Messages in this thread | | | Date | Wed, 13 Apr 2005 14:59:28 +0200 | From | Andreas Steinmetz <> | Subject | Re: [PATCH encrypted swsusp 1/3] core functionality |
| |
Herbert Xu wrote: > What's wrong with using swap over dmcrypt + initramfs? People have > already used that to do encrypted swsusp.
Nothing. The problem is the fact that after resume there is then unencrypted(*) data on disk that should never have been there, e.g. dm-crypt keys, ssh keys, ... This may lead to nasty surprises that can occur after weeks or months.
(*) unencrypted from the point of view of the running system. -- Andreas Steinmetz SPAMmers use robotrap@domdv.de - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |