Author: Jan Nielsen Date: To: tails-dev Subject: [Tails-dev] LUKS update
Hi all.
I propose that the next release of TAILS come shipped with cryptsetup
version 1.6. Currently, it comes with version 1.4.3 .
I ask this so that the default encryption cipher used by LUKS (when
performing FDE on a USB, for example) becomes aes-xts-plain64 instead of
the older, less secure aes-cbc-essiv cipher.
I am aware that this can be accomplished in version 1.4.3 of cryptsetup.
But an upgrade to the newest version would be greatly helpful in preserving
the encryption security in TAILS.