Dan Luu

So subject to offline attack, so even if he hadn't been intercepted I suspect the government would have got the data eventually

@mjg59 LUKS does iterated hashing on the passphrase to rate-limit brute-forcing. That'd be a long "eventually" for a non-trivial passphrase.

@josh_triplett @mjg59 He did say "offline attack" and by that I think he included trojaning the boot sector.

@martinkrafft @josh_triplett No, I think we could assume that DPR wasn't going to type in his passphrase again

@mjg59 @josh_triplett so you think that dm_crypt can be brute-forced? How would a TPM prevent this?

@martinkrafft @josh_triplett Assuming the passphrase is in something that resembles language, the search space is much smaller

@mjg59 @martinkrafft A passphrase with sufficient entropy, plus iterated hashing for >1 CPU second per attempt, ought to suffice.