externe HDD/SSD mit dm-crypt und LUKS verschlüsseln

externe SSD Verschlüsseln

Variante 1

cryptsetup --cipher camellia-xts-plain64 --key-size 512 --hash sha512 --key-size 512 --pbkdf argon2id --iter-time 5000 --use-urandom --verify-passphrase luksFormat /dev/sdb

Variante 2

cryptsetup --cipher aes-xts-plain64 --key-size 512 --hash sha512 --key-size 512 --pbkdf argon2id --use-urandom --verify-passphrase luksFormat

Mount

cryptsetup open /dev/sdb drive
mount /dev/mapper/drive /mnt/drive

NVME sicher löschen

Links

Verschlüsselung

https://debianforum.de/forum/viewtopic.php?t=163717 https://wiki.archlinux.org/title/dm-crypt/Device_encryption https://wiki.archlinux.org/title/dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode https://www.cyberciti.biz/security/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/

NVMEs löschen

https://wiki.archlinux.org/title/Solid_state_drive/Memory_cell_clearing#Format_command
Abschnitt 5.19: https://gitlab.com/cryptsetup/cryptsetup/-/wikis/FrequentlyAskedQuestions#5-security-aspects