LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 06-23-2019, 02:59 AM   #1
LMINTUSER
LQ Newbie
 
Registered: Apr 2019
Posts: 14

Rep: Reputation: Disabled
which is more secure? a key file or a passphrase


Hi everyone

I'm curious to know which is better a keyfile or passphrase for cryptsetup? I know there a pro and con for either one.

Thanks
 
Old 06-23-2019, 04:05 AM   #2
Turbocapitalist
Senior Member
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 4,020
Blog Entries: 3

Rep: Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918Reputation: 1918
Welcome, but please re-read the forum guidelines on how to ask a question properly. As phrased, your query lacks the information needed to help you with it. Also, we do not do homework. We can help you over the hard parts but you'll have to do the actual work yourself.

That said, what do you mean by "cryptsetup" and how do you plan to use it?
 
Old 06-24-2019, 11:08 PM   #3
AnanthaP
Member
 
Registered: Jul 2004
Location: Chennai, India
Distribution: UBUNTU 5.10 since Jul-18,2006 on Intel 820 DC
Posts: 888

Rep: Reputation: 208Reputation: 208Reputation: 208
They are fundamentally different aspects (factors) of security.
- A key file is a file - WHAT YOU HAVE ON A COMPUTER.
- A passphrase is usually - WHAT YOU KNOW AND NOT STORED ON A DEVICE.

I would say that in normal usage, a passphrase is more secure.

OK

Last edited by AnanthaP; 06-24-2019 at 11:11 PM.
 
Old 06-25-2019, 12:41 AM   #4
floppywhopper
Member
 
Registered: Aug 2004
Location: Albany, Western Australia
Distribution: Mageia , SME , IP Fire, LinuxMX
Posts: 636
Blog Entries: 2

Rep: Reputation: 114Reputation: 114
Quote:
Originally Posted by Turbocapitalist View Post
That said, what do you mean by "cryptsetup" and how do you plan to use it?
possibly referring to https://wiki.archlinux.org/index.php...ice_encryption
 
Old 06-25-2019, 06:05 AM   #5
Michael Uplawski
Member
 
Registered: Dec 2015
Location: Normandy, France
Distribution: Debian “testing” with very little “unstable”
Posts: 771
Blog Entries: 25

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
man cryptsetup
Quote:
cryptsetup is used to conveniently setup dm-crypt managed device-mapper
mappings. These include plain dm-crypt volumes and LUKS volumes. The
difference is that LUKS uses a metadata header and can hence offer more
features than plain dm-crypt. On the other hand, the header is visible
and vulnerable to damage.
In addition, cryptsetup provides limited support for the use of loop-
AES volumes and for TrueCrypt compatible volumes.
A passphrase that you can remember is either too short, too simple or too easily forgotten.
A file that you keep on your computer is either too simple to find or too simply destroyed, as you keep forgetting what it was doing.

The most embarrassing thing is probably the word “better”.

The rest is in the documents.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Which is more secure? A passphrase or key file for cryptsetup? CWLang Linux - Newbie 3 03-16-2017 09:44 AM
[SOLVED] Which is more secure a cryptic password or passphrase? dukes123 Linux - Newbie 7 08-16-2015 12:42 PM
SSH not saving key passphrase. Trying every key Wnt2bsleepin Linux - Software 0 05-27-2013 09:45 PM
Revoking GPG key with only passphrase and public key djib Linux - Security 2 03-13-2007 03:20 AM
ssh / ssh-key -- its always asking for passphrase BaerRS Linux - General 1 01-07-2003 06:21 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 12:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration