Talk:Full disk encryption secure boot: Difference between revisions

From Alpine Linux
m (Unsigned comment attribution.)
m (indeed.)
 
Line 8: Line 8:


<small><span class="autosigned">—&nbsp;Preceding [[Help:Signature|unsigned]] comment added by [[User:Vixalien|Vixalien]] ([[User talk:Vixalien|{{int:talkpagelinktext}}]] • [[Special:Contributions/Vixalien|{{int:contribslink}}]]) 17 February 2024‎</span></small>
<small><span class="autosigned">—&nbsp;Preceding [[Help:Signature|unsigned]] comment added by [[User:Vixalien|Vixalien]] ([[User talk:Vixalien|{{int:talkpagelinktext}}]] • [[Special:Contributions/Vixalien|{{int:contribslink}}]]) 17 February 2024‎</span></small>
:It would probably be worth removing the options that have been made default according to primary sources as-of 2.4.3, which is the version that the article is implied to target. &ndash;[[User:zcrayfish|zcrayfish]] <small>([[User talk:zcrayfish|talk]]•[[Special:Contributions/zcrayfish|contribs]]•[[Special:EmailUser/zcrayfish|send email]])</small> 02:12, 18 February 2024 (UTC)

Latest revision as of 02:12, 18 February 2024

> Using luks2 (unsupported by GRUB at the moment):

luks2 is now partially supported by GRUB.

> cryptsetup -v -c aes-xts-plain64 -s 512 --hash sha512 --pbkdf pbkdf2 --iter-time 1000 --use-random luksFormat /dev/nvme0n1p2

The options are too many and confusing, and most of them have been made default in cryptsetup 2.4.0, according to https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode.

— Preceding unsigned comment added by Vixalien (talkcontribs) 17 February 2024‎

It would probably be worth removing the options that have been made default according to primary sources as-of 2.4.3, which is the version that the article is implied to target. –zcrayfish (talkcontribssend email) 02:12, 18 February 2024 (UTC)