thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Linux Unified Key Setup (LUKS)

Standard Linux disk encryption format built on dm-crypt that supports multiple passphrase key slots.

Definition

LUKS stores encryption metadata in a header and allows several key slots, each able to unlock the master key. LUKS2 supports Argon2id for passphrase stretching and TPM2 binding via systemd-cryptenroll. It is managed with the cryptsetup utility.

Example

cryptsetup luksFormat /dev/sdb1 initializes an encrypted LUKS volume.

Exam tip

LUKS is Linux's full-disk encryption standard; backing up the header is critical.

Related terms