3.8.1. LUKS Implementation in Red Hat Enterprise Linux
Red Hat Enterprise Linux 6 utilizes LUKS to perform file system encryption. By default, the option to encrypt the file system is unchecked during the installation. If you select the option to encrypt you hard drive, you will be prompted for a passphrase that will be asked every time you boot the computer. This passphrase "unlocks" the bulk encryption key that is used to decrypt your partition. If you choose to modify the default partition table you can choose which partitions you want to encrypt. This is set in the partition table settings
The default implementation of LUKS in Red Hat Enterprise Linux is AES 128 with a SHA256 hashing. Ciphers that are available are: