2

I want to encrypt my disk but I want to know what is the best configuration, I currently use ths:

 cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --key-file=- --hash whirlpool --iter-time 10000 --use-random  luksFormat --type luks2 disk

Is there anything that can be improved?

Luc
  • 31,973
  • 8
  • 71
  • 135
Gabriel Caltzontzi suarez
  • 21
  • 1
  • You're supposed to use aes-xts not serpent on a device with AESNI instructions which means all non phone CPUs since 2010. Also see https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode – Z.T. Jun 11 '19 at 18:13

0 Answers0