From owner-freebsd-fs@freebsd.org Sat May 14 13:02:09 2016 Return-Path: Delivered-To: freebsd-fs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C319EB398A0 for ; Sat, 14 May 2016 13:02:09 +0000 (UTC) (envelope-from thomas.e.zander@googlemail.com) Received: from mail-lf0-x234.google.com (mail-lf0-x234.google.com [IPv6:2a00:1450:4010:c07::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5CF8C1713 for ; Sat, 14 May 2016 13:02:09 +0000 (UTC) (envelope-from thomas.e.zander@googlemail.com) Received: by mail-lf0-x234.google.com with SMTP id j8so99616892lfd.2 for ; Sat, 14 May 2016 06:02:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to; bh=bmL61pXYm2Gzd3IvigPv9IriPDARnOJxkc//7OOIJbc=; b=A/zfAo+dR6RgcvIOcv0MVrVdYKFkFiK2zk/Wy0ivIb5LOSa8OGWX9bcw2X8ChOGybC x1z/8hzBio/g9sJPAlaFZFYlh7dbFLRYqhiyZbXn612AiVtiiEYQ7sdndYl8IPJ40u35 wcXrPW969j/yTcsW9IlYfc7ZAPWUZ/mGLW6zZcO55PeCGREpXx6dK83jzu4G3oSqasTT 1sOT4zKvA6Msa/5KGKiz+g85ILLhHmzS1XJUVnWKE7FjvumoKTPhvudkElseYYPs8Irg M3gBJdunUkFYOGZEzHfLOxIKQfzGr8klV1QOCAcu/CZjWEH1eLA5Z8JujZruqucLG/6l in6A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to; bh=bmL61pXYm2Gzd3IvigPv9IriPDARnOJxkc//7OOIJbc=; b=PYtLjNV5hF0qw+rP/BsReGNVb/3HRiXEeEGMUmFJmG9KNPT/byJlNfJtvj4lMNSFoG iFC65LJ+ZkQYMz/yCG7jGrp7r1FwTP6caTf7ke2vqYXL2PnCVT1hxDpeBx74tGq003xC WgLdndVXm9aGJx68qqSiylJ+6BL32tiHTTR43iBYrgRBg9XK2/Kb2BpfWvryz1NMxr6f TScBZYZvmQPq8IsUbZs5SNf48VI4orJl9HNbqzwUVdPZbKHYC0qnOOlk/+mwkeXUkR2K VSvWMYAWlMRq5ywgpmRUT6kJvvOcG8BwNxfgTsZIqVsibZJc3xAfRw2/Rk1uvsVmBzsD r3/g== X-Gm-Message-State: AOPr4FWUlS4IxzSK/XXSx96jZYxO9wxcAU913pC3J7YDod0bVYxkT5dJJwYZuYJo+AGSSx1jnDSEq6ONdZq9FQ== MIME-Version: 1.0 X-Received: by 10.25.64.212 with SMTP id n203mr8909893lfa.54.1463230927236; Sat, 14 May 2016 06:02:07 -0700 (PDT) Sender: thomas.e.zander@googlemail.com Received: by 10.25.21.84 with HTTP; Sat, 14 May 2016 06:02:07 -0700 (PDT) In-Reply-To: References: <5736E7B4.1000409@gmail.com> Date: Sat, 14 May 2016 15:02:07 +0200 X-Google-Sender-Auth: btrFOKYK7YHNfUDDA9qeYb3tjP8 Message-ID: Subject: Re: State of native encryption in ZFS From: Thomas Zander To: freebsd-fs@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 May 2016 13:02:09 -0000 On 14 May 2016 at 14:43, Michael Jung wrote: > On 2016-05-14 04:54, Ruslan Yakauleu wrote: >> >> Hi all! >> >> I wish to know somethign new about native encryption in ZFS for FreeBSD. >> Any works in this direction are conducted? > > I have been using encryption under ZFS for several years without any issue. Op was probably referring to encryption being integrated into the ZFS data pipeline, not on top of geli/gdbe: http://open-zfs.org/wiki/Projects#Platform_agnostic_encryption_support In Oracle Solaris this is available, see http://www.oracle.com/technetwork/articles/servers-storage-admin/manage-zfs-encryption-1715034.html IIRC this work has started before Oracle took over Sun, but it has not been open sourced yet. I'd be very surprised to see something like this hit the tree anytime soon. Best regards Riggs