gihyo.jp
openSUSE LinuxFull Disk Encryption #FDE in #openSUSE just got better. The next #sdbootutil drops pcr-oracle in favor of systemd-pcrlock for better rollback protection, easier maintenance, and a simple two-command migration. 🛡️🐧 #Linux https://news.opensuse.org/2026/03/11/dropping-pcr-oracle/
Ralf Bergs#Microsoft sperrt #Veracrypt-Entwickler aus: Der Veracrypt-Entwickler kann die Windows-Variante seiner #verschlüsselung|ssoftware nicht mehr aktualisieren. Microsoft hat sein Konto gekündigt.
Ich finde das eine riesen Sauerei! Ich habe VeraCrypt immer sehr geschätzt, weil es auf allen drei wichtigen Platfformen verfügbar war...
#FDE [2/...]
Sami LehtinenXubuntu 26.04 LTS (beta) - Installation with FDE failed. The preconfigured encrypted setup option, failed with Python arguments errors. And manually configured and partitioned setup failed, because it did not detect device mapped root correctly -> not possible to install on it. Let’s hope the final version fixes these both annoying issues. I did update the installer with latest version just before running the install, so the image had even older installer, which I didn’t use. #Xubuntu #LTS #LUKS2 #FDE #fail #installation #Linux
Jason YipIs the #FDE role becoming less desirable? https://blog.pragmaticengineer.com/is-the-fde-role-becoming-less-desirable/
#openSUSE is dropping pcr-oracle from Full Disk Encryption #FDE in favor of #systemd-pcrlock. Better rollback protection, simpler #maintenance, and migration is just two commands. Details at https://news.opensuse.org/2026/03/11/dropping-pcr-oracle/
Erik van Straten@SpaceLifeForm : a spare motherbord won't help just like that.
The actual encryption key is stored in a TPM chip (the rescue code is used to allow the system to access to the actual encryption key).
So even if you have a spare mobo, you'll have to transplant the TPM chip from the old to the new mobo.
The best advice: have a backup, as recent as possible. My backups are on VeraCrypt encrypted external (USB) HDD's.
#openSUSE is dropping pcr-oracle in Full Disk Encryption #FDE. systemd-pcrlock now handles #TPM2 policy, fixing rollback attacks and simplifying maintenance. Migration is just two commands! 🔒🐧 Find out more. #Linux https://news.opensuse.org/2026/03/11/dropping-pcr-oracle/
Kevin Karhan 
@makepkg Reminds me of the @kalilinux ["detached LUKS header"]https://linuxconfig.org/how-to-use-luks-with-a-detached-headerhttps://linuxconfig.org/how-to-use-luks-with-a-detached-header and "LUKS-nuke-Password"...
#LUKS #Encryption #Linux #FullDiskencryption #FDE #ITsec #InfoSec #OpSec #ComSec