Jump to content

Linux Unified Key Setup

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Ca$e (talk | contribs) at 17:55, 22 April 2022. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The Linux Unified Key Setup (LUKS) is a disk encryption specification created by Clemens Fruhwirth in 2004 and was originally intended for Linux.

While most disk encryption software implements different, incompatible, and undocumented formats[citation needed], LUKS implements a platform-independent standard on-disk format for use in various tools. This not only facilitates compatibility and interoperability among different programs, but also assures that they all implement password management in a secure and documented manner.[1]

The reference implementation for LUKS operates on Linux and is based on an enhanced version of cryptsetup, using dm-crypt as the disk encryption backend. Under Microsoft Windows, LUKS-encrypted disks can be used via the Windows Subsystem for Linux[2]. (Formerly, this was possible with LibreCrypt[3], which currently has fundamental security holes, and which succeeded FreeOTFE, formerly DoxBox.)

LUKS is designed to conform to the TKS1 secure key setup scheme.[4]

See also

References

  1. ^ Fruhwirth, Clemens (2018-01-20). "LUKS On-Disk Format Specification Version 1.2.3" (PDF). Retrieved 2021-09-23.
  2. ^ https://devblogs.microsoft.com/commandline/servicing-the-windows-subsystem-for-linux-wsl-2-linux-kernel/
  3. ^ https://github.com/t-d-k/LibreCrypt
  4. ^ Fruhwirth, Clemens (2004-07-15). "TKS1 – An anti-forensic, two level, and iterated key setup scheme" (PDF). Draft. Retrieved 2021-09-23.