madaidans-insecurities / madaidans-insecurities.github.io

https://madaidans-insecurities.github.io/
136 stars 28 forks source link

Mention fscrypt and TPM in Linux Hardening Guide #38

Open FieryBinary opened 2 years ago

FieryBinary commented 2 years ago

Fscrypt is a transparent file encryption tool that Android uses for their encryption implementation. It's more fine-grained than full-disk encryption like dm-crypt. TPM provides a coprocessor to handle keys, like in smartphones., though it's not nearly as good.

Together they can provide a decent desktop encryption implementation. This is worth adding to the hardening guide, under physical security.