Date: Mon, 20 Mar 2006 21:35:07 +0100
From: Pavel Machek <pavel@suse.cz>
To: "Rafael J. Wysocki" <rjw@sisk.pl>
Cc: Alon Bar-Lev <alon.barlev@gmail.com>,
       Peter Wainwright <prw@ceiriog.eclipse.co.uk>,
       kernel list <linux-kernel@vger.kernel.org>
Subject: Re: Announcing crypto suspend
Message-ID: <20060320203507.GF24523@elf.ucw.cz>
References: <20060320080439.GA4653@elf.ucw.cz> <200603201954.45572.rjw@sisk.pl> <441EFE54.2090004@gmail.com> <200603202126.23861.rjw@sisk.pl>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200603202126.23861.rjw@sisk.pl>
User-Agent: Mutt/1.5.9i
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1129
Lines: 30

On Po 20-03-06 21:26:23, Rafael J. Wysocki wrote:
> Hi,
> 
> On Monday 20 March 2006 20:11, Alon Bar-Lev wrote:
> > Rafael J. Wysocki wrote:
> > > and please read the HOWTO.  Unfortunately the RSA-related part hasn't been
> > > documented yet, but it's pretty straightforward.
> > 
> > Hello,
> > 
> > I don't understand why you are working so hard on this... If
> > you want encryption, you should care about all of your data!
> 
> I hope you realize there may be sensitive data in the suspend image
> that are not stored in filesystems (eg. crypto keys, passwords etc.).

If you have your swap partition on encrypted filesystem, that may
actually work okay.

OTOH uswsusp _destroys_ data after resume. Even if you are forced to
reveal your passphrase later, it should not be possible to recover
data from swsusp image.
								Pavel
-- 
Picture of sleeping (Linux) penguin wanted...
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/