Software encryption

LUKS software disk encryption with standard setup (cipher: aes-xts-plain64, size: 256) is used.

Librem 14, Librem Mini and Librem servers come with PureOS with OEM setup, which pre-encrypts the disk but allows customer to set up their own disk encryption password. Boot partition is not encrypted but it can be verified with Librem Key (see PureBoot).

Librem 5 also comes with internal encryption.

Find out more about LUKS: reference implementation project home, specification, documentation.

Whitepapers: 1, 2, 3.

Secure boot

We are using PureBoot.


Librem Chat is using Matrix communication protocol, for FAQ, specification and reference implementation details check out their website.

Librem Tunnel utilizes OpenVPN.

Recent Posts

Related Content