Re: [qubes-users] recommendations on encrypted usb disk?

2016-11-06 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-11-06 04:43, pixel fairy wrote:
> crypt setup has a lot of options. what do you recommend for a usb disk for 
> backups and file transfer between qubes and bare metal linux systems? 
> 

My personal favorite is:

# cryptsetup -v --hash sha512 --cipher aes-xts-plain64 --key-size 512 
--use-random --iter-time 5000 --verify-passphrase luksFormat 

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=sGgX
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8a322340-307e-c013-092d-428c3f282cba%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] recommendations on encrypted usb disk?

2016-11-06 Thread Robin Schneider
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 06.11.2016 13:43, pixel fairy wrote:
> crypt setup has a lot of options. what do you recommend for a usb disk for
> backups and file transfer between qubes and bare metal linux systems?
> 

Hi

I would go with AES-256 as cipher and sha512 has hash for LUKS.

Refer to
https://docs.debops.org/en/latest/ansible/roles/ansible-cryptsetup/docs/defaults
.html#cryptography-defaults
for details :)

- -- 
Live long and prosper
Robin `ypid` Schneider -- https://me.ypid.de/
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJYHysSAAoJEIb9mAu/GkD4NhEP/1jZujyKK0RWUuqQKWNglE7n
adRvP2fZlfCMzAOQfDdB5jnwIKCX3Ir0mWHisIVWww3+FsWP1ysMgEu4zTCcMpJd
3/SnIHF0sonBL6C6VIpIBUuyiRXe0Z3sjWcc4HeJMI7KdNNhH42Y6gJwjHumuiZr
g4k5aDhp7wlZrHxEhRirMfoA3QiamdRrBb0+yHFjmBiHt9dbT0NuN4Z+3PxWggtj
lMR/xiSxU8BDzM0KLD3iMLDIARcz8lSvxHrkij9aWdcVaUuaVkOkg729pHw/tBzV
Y0/zDcVibnxDdcpsNZFiDdK76loJxGb/+WF9b2Pxjh3r7dAdoNmxAvlJGcB40sh0
X2huFy4CI+gU+lP0ZomD0fRMvCQhLrSTTA5ibjaLMY0rnvwfyZ8pXYDCtwkeh9EA
VFvWvtQtvhNuA+agUXQoP334zh2tnJDbfFWZN/S/OWJY1/k7jTTuYSywFd5XH14X
tYoBKu6fhDfy6ae01CNigrdAtx4YaOZzxpNogVhCrFEmb/1sGJqTSr3fwEC3LbTP
CHKv9IkyWLxRKPTUnsKRxFEhWTegDEfYZMNX8QtjG46vsBvFskLXHc2Go3j91m86
HHSTjcG4Rb09ef6ykWIClwhb1APrEALoigilrraAcDcMcx+kAF1N6xxiDl6K6zQI
mtyO0wcHDWOiP49oiusD
=J+4d
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/32e3b70c-ce04-6f27-e52d-964e7ab8b703%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] recommendations on encrypted usb disk?

2016-11-06 Thread pixel fairy
crypt setup has a lot of options. what do you recommend for a usb disk for 
backups and file transfer between qubes and bare metal linux systems? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2c7ad4b3-fefd-4ed1-9ff7-46ca0b1d3b1d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.