"Ubuntu 25.10 introduces experimental support for TPM-backed Full Disk Encryption. This technology uses the Trusted Platform Module chip to store cryptographic keys for hard disk encryption. The system makes data completely inaccessible without the correct key during boot. The implementation provides support for password management, recovery key regeneration, and better integration with firmware updates. Canonical warns that the feature is not yet suitable for production environments, but users with a security background can already test the technology."
"Canonical is undergoing a major shift with Ubuntu 25.10. The distribution is replacing traditional tools with memory-safe Rust alternatives. The new sudo-rs takes over the role of the classic sudo command, while uutils replaces the GNU coreutils. Memory safety bugs account for a large proportion of all security issues in software. By rewriting critical system components in Rust, Canonical is significantly reducing the attack surface. "We see sudo-rs as a major step forward for Ubuntu's overall security posture," said Jon Seager of Canonical."
Ubuntu 25.10 introduces experimental TPM-backed full disk encryption that stores cryptographic keys in the Trusted Platform Module, rendering data inaccessible without the correct boot key. The implementation supports password management, recovery key regeneration, and improved integration with firmware updates, though it is not yet recommended for production. Network Time Security (NTS) is enabled by default to add cryptographic protection for time synchronization. Core system tools are being rewritten in memory-safe Rust, with sudo-rs and uutils replacing legacy implementations to reduce memory-safety attack surface, while updated developer tool versions are included.
#ubuntu-2510 #tpm-backed-full-disk-encryption #rust-based-sudo-and-coreutils #network-time-security-nts
Read at Techzine Global
Unable to calculate read time
Collection
[
|
...
]