URL:
<https://savannah.gnu.org/bugs/?55093>
Summary: Add LUKS2 support
Project: GNU GRUB
Submitted by: dllud
Submitted on: Sun 25 Nov 2018 01:32:49 PM UTC
Category: Security
Severity: Major
Priority: 5 - Normal
Item Group: Feature Request
Status: None
Privacy: Public
Assigned to: None
Originator Name:
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Release:
Release: Git master
Reproducibility: None
Planned Release: None
_______________________________________________________
Details:
The LUKS2 format brings several advantages over the original LUKS format. Some
of the most important are (1) data integrity protection and (2) memory-hard
functions for key derivation.
GRUB supports the original LUKS format, allowing the setup of full-disk
encryption (FDE) schemes where GRUB decrypts an encrypted /boot partition.
Adding support for LUKS2 on GRUB would improve the security on these FDE
schemes, specially due to the two new LUKS2 advantages mentioned above.
I found several references online (Arch Wiki, Stackoverflow, etc.) to the lack
of LUKS2 support on GRUB. I decided to open this feature request since I could
find no mention of LUKS2 on both the bug tracker and the mailing lists.
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/bugs/?55093>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
_______________________________________________
Bug-grub mailing list
Bug-grub@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-grub
