Dirk Heinrichs writes: > Am Sonntag 05 Juli 2009 16:28:22 schrieb Alex Schuster: > > Dirk Heinrichs writes: > > > And how do you protect the key on the stick? What if you loose it? > > > > It's a long sentence from The Hichhiker's Guide To The Galaxy I can > > find again. And meanwhile I also have a gpg-encrypted backup of the > > stick's partition somewhere. > > I'm a bit confused now. So that means the key is protected by some > passphrase? That would mean you need a key to get at the key, right?
Right :) I didn't want my LUKS key to be in clear-text, even if it's in a binary file on some server which probably no one will ever see and identify as a boot partition. I have my GPG secret key in different locations, not only on the encrypted PC we are talking about. I only did backup the boot partition because I use the XTS cipher and did not have a live cd which knew about it. But now the new GRML 2009.05 supports it. Wonko