Authenticated Boot and Disk Encryption on Linux
https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html
> Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time. However, the way they are set up by most distributions is not as secure as they should be, and in some ways quite frankly weird. In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions.
originally posted at https://stacker.news/items/669702
DrStacker
npub1ak…rvnea
2024-09-02 14:07:35
Author Public Key
npub1aktun8u228h4clhgw4gzw6sthttmmf0aad4h5jh3ja7zwyt6geuq3rvneaPublished at
2024-09-02 14:07:35Event JSON
{
"id": "0ce139c98abfd2d6d6437bd5aee83cfe7d91037532cd1319b8905c5ef01667f0",
"pubkey": "ed97c99f8a51ef5c7ee87550276a0bbad7bda5fdeb6b7a4af1977c27117a4678",
"created_at": 1725286055,
"kind": 1,
"tags": [],
"content": "Authenticated Boot and Disk Encryption on Linux\nhttps://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html\n\n\u003e Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time. However, the way they are set up by most distributions is not as secure as they should be, and in some ways quite frankly weird. In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions.\n\noriginally posted at https://stacker.news/items/669702",
"sig": "ac98f690ac24da16680c55f17953d227a568442475aac180270eebe59ddfa4bf210f80636ff9a450be4c0704af67e9b805394f03d21f45c462e4c1b9da4a0f1b"
}