Dm-crypt

Externa

• https://wiki.archlinux.org/index.php/Dm-crypt

Internal

• Linux Storage Concepts
• Device Mapper Concepts

Overview

dm-crypt is standard device mapper encryption functionality provided by the Linux kernel. The management of dm-crypt is done with cryptsetup userspace utility. dm-crypt allows for the following types block-device encryption: LUKS and plain.

Block-Device Encryption Types

LUKS

LUKS dm-crypt mode, used by default, is an additional convenience layer that stores all of the needed setup information for dm-crypt on the encrypted disk itself and abstracts partition and key management in an attempt to improve eas of use and cryptographic security.

cryptsetup

cryptsetup is the userspace utility used to manage the dm-crypt encryption functionality.

• https://www.coveros.com/encrypting-a-rhel-7-disk-with-luks/

• What is LUKS?
• https://docs.hytrust.com/DataControl/Admin_Guide-4.0/Content/Books/Admin-Guide/Data-Encryption/Example-Adding-and-Encrypting-a-Linux-Disk-with-XFS.htm