From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1OESct-0004ac-Hl for garchives@archives.gentoo.org; Tue, 18 May 2010 19:38:53 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 40127E08F0; Tue, 18 May 2010 19:38:39 +0000 (UTC) Received: from mail.caf.com.tr (mail.caf.com.tr [88.250.85.68]) by pigeon.gentoo.org (Postfix) with ESMTP id 011C4E08F0 for ; Tue, 18 May 2010 19:38:39 +0000 (UTC) Received: from localhost (sunny.caf.com.tr [127.0.0.1]) by mail.caf.com.tr (Postfix) with ESMTP id 1D1E839E371 for ; Tue, 18 May 2010 19:38:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=caf.com.tr; h= user-agent:in-reply-to:content-disposition:content-type :content-type:mime-version:references:message-id:subject:subject :from:from:date:date:received:received:received; s=originating; t=1274211516; bh=skIh2y9AWIrEop4vWTxAvvNSAmwHxbuyf3mjXA5RshY=; b= mFBHTlvGw1YDxUcARcRhXQNzB4TM9IKkmhTfiO97lpNNQsl7wL04UuS8uW9w1DUc iEEzea2/mTncJxE4C3FZzKRQOT4jyWHpv6rcNkNdwrG9Sn1btNgQfUpX9T+WDH0L 8smPyLv6CCLGdctdg5NgAjv+xvLC5puyRmeXOO4xlFc= X-Virus-Scanned: amavisd-new at caf.com.tr Received: from mail.caf.com.tr ([127.0.0.1]) by localhost (sunny.caf.com.tr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uhVkUvf0w6P3 for ; Tue, 18 May 2010 19:38:36 +0000 (UTC) Received: from zptr-nb01.caf.com.tr (unknown [85.102.129.107]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.caf.com.tr (Postfix) with ESMTPSA id 06B6C39E36E for ; Tue, 18 May 2010 19:38:36 +0000 (UTC) Received: by zptr-nb01.caf.com.tr (Postfix, from userid 1000) id 7599B236D6; Tue, 18 May 2010 22:38:35 +0300 (EEST) Date: Tue, 18 May 2010 22:38:35 +0300 From: Eray Aslan To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure Message-ID: <20100518193835.GA12771@zptr-nb01> References: <4BF108F3.1080304@xunil.at> <4BF299B4.2040306@xunil.at> <4BF2C6A7.6040607@xunil.at> <4BF2E336.8030106@xunil.at> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <4BF2E336.8030106@xunil.at> User-Agent: Mutt/1.5.20 (2009-06-14) X-Archives-Salt: a1c8d35d-f446-44aa-bc6d-656d7bbf4d28 X-Archives-Hash: 31a13529ae90b1e35fe9f9fe8e8f7e78 On Tue, May 18, 2010 at 08:57:58PM +0200, Stefan G. Weichinger wrote: > Am 18.05.2010 19:57, schrieb Jan Engelhardt: > Ok, I see. So my current setup with one disk only and SSL-generated > keyfile does not add security but flexibility (being able to switch > passwords more quickly). Keep the keyfile in a usb-stick if you can. Decrypting the hard disk will require both the usb-stick and the password, i.e. two factor authentication. -- Eray