[dm-crypt] The future of disk encryption with LUKS2

Arno Wagner arno at wagner.name
Mon Feb 8 22:10:53 CET 2016


On Mon, Feb 08, 2016 at 21:51:34 CET, Sven Eschenberg wrote:
[...]
> >http://zork.net/~nick/mail/why-reiserfs-is-teh-sukc
> >
> >And new technologies may change this---not just SSDs, but modern
> >high-capacity drives that must rewrite many, many sectors to write
> >one.  (Yes, I know this also argues that those headers should be
> >far away from each other.  So be it.  If such scattered headers
> >don't prevent resizing, I don't care.  Except maybe for secure wipe.)
> 
> Well, if we talk about SMR, small changes will be written to the
> random IO section of the drive and merged later. With those drives
> you'll probably never know if there's parts of the old header
> lingering around someplace else.

Just as with SSDs and hybrid drives. On these, the LUKS 
key-management features potentially lose the secure 
key-slot deletion property.
 
We cannot really fix that, we can only warn of it.

Regards,
Arno
-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno at wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier


More information about the dm-crypt mailing list