Date: Thu, 7 Feb 2013 19:51:27 +0000 From: RW <rwmaillists@googlemail.com> To: freebsd-questions@freebsd.org Subject: Re: geli overhead? Message-ID: <20130207195127.43dd1ae3@gumby.homeunix.com> In-Reply-To: <CAHUOmanYfr2B0sM%2B4mtzJnwyAWXf7uLTWF8mKWSMpiqJcg6fgQ@mail.gmail.com> References: <CAHUOmamYud7md9=5yYfWvEsQZUWKHgPRUdwhUpaNae71B-nxvA@mail.gmail.com> <abe71e782475fd98aef8e77721e3be9b@dweimer.net> <CAHUOmanYfr2B0sM%2B4mtzJnwyAWXf7uLTWF8mKWSMpiqJcg6fgQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 4 Feb 2013 22:25:33 +0100 mhca12 wrote: > Does skipping authentication also remove the requirement of > zeroing the whole eli disk for the checksums? It's not needed from that perspective, but it makes it a bit more secure if you do that or fill the device from /dev/random before the init. If you don't do either an attacker may be able infer information about the layout of files.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130207195127.43dd1ae3>