Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] NEW: Encrypted swap device support [init.d 2.2.15]

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Ismael Luceno <ismael.luceno AT gmail.com>
  • To: Thomas Orgis <thomas-forum AT orgis.org>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] NEW: Encrypted swap device support [init.d 2.2.15]
  • Date: Fri, 17 Jun 2016 10:19:51 -0300

On 17/Jun/2016 06:42, Thomas Orgis wrote:
> Am Thu, 16 Jun 2016 17:43:42 -0300
> schrieb Ismael Luceno <ismael.luceno AT gmail.com>:
>
> > Just a while ago I merged the changes required to support swap devices
> > encrypted with temporary keys, using XTS with AES-128.
>
> Ah, interesting. Would be more so if I already wouldn't encrypt my swap
> for suspend to disk;-) So, the idea here is to avoid having possibly
> sensitive information (so, any) written to disk unencrypted? Worth a
> thought. I might do that on a server.

Yes, that and to keep the keys random to avoid any chance of recovery.

However, there are a number of problems with this kind of
implementation, which make it less than ideal, yet it's better than
nothing.




Archive powered by MHonArc 2.6.24.

Top of Page