Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Oct 2014 03:44:12 -0400
From:      "Michael W. Lucas" <mwlucas@michaelwlucas.com>
To:        Erich Dollansky <erichsfreebsdlist@alogt.com>
Cc:        hackers@freebsd.org
Subject:   Re: GBDE not protecting the user
Message-ID:  <20141011074412.GA9432@mail.michaelwlucas.com>
In-Reply-To: <20141011113008.705ba16d@X220.alogt.com>
References:  <20141010215842.GA6717@mail.michaelwlucas.com> <20141011113008.705ba16d@X220.alogt.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Oct 11, 2014 at 11:30:08AM +0800, Erich Dollansky wrote:
> Hi,
> 
> On Fri, 10 Oct 2014 17:58:42 -0400
> "Michael W. Lucas" <mwlucas@michaelwlucas.com> wrote:
> 
> > [Tried questions@, no answer, and the code contains things I just
> > cannot trigger.]
> > 
> just try geli. It works for me. What I like most is that you can have
> key and password on external media. No external media - no decyphering.

GELI does not verify key destruction when the correct passphrase is
used. There are use cases where this is very important--e.g., finance.

I'd really like to include GBDE in my FreeBSD storage book, but it
seems that it doesn't actually work.

==ml

-- 
Michael W. Lucas  -  mwlucas@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20141011074412.GA9432>