luks-rs

Caution

This library is still experimental and under active development. APIs may change and it should not yet be used for production data without careful consideration.

Pure-Rust Library for the Linux Unified Key Setup

Examples

Check the examples directory for usage. You can run them with:

cargo run --example read_header -- /dev/sda1

Features

• Pure-Rust: The library is implemented entirely in Rust, which allows for easy static compilation, for example, using the musl target. This simplifies deployment and integration in various environments.
• Custom Token Types: The library introduces its own specialized token type, luks-rs-keyring. While it currently shares the same structure as the standard luks2-keyring, this unique identifier allows the library to recognize and handle tokens specifically created for its use.

References

• LUKS2 On-Disk Format Specification
• LUKS1 On-Disk Format Specification
• New Methods in Hard Disk Encryption
• TKS1 - An anti-forensic, two level, and iterated key setup scheme