LUKS
Linux Unified Key Setup: the standard format for encrypting whole block devices, managed with cryptsetup.
In more detail
LUKS2 stretches passphrases with Argon2 and keeps several key slots, so a key can be changed without re-encrypting. Destroying every key slot makes the data unreadable, which is cryptographic erase.
Related terms
- Argon2 — A modern password hashing function that is deliberately slow and needs a lot of memory for every guess, which makes stolen password hashes very expensive to crack.
Taught in
- The Certificate That Expired On A Sunday: Hashes, Encryption And Certificates — CompTIA Linux+ (XK0-006) Exam Prep
- What Changed Last Night? Integrity, Scans, Benchmarks And Secure Deletion — CompTIA Linux+ (XK0-006) Exam Prep