Do I Understand How to Create Detached LUKS Headers?

• nexus-documentation

  2 - -

I am currently working on a project that revolves around Linux and want to add support for detached LUKS headers. From my understanding the way that this works is that cryptsetup stores the headers in a separate place and then loads them in every time you dencrypt the hard disc. In other words, you can store the headers on a USB drive and then use said USB as a two factor decryption system. In order to achieve this I have the following steps here or here for explanations of each step. I have been researching how to do this for some time and have seen many methods used, but this is the one I settled on and I got it from, if I recall correctly, a guide on hardening Fedora Linux. Does anyone with more experience know if this is the best method or if there is a better more common method for doing this?

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project