cryptsetup and LUKS

The standard Linux full-disk encryption layer.

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About cryptsetup and LUKS

cryptsetup sets up and manages dm-crypt volumes using the LUKS on-disk format, which stores key slots in a header so several passphrases or key files can unlock the same volume, and supports re-encryption and detached headers. It is what Linux distributions use for encrypted installations.

Strengths

  • Multiple key slots per volume, so passphrases can be rotated safely
  • Standard across Linux distributions, with tooling built on it

Limitations

  • Protects data at rest only; nothing is protected once a volume is unlocked
  • Losing the LUKS header without a backup makes the data unrecoverable

Details

Pricing
FreeFree and open source under the GPL and LGPL.
License
GPL-2.0
Developer
The cryptsetup project
Platforms
Linux, Command line
How it runs
Downloadable app
Best suited for
The standard Linux full-disk encryption layer
Last verified
Added
Provenance
Selected from the TechWalrus Resource Hub (Security); facts checked against the developer's own pages, 3 sources on file.

Report a wrong fact or a dead link on this listing