[SOLVED] Double encrypting a partition

Ari_archer · Last edited by Ari_archer on Sat Oct 30, 2021 11:46 pm; edited 1 time in total

Hello, I was wondering if it's possible and if I should encrypt my home partition multiple times.
I think it might be just as easy as encrypting the mapper and adding it to dmcrypt configuration,
but I don't know, so the question is that should I do it if it's possible and anything that could go wrong?
_________________
regards,
ari

alamahant · Advocate Joined: 23 Mar 2019 Posts: 3950

Yes it seems to work

pietinger · Posted: Sat Oct 30, 2021 5:51 pm Post subject:

Ari_archer,

if you dont use 3DES you should not use the same cipher (e.g. AES) two times (this can weaken the alogorithm). Take different ciphers !

NeddySeagoon · Posted: Sat Oct 30, 2021 6:52 pm Post subject:

Ari_archer.

If you use a Chinese cypher, an American cypher and a Russian cypher, you might be proof against back doors in all three systems.
Maybe China, the USA and Russia share their cypher backdoors, so all you get is a very slow encrypted area and a false sense of security.

Of course, just because you are paranoid does not mean that "they" are not out to get you.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

Ari_archer · Posted: Sat Oct 30, 2021 11:43 pm Post subject:

Ari_archer · Posted: Sat Oct 30, 2021 11:44 pm Post subject:

Ari_archer · Posted: Sat Oct 30, 2021 11:45 pm Post subject:

Hu · Administrator Joined: 06 Mar 2007 Posts: 23101

For that threat model, you want a good strong password. The underlying cryptography barely matters, as it is unlikely she will attempt to defeat it by cryptanalysis. If she tries to get in at all, it will be by trying to guess the password. Anyone who correctly guesses the password will get in, no matter how strong the cryptography is. Thus, you want a password or passphrase that is too complex to be used by chance and sufficiently random that it would not show up on a list of informed guesses (pet's name, significant dates, etc.)

figueroa · Posted: Sun Oct 31, 2021 3:36 am Post subject:

Single encryption, decently done, will protect you from your mother, and almost any other threat. Adding layers of encryption multiplies your chances of destroying your own system beyond recovery. The level or protection should be according to the use-case. This applies to everybody.
_________________
Andy Figueroa
hp pavilion hpe h8-1260t/2AB5; spinning rust x3
i7-2600 @ 3.40GHz; 16 gb; Radeon HD 7570
amd64/23.0/split-usr/desktop (stable), OpenRC, -systemd -pulseaudio -uefi

Goverp · Advocate Joined: 07 Mar 2007 Posts: 2204

pietinger · Posted: Sun Oct 31, 2021 11:36 am Post subject: