From owner-freebsd-hackers@freebsd.org Tue Sep 8 18:36:00 2015 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A9783A00275 for ; Tue, 8 Sep 2015 18:36:00 +0000 (UTC) (envelope-from prvs=686a33556=xaol@amazon.com) Received: from smtp-fw-4101.amazon.com (smtp-fw-4101.amazon.com [72.21.198.25]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "amazon-smtp.amazon.com", Issuer "Symantec Class 3 Secure Server CA - G4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 31F7C1094 for ; Tue, 8 Sep 2015 18:35:59 +0000 (UTC) (envelope-from prvs=686a33556=xaol@amazon.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1441737360; x=1473273360; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=vfOjZeRnIbqUb6qQiGiaq5TtIzSCQ5IEnhqNnckzXmc=; b=ZrXTEYTkPzrxNes7HBbM0OyW4OFIidSNVSSuAmeMVDnE1QONIYtYtQ7j dckWH9YRahhbcDa2eDcpEBz3j2ycxyWusVJSQJwzgARJINYoOCR51S/iK XBIX6iQTE7WYsjriHrgg9cCMVUTOPVRyf9p5nG9skLYIGxuGAOJ0uxhvd g=; X-IronPort-AV: E=Sophos;i="5.17,491,1437436800"; d="scan'208";a="340917136" Received: from iad12-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-60002.pdx1.amazon.com) ([10.43.8.2]) by smtp-border-fw-out-4101.iad4.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 08 Sep 2015 18:35:57 +0000 Received: from ex10-hub-7001.ant.amazon.com (pdx1-ws-svc-lb16-vlan2.amazon.com [10.239.138.210]) by email-inbound-relay-60002.pdx1.amazon.com (8.14.7/8.14.7) with ESMTP id t88IZr4L026559 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 8 Sep 2015 18:35:56 GMT Received: from EX13D10UWB001.ant.amazon.com (10.43.161.111) by ex10-hub-7001.ant.amazon.com (10.43.103.49) with Microsoft SMTP Server (TLS) id 14.3.181.6; Tue, 8 Sep 2015 11:35:30 -0700 Received: from EX13D10UWB004.ant.amazon.com (10.43.161.121) by EX13D10UWB001.ant.amazon.com (10.43.161.111) with Microsoft SMTP Server (TLS) id 15.0.1076.9; Tue, 8 Sep 2015 18:36:12 +0000 Received: from EX13D10UWB004.ant.amazon.com ([10.43.161.121]) by EX13D10UWB004.ant.amazon.com ([10.43.161.121]) with mapi id 15.00.1076.000; Tue, 8 Sep 2015 18:35:29 +0000 From: "Li, Xiao" To: Igor Mozolevsky CC: Hackers freeBSD , Analysiser Subject: Re: Passphraseless Disk Encryption Options? Thread-Topic: Passphraseless Disk Encryption Options? Thread-Index: AQHQ6lr6Ydzyitj3H0mec7eivE1jBJ4y5y6A//+TKICAAHjfAP//jP+A Date: Tue, 8 Sep 2015 18:35:29 +0000 Message-ID: References: <8B7FEE2E-500E-49CF-AC5E-A2FA3054B152@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.160.246] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <475D46661608DD449127BD78166C28E1@ant.amazon.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Sep 2015 18:36:00 -0000 Agreed, that=B9s why I=B9m stuck in here: it seems like something either unachievable or haven=B9t been done before. I mentioned Apple=B9s method is only because it is something similar in that both requires a full disk encryption on startup disk. But Apple=B9s way is like to decrypt the disk o= n login; I=B9m trying to decrypt the disk during prelogin after the boot. On 9/8/15, 11:27 AM, "owner-freebsd-hackers@freebsd.org on behalf of Igor Mozolevsky" wrote: >