Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jan 2011 08:07:19 +0100
From:      Roland Smith <rsmith@xs4all.nl>
To:        Modulok <modulok@gmail.com>
Cc:        Alokat <mailing@alokat.org>, freebsd-questions@freebsd.org
Subject:   Re: harddrive encryption
Message-ID:  <20110118070719.GA51692@slackbox.erewhon.net>
In-Reply-To: <AANLkTinruOxi_1FFDZzfhSojk1u%2B_XfGsJkDiSbMOuMW@mail.gmail.com>
References:  <4D34A6EF.30600@alokat.org> <20110117225308.GA40523@slackbox.erewhon.net> <AANLkTinruOxi_1FFDZzfhSojk1u%2B_XfGsJkDiSbMOuMW@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--ikeVEW9yuYc//A+q
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 17, 2011 at 10:05:53PM -0700, Modulok wrote:
> On 1/17/11, Roland Smith <rsmith@xs4all.nl> wrote:
> > On Mon, Jan 17, 2011 at 09:30:39PM +0100, Alokat wrote:
> >> Hi,
> >>
> >> is it possible to encrypt my full harddrive (excluding /boot) during a
> >> freebsd installation. Or do I have to do this after the installation
> >> manually?
> >
> > Currently you have to do it manually afterwards.
> >
> > Personally, I would not bother encrypting the OS data; there is nothing
> > secret
> > there, and it does have a performance impact. Plus it would provide amp=
le
> > material for a known-plaintext attack!
> >
>=20
> Modern ciphers such as AES are not susceptible to known plaintext
> attacks.

That is indeed what it says on
http://en.wikipedia.org/wiki/Known-plaintext_attack. But without any
source or other justification. In this case, I'd say [citation needed]!

At one time Enigma and DES were regarded as unbreakable. :-)=20

Roland
--=20
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)

--ikeVEW9yuYc//A+q
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (FreeBSD)

iEYEARECAAYFAk01PCcACgkQEnfvsMMhpyUxUACfanPbjIMVQa9ulFQ7AujtWvx0
lgwAnAsuvO3Mv+tJHYnkQOV7D4/J+3Di
=QlC4
-----END PGP SIGNATURE-----

--ikeVEW9yuYc//A+q--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110118070719.GA51692>