Public SourceMage Discussion List

[Ismael Luceno <ismael.luceno AT gmail.com>]

On 17/Jun/2016 06:42, Thomas Orgis wrote:
> Am Thu, 16 Jun 2016 17:43:42 -0300
> schrieb Ismael Luceno <ismael.luceno AT gmail.com>: 
> 
> > Just a while ago I merged the changes required to support swap devices
> > encrypted with temporary keys, using XTS with AES-128.
> 
> Ah, interesting. Would be more so if I already wouldn't encrypt my swap
> for suspend to disk;-) So, the idea here is to avoid having possibly
> sensitive information (so, any) written to disk unencrypted? Worth a
> thought. I might do that on a server.

Yes, that and to keep the keys random to avoid any chance of recovery.

However, there are a number of problems with this kind of
implementation, which make it less than ideal, yet it's better than
nothing.