Can luks in fedora 10 , encrypt using a combination of keys and passphrase

Huzaifa Sidhpurwala huzaifas at redhat.com
Mon Dec 8 08:40:58 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bruno Wolff III wrote:
> On Mon, Dec 08, 2008 at 13:01:03 +0530,
>   Huzaifa Sidhpurwala <huzaifas at redhat.com> wrote:
>> But i am looking at a scenario in which i can have the encryption done
>> with passphrase + a public key,
>> i dont want to depend upon just the passphrase to decrypt stuff
> 
> I don't think Fedora's boot environment supports dongles for use with luks if
> that is what you want to do.
> I think luks supports some different ways to get the key from a key slot.
> I remember seeing an option for supplying a key file instead of a password.
> I haven't played with that though and haven't looked at the luks documentation
> for a while. It may be that there are some other options.
> The home page for luks has some low level details on the data structures
> for the key slots and the like.
> You might also find some useful information in the man page for cryptsetup.
Yep,
I am wondering if i can have one slot filled by a passphrase and the
second one by a key, do you know if that is possible?

- --
Regards,
Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas)


GnuPG Fingerprint:
3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org

iD8DBQFJPN2azHDc8tpb2uURAusBAJsF32BNT0BVHCus54WFCtVyHJmRNgCeNcNY
LxIOzEsO+G1LMuL60VACP3w=
=YAeE
-----END PGP SIGNATURE-----




More information about the devel mailing list