Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-24 Thread Mantas Mikulėnas
On Fri, Jan 24, 2020 at 11:42 AM Pascal wrote: > could cryptsetup be "insensitive" to the configured keyboard layout and > adopt/toggle the US/ASCII layout ? > as the physical keys on the keyboard do not move ;-), the end user would > enter the password he wants and cryptsetup would only receive

Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-24 Thread Pascal
could cryptsetup be "insensitive" to the configured keyboard layout and adopt/toggle the US/ASCII layout ? as the physical keys on the keyboard do not move ;-), the end user would enter the password he wants and cryptsetup would only receive ASCII characters... let's say I use "zézé" (french keyboa

Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-23 Thread Andrei Borzenkov
24.01.2020 06:56, Alexander E. Patrakov пишет: >> >> I assume users want their login passphrase to use local characters. > > That's just an assumption, with no data presented to back it up. > I have seen enough cases when users memorized Russian passwords and entered ASCII characters based on ke

Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-23 Thread Alexander E. Patrakov
On Fri, Jan 24, 2020 at 2:11 AM Chris Murphy wrote: > > Thanks for the answer, it's very useful. When I asked the question, I > didn't fully appreciate the cryptographic and anti-forensic > capabilities in LUKS that almost certainly should not be > re-implemented elsewhere. > > I'd like to better

Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-23 Thread Chris Murphy
Thanks for the answer, it's very useful. When I asked the question, I didn't fully appreciate the cryptographic and anti-forensic capabilities in LUKS that almost certainly should not be re-implemented elsewhere. I'd like to better understand what it would take to support UTF-8 passphrases for LUK

Re: [systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2020-01-13 Thread Lennart Poettering
On Mi, 11.12.19 01:52, Chris Murphy (li...@colorremedies.com) wrote: > I stumbled onto a LUKS2 keymapping story on the dm-crypt list [1] that > nearly ended in user data loss. The two suggestions for how to avoid > such problems is to use either ASCII or modhex based passphrases. [3] > > I'm curio

[systemd-devel] homed, LUKS2 passphrase encoding, and recovery key

2019-12-11 Thread Chris Murphy
I stumbled onto a LUKS2 keymapping story on the dm-crypt list [1] that nearly ended in user data loss. The two suggestions for how to avoid such problems is to use either ASCII or modhex based passphrases. [3] I'm curious about whether this is something homed can help deal with: users who want to