From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep  7 20:22:09 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3336616A4CE
	for <hackers@freebsd.org>; Tue,  7 Sep 2004 20:22:09 +0000 (GMT)
Received: from wattres.Watt.COM (wattres.watt.com [66.93.133.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 113DA43D2D
	for <hackers@freebsd.org>; Tue,  7 Sep 2004 20:22:09 +0000 (GMT)
	(envelope-from steve@Watt.COM)
Received: (from steve@localhost)
	by wattres.Watt.COM (8.12.11/8.12.11) id i87KM7Kf049770;
	Tue, 7 Sep 2004 13:22:07 -0700 (PDT)
	(envelope-from steve)
Message-Id: <200409072022.i87KM7Kf049770@wattres.Watt.COM>
X-Newsgroups: local.freebsd-hackers
In-Reply-To: <Pine.BSI.4.58L.0409071259510.20376@vp4.netgate.net>
Organization: Watt Consultants, San Jose, CA, USA
From: steve@Watt.COM (Steve Watt)
Date: Tue, 7 Sep 2004 13:22:07 -0700
X-Mailer: Mail User's Shell (7.2.6 beta(5) jp(8) 11/23/00)
To: ctodd@chrismiller.com
cc: hackers@freebsd.org
Subject: Re: Booting encrypted
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Sep 2004 20:22:09 -0000

In article <Pine.BSI.4.58L.0409071259510.20376@vp4.netgate.net> you write:
>
>Has any work been done to boot from an encrypted filesystem, or otherwise
>modify the loader to support GBDE with a "compiled-in" passphrase? The
>purpose would be to prevent reverse engineering of an appliance based on
>FreeBSD. Thoughts, ideas?

Having the password compiled in to something that's necessarily clear-text
on the same media?

You're not adding anything resembling a challenge for someone who's really
interested in reverse-engineering your system.  Any user (I won't call such
a person *acker) incapable of getting around such a thing probably won't
be trying to reverse-engineer it anyhow.

-- 
Steve Watt KD6GGD  PP-ASEL-IA          ICBM: 121W 56' 57.8" / 37N 20' 14.9"
 Internet: steve @ Watt.COM                         Whois: SW32
   Free time?  There's no such thing.  It just comes in varying prices...