Comment on How safe is revoking a LUKS key on flash media?
solrize@lemmy.world 1 year ago
Use cryptsetup and it should handle key creation for you. I’ve never heard this but about key revision. How are you supposed to use the disk if the key is revoked?
Hdd’s have bad block remapping sort of like ssd’s, so the same issues apply to both types of media.
Gooey0210@sh.itjust.works 1 year ago
The op probably meant removing one key and adding another
jkrtn@lemmy.ml 1 year ago
Yes. Some guides suggest, say, “just use ‘key’ for now, we’ll replace it later.” I didn’t mention their step adding a stronger key, I guess I didn’t see that as an important part of the question.
solrize@lemmy.world 1 year ago
I’ve never done it that way and don’t see the benefit. Am I missing something? Of course for a testing setup just do something easy. But don’t store any sensitive data under a weak key, ever.