30108623)
Grub doesn't support LUKS2 encrypting the boot partition with Grub config files inside, but it can decrypt a LUKS2 root partition
[ Parent | on HN ]
Re:Decryption through LUKS2 reencryption crash recovery by saladuh on Thursday January 27, 2022 @07:32PM (#30109143)
I thought grub2 does support this now?
[ Parent | on HN ]
Re:Decryption through LUKS2 reencryption crash recovery by beermonster on Friday January 28, 2022 @02:17AM (#30111603)
LUKS2 is supported with some know limitations [0]

Argon2id (cryptsetup default) and Argon2i PBKDFs are not supported, only PBKDF2 is.

grub-install does not support creating a core image that could be used for unlocking LUKS2.

[0] https://wiki.archlinux.org/title/GRUB#LUKS2

[ Parent | on HN ]