2005-04-10 23:22:27

by Andreas Steinmetz

[permalink] [raw]
Subject: [PATCH encrypted swsusp 2/3] configuration

--- linux-2.6.11.2/kernel/power/Kconfig.ast 2005-04-10 20:44:48.000000000 +0200
+++ linux-2.6.11.2/kernel/power/Kconfig 2005-04-10 21:01:36.000000000 +0200
@@ -72,3 +72,14 @@
suspended image to. It will simply pick the first available swap
device.

+config SWSUSP_ENCRYPT
+ bool "Encrypt suspend image"
+ depends on SOFTWARE_SUSPEND && CRYPTO=y && (CRYPTO_AES=y || CRYPTO_AES_586=y)
+ default ""
+ ---help---
+ To prevent data gathering from swap after resume you can encrypt
+ the suspend image with a temporary key that is deleted on
+ resume.
+
+ Note that the temporary key is stored unencrypted on disk while the
+ system is suspended.



Attachments:
swsusp-encrypt-config.diff (663.00 B)