Quote:
Originally Posted by geekmaster
That sounds like how TrueCrypt encrypts entire hard drives, letting you relatively quickly change the "passphrase" encryption key.
|
It is also the method used by LUKS, for the same reason (it has I think eight keyslots for passphrase material). It's very, very useful if your passphrase is itself generated by a cryptographic device, because it means that if you get a new one (that necessarily generates a different output for a given challenge) you can add the new one using the old one before (optionally) removing the old one.