Disk encryption is a vital technology for ensuring data confidentiality. It is widely used across various computing systems, from large cloud storage backends, servers, and laptops to small IoT devices.

Re-encryption refers to the process of changing the encryption key or other encryption parameters, such as the cipher mode. This process can be performed offline (where stored data is inaccessible during re-encryption) or online (where data remains in active use).

This thesis will demonstrate and implement LUKS (Linux Unified Key Setup) re-encryption for storage backend libraries commonly used in Linux applications.

The student is expected to:

• Become familiar with Linux storage, LUKS disk encryption, and the related re-encryption API (libcryptsetup),
• propose an extension to storage backend libraries (libblockdev, udisks), taking into account both offline and online re-encryption modes,
• implement the proposed library extension,
• demonstrate the concept and the implemented interface with a simple tool or script, and evaluate the solution.

The implementation must be under OSS permissive licenses and ideally prepared for merging to upstream projects.

The student should be familiar with Linux system configuration and programming in C language.