[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] [tails] Crypto enforcement proposal

Hello,

I took a look on the persistant partition of tails :

# cryptsetup luksDump /dev/sdb2
[...]
Cipher name:       aes
Cipher mode:       cbc-essiv:sha256
Hash spec:         sha1
[...]
MK bits:           256
[...]

Even if it look secure, I think you could better do this :

[...]
Cipher name:       serpent
Cipher mode:       xts-essiv:sha256
Hash spec:         sha512
[...]
MK bits:           512
[...]

What do you think about that ?

HardKor
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk