Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
LUKS on LVM less secure?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
BT
Guru
Guru


Joined: 13 Jun 2004
Posts: 309

PostPosted: Sun Mar 30, 2014 1:21 am    Post subject: LUKS on LVM less secure? Reply with quote

I have two physical drives as part of a LVM logical volume. Both drives were filled with random data beforehand. I have created a LUKS container on the logical volume.

Since the LVM header/metadata is not encrypted, wouldn't that reveal where the data is stored, making it less secure than LVM on LUKS?
Back to top
View user's profile Send private message
frostschutz
Advocate
Advocate


Joined: 22 Feb 2005
Posts: 2968
Location: Germany

PostPosted: Sun Mar 30, 2014 1:34 am    Post subject: Reply with quote

Depends entirely on what you want.

I prefer LVM on LUKS myself but in my case, it's full disk encryption, so there won't ever be an unencrypted LV.

Your setup offers more flexibility in that regard, at the cost of making the LV name public.

The data itself is still encrypted and thus safe, unless you leak it to one of your unencrypted LV.
Back to top
View user's profile Send private message
BT
Guru
Guru


Joined: 13 Jun 2004
Posts: 309

PostPosted: Sun Mar 30, 2014 1:49 am    Post subject: Reply with quote

Thank you for the reply.

I was just curious since I thought a determined attacker would know where to look for the data, which may aid them in some way.

I prefer LUKS on LVM since it offers the ability to add more physical drives to the logical volume while using the same key.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum