[tor-talk] [tails] Crypto enforcement proposal

[HardKor]

Hello,

I took a look on the persistant partition of tails :

# cryptsetup luksDump /dev/sdb2
[...]
Cipher name:       aes
Cipher mode:       cbc-essiv:sha256
Hash spec:         sha1
[...]
MK bits:           256
[...]

Even if it look secure, I think you could better do this :

[...]
Cipher name:       serpent
Cipher mode:       xts-essiv:sha256
Hash spec:         sha512
[...]
MK bits:           512
[...]

What do you think about that ?

HardKor