Is Fedora encryption safe?

Is Fedora encryption safe?

Other urls found in this thread:

gitlab.com/cryptsetup/cryptsetup/wikis/FrequentlyAskedQuestions#5-security-aspects
engadget.com/2016/06/24/fbi-no-warrant-hack-computer/
twitter.com/NSFWRedditVideo

what's "Fedora encryption"?

Encrypting your hat to make secure tips.

During install distro shows a box for the partition encryption.

i presume that's using dm-crypt, yes it's safe

>Not a pedo
>Encrypted drive
Choose one.

I'd guess it's DM-Crypt LUKS and it's probably fine, I'd also assume it uses aes-xts-plain64 with sha256, which is decent but it would be nice if it was sha512, also if you are autistic you'd want to make sure it was using /dev/urandom

but I have no idea

>Not a nudist
>You
Pick one

But user, my boss will fire me if I put the company's source code on a non-encrypted disk on my laptop.

If you're using encryption, I already know you're hiding child porn.

bls stop this meme, it was never funny

What are you going to do about it?

>I'd also assume it uses aes-xts-plain64 with sha256, which is decent but it would be nice if it was sha512

They just changed to sha256 in version 1.7.0, but there's pretty much no reason to use a different hash function at this point. See the section "5.20 LUKS is broken! It uses SHA-1!" of this document:
gitlab.com/cryptsetup/cryptsetup/wikis/FrequentlyAskedQuestions#5-security-aspects

The bigger problem is that it defaults to aes-xts 256 bit, which only provides 128 bits of security. That's been fine until now, but if your threat model requires keeping things secret for more than, say, 20 years, at which point a quantum computer will be able to run grovers algorithm to cut that number in half, you should probably use aes-xts 512 bit (giving 128 bits of PQ security).

>dm-crypt, yes it's safe

>Is Fedora encryption safe?

NO! the reason; ok someone invented encryption, e.g., des, aes and so on. Therefore they know how to break it. DUH!

I hope the feds pass laws forcing decryption or make a way to allow law enforcement only to bypass.

Yeah, that'll totally stop 'em... Since, you know, if the law says so, the criminals will all replace their current crypto software with the kind that can get them caught.

engadget.com/2016/06/24/fbi-no-warrant-hack-computer/
im not even american or a pedophile

...

that looks secure enough

I use encryption whenever I use linux just the option is available at install. I currently use windows, though, and I don't bother with it because it doesn't ask me if I want it during install. Your point is invalid. There's no reason not to use encryption when it's a default option.

You could set up bitlocker, it's like 2 clicks and a password.

>but muh backdoor
Sure it won't protect you from the NSA but it'll protect you from jamal if your computer gets stolen.