Add support for detached LUKS header to encrypt hook
Task Info (Flyspray) | |
---|---|
Opened By | Florian Wickert (float) |
Task ID | 42851 |
Type | Feature Request |
Project | Arch Linux |
Category | Packages: Core |
Version | None |
OS | All |
Opened | 2014-11-19 19:04:30 UTC |
Status | Assigned |
Assignee | Christian Hesse (eworm) |
Details
Since cryptsetup 1.4.0 there is an argument called --header that allows detached LUKS headers. This can be used for two-factor encryption and deniability.
The attached patch adds a new kernel command line argument called cryptheader which is implemented and used almost the same way as cryptkey is: cryptheader=::<header_file> It does not add detached header support to crypttab however.
This has been discussed in e.g. https://bbs.archlinux.org/viewtopic.php?pid=1475265
Attachments
0001-add-support-for-detached-LUKS-header-to-encrypt-hook.patch