Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Dec 2006 13:24:34 +0100
From:      Fabian Keil <freebsd-listen@fabiankeil.de>
To:        freebsd-questions@freebsd.org
Subject:   Re: How safe is encrypted disks? (data integrity)
Message-ID:  <20061214132434.5ac20b82@localhost>
In-Reply-To: <457C686E.5050504@locolomo.org>
References:  <457C686E.5050504@locolomo.org>

next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_Ppq/PRBn5Dge=FdWYnLisJA
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Erik Norgaard <norgaard@locolomo.org> wrote:

> I have been thinking to make /home on my laptop encrypted - seems like a=
=20
> good idea if it gets stolen. Now, how safe is this? Not in terms of the=20
> strength of the encryption algorithm, but in terms of integrity.

I have no insight on the code, but as nobody else answered,
my response may be better than nothing.
=20
> What happens in case of power failure, the battery runs out or system=20
> crashes for whatever reason?

I have my home slice encrypted with GELI for several month now
and so far I didn't notice any effects on the data integrity.

I experienced several system crashes and one or two power failures
do to empty battery but I didn't lose any data already saved
on the disk (that I know of).

The only inconvenience is that the system boots to single-user
mode if the home slice isn't clean and I then have to fsck it
manually.

At that point the password for the key is already entered,
so I'm not sure why the slice can't be fscked automatically.
It could be the .eli extension, but I didn't investigate this
any further.

Fabian
--=20
http://www.fabiankeil.de/

--Sig_Ppq/PRBn5Dge=FdWYnLisJA
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQFFgUKHBYqIVf93VJ0RAnVqAJ9pM3LavMFKRinomIerp9d0AxEt1ACfSXNR
E78z0GOsT8WRGQmS2UfpLUU=
=GEqq
-----END PGP SIGNATURE-----

--Sig_Ppq/PRBn5Dge=FdWYnLisJA--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061214132434.5ac20b82>