Re: Security issue ... please could someone help !!!
Hi.
On Sun, Apr 05, 2020 at 09:03:00PM +0100, Bhasker C V wrote:
> I kept digging down and saw that anything below 32 bytes is not accepted
> (by cryptsetup --key-file option) but anything above 32 bytes is
> discarded.
cryptsetup(8), "-s" option.
> Does this mean that cryptsetup plain with --key-file uses
> only 32 bytes ?
Yes, assuming the defaults.
> Am I doing anything wrong ?
Probably no.
By default cryptsetup uses AES encryption algorithm with the key size of
256 bits. You're suppling your own key to cryptsetup, hence it chooses
just right amount of bits from it (32 bytes = 256 bits).
> If only 32 bytes are used, it is (in my opinion) not so much secure
> isnt it ?
It's sufficiently secure, unless you try to do something really wrong
(like storing a plain key somewhere), or generate your key predictably.
Reco
Reply to: