From 819463aa203e9fb46f431c16ac8f35b735164dc0 Mon Sep 17 00:00:00 2001 From: Ryan Yin Date: Wed, 31 Jan 2024 11:53:08 +0800 Subject: [PATCH] docs: luks2 --- nixos-installer/README.md | 2 +- nixos-installer/README.shoukei.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nixos-installer/README.md b/nixos-installer/README.md index 799c0bac..f3e3f0ce 100644 --- a/nixos-installer/README.md +++ b/nixos-installer/README.md @@ -83,7 +83,7 @@ cryptsetup --help # NOTE: `cat shoukei.md | grep luks > luks.sh` to generate this script # encrypt the root partition with luks2 and argon2id, will prompt for a passphrase, which will be used to unlock the partition. -cryptsetup luksFormat --type luks2 --pbkdf argon2id --cipher aes-xts-plain64 --key-size 512 --hash sha512 /dev/nvme0n1p2 +cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --hash sha512 --iter-time 5000 --key-size 256 --pbkdf argon2id --use-urandom --verify-passphrase /dev/nvme0n1p2 # show status cryptsetup luksDump /dev/nvme0n1p2 diff --git a/nixos-installer/README.shoukei.md b/nixos-installer/README.shoukei.md index f2b15851..d5c96607 100755 --- a/nixos-installer/README.shoukei.md +++ b/nixos-installer/README.shoukei.md @@ -67,7 +67,7 @@ cryptsetup --help # NOTE: `cat shoukei.md | grep luks > format.sh` to generate this script # encrypt the root partition with luks2 and argon2id, will prompt for a passphrase, which will be used to unlock the partition. -cryptsetup luksFormat --type luks2 --pbkdf argon2id --cipher aes-xts-plain64 --key-size 512 --hash sha512 /dev/nvme0n1p4 +cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --hash sha512 --iter-time 5000 --key-size 256 --pbkdf argon2id --use-urandom --verify-passphrase /dev/nvme0n1p4 # show status cryptsetup luksDump /dev/nvme0n1p4