recommendations on encrypted usb disk?

[pixel fairy]

crypt setup has a lot of options. what do you recommend for a usb disk for backups and file transfer between qubes and bare metal linux systems?

[Robin Schneider]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 06.11.2016 13:43, pixel fairy wrote:
> crypt setup has a lot of options. what do you recommend for a usb disk for
> backups and file transfer between qubes and bare metal linux systems?
>

Hi

I would go with AES-256 as cipher and sha512 has hash for LUKS.

Refer to
https://docs.debops.org/en/latest/ansible/roles/ansible-cryptsetup/docs/defaults
.html#cryptography-defaults
for details :)

- --
Live long and prosper
Robin `ypid` Schneider -- https://me.ypid.de/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=J+4d
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-11-06 04:43, pixel fairy wrote:
> crypt setup has a lot of options. what do you recommend for a usb disk for backups and file transfer between qubes and bare metal linux systems?
>

My personal favorite is:

# cryptsetup -v --hash sha512 --cipher aes-xts-plain64 --key-size 512 --use-random --iter-time 5000 --verify-passphrase luksFormat <device>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=sGgX
-----END PGP SIGNATURE-----