Can luks in fedora 10 , encrypt using a combination of keys and passphrase
Huzaifa Sidhpurwala
huzaifas at redhat.com
Mon Dec 8 08:40:58 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Bruno Wolff III wrote:
> On Mon, Dec 08, 2008 at 13:01:03 +0530,
> Huzaifa Sidhpurwala <huzaifas at redhat.com> wrote:
>> But i am looking at a scenario in which i can have the encryption done
>> with passphrase + a public key,
>> i dont want to depend upon just the passphrase to decrypt stuff
>
> I don't think Fedora's boot environment supports dongles for use with luks if
> that is what you want to do.
> I think luks supports some different ways to get the key from a key slot.
> I remember seeing an option for supplying a key file instead of a password.
> I haven't played with that though and haven't looked at the luks documentation
> for a while. It may be that there are some other options.
> The home page for luks has some low level details on the data structures
> for the key slots and the like.
> You might also find some useful information in the man page for cryptsetup.
Yep,
I am wondering if i can have one slot filled by a passphrase and the
second one by a key, do you know if that is possible?
- --
Regards,
Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas)
GnuPG Fingerprint:
3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org
iD8DBQFJPN2azHDc8tpb2uURAusBAJsF32BNT0BVHCus54WFCtVyHJmRNgCeNcNY
LxIOzEsO+G1LMuL60VACP3w=
=YAeE
-----END PGP SIGNATURE-----
More information about the devel
mailing list