GNU Grub
- Bootable grub USB stick (EFI and BIOS for Intel).
- Grub2 (Ubuntu Help).
- GRUB2 Manual (Wiki).
- Using GRUB to Set Up the Boot Process.
- GNU Grub Manual.
- On
cryptopts: (1, 2, 3, 4, 5), see/usr/share/doc/cryptsetup/README.initramfs.gzfor details.
Boot
- Auto-booting and Securing a Linux Server with an Encrypted Filesystem.
- #348147 - Allow subscripts to alter ROOT (was: Add support for cryptoroot) - Debian Bug report logs (crypt_root and real_root on gentoo).
Images
- How can I mount a disk image?.
- GRUB 2 - OSDev: instalando o grub em várias mídias distintas.
- Disk mounting.
- Loop-mounting partitions from a disk image.
UEFI
Security
Full Disk Encryption
- Grub Crypt · Grub with crypto enhancements.
- Yet Another Full Disk Encryption with Ubuntu 11.10 | On Science and Technology.
- MissingLink.xyz - Tutorial: GRUB2 Cryptomount.
- Ubuntu Full Disk Encryption (FDE) with encrypted /boot
- Full disk encryption with LUKS (including /boot) · Pavel Kogan.
- Full-Crypto setup with GRUB2
LUKS
LUKS 2 and Argon2id
General information:
- mjg59: PSA: upgrade your LUKS key derivation function
- Une lettre d’Ivan, enfermé à la prison de Villepinte : perquisitions et disques durs déchiffrés » Indymedia Nantes
- Password Storage - OWASP Cheat Sheet Series
- GitHub - CyberKnight00/Argon2_Cracker: Argon2 Hash Cracker
- An information theoretic model of privacy and security metrics — GNU MediaGoblin
- Debian -- Details of package grub-pc in bookworm
Relevant references:
- Enable LUKS2 and Argon2 Support for Packages - Gentoo Configuration Guide: Full Disk LUKS2 with GRUB and systemd - Leo3418's Personal Site
- Tails - Weak cryptographic parameters in LUKS1
Bug reports:
Existing patches for GRUB:
Workarounds to use LUKS2 and Argon2id on boot devices:
- How to install debian 12 with full disk (boot too) luks2 encryption grub2, lvm UEFI? - Unix & Linux Stack Exchange
- Here's how to use grub2-git and argon2id for encrypted boot : r/NixOS
- encryption - GRUB alternative for LUKS2 with Argon2ID support - Unix & Linux Stack Exchange
- Enable LUKS2 and Argon2 support for Grub in Manjaro/Arch | Ming Di Leom's Blog
Systems that already support it (but nos as FDE):