Date: Sun, 27 Jan 2008 00:20:57 +0100 (CET) From: Christian Baer <christian.baer@uni-dortmund.de> To: freebsd-geom@freebsd.org Subject: Re: how-to: encryption + journaling (geli + gjournal) Message-ID: <fngf8p$a8e$2@nermal.rz1.convenimus.net> References: <478A93BF.4070404@vwsoft.com> <20080114011412.33a91fac@gumby.homeunix.com.> <478B5F8A.7090408@vwsoft.com> <36878.3953287222$1200345389@news.gmane.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 14 Jan 2008 21:15:37 +0000 RW wrote: > There's no need to be rude, I'm only trying to help. You guys are both a little sensitive, aren't you? :-) > In my experience writing from /dev/random to a raw partition is almost > twice as fast as writing to an .eli device - essentially it's single > verses double encryption. True, this *is* faster. But there is also a reason for encrypting the random numbers - although I would probably use zeros which will look pretty much like random numbers on a disk once they are encrypted. If you use a checksum (geli init -a) geli will need to know what is on the disc. So you actually have to fill the disc through geli before you can use it. If you don't do this you will get lots of errors stating that the data on the disc is corrupt. I guess the reason why blanking a disc with encrypted random numbers is the double entropy and the fact that there are cases where you have to blank a disc through geli. Regards, Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fngf8p$a8e$2>