Encrypted block devices and suspend to ram

mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed

* Encrypted block devices and suspend to ram
@ 2012-12-20 13:00 Christian Bahls - gmx.de
  2012-12-20 13:20 ` Alan Cox
  0 siblings, 1 reply; 3+ messages in thread
From: Christian Bahls - gmx.de @ 2012-12-20 13:00 UTC (permalink / raw)
  To: linux-kernel

Dear all,

please excuse if it looks like blind ignorance on my part
should this topic already have been brought and up
and being missed by my shallow web search.

I would have a feature request for encrypted block devices
(using LUKS especially)

I would be really grateful if the kernel had an option to scrub
all key related material before suspending to ram
and reinitialize the encrypted block device on wake up.

This would thwart all sorts of social and physical attacks on the device.

Has something like this ever been attempted?

Kind regards
 Christian Bahls

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Encrypted block devices and suspend to ram
  2012-12-20 13:00 Encrypted block devices and suspend to ram Christian Bahls - gmx.de
@ 2012-12-20 13:20 ` Alan Cox
  2012-12-20 13:50   ` Christian Bahls - gmx.de
  0 siblings, 1 reply; 3+ messages in thread
From: Alan Cox @ 2012-12-20 13:20 UTC (permalink / raw)
  To: Christian Bahls - gmx.de; +Cc: linux-kernel

> This would thwart all sorts of social and physical attacks on the device.
> 
> Has something like this ever been attempted?

man cryptsetup

Alan

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Encrypted block devices and suspend to ram
  2012-12-20 13:20 ` Alan Cox
@ 2012-12-20 13:50   ` Christian Bahls - gmx.de
  0 siblings, 0 replies; 3+ messages in thread
From: Christian Bahls - gmx.de @ 2012-12-20 13:50 UTC (permalink / raw)
  To: Alan Cox, linux-kernel

On Thu, Dec 20, 2012 at 2:20 PM, Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
> man cryptsetup

"WARNING: never suspend the device on which the cryptsetup binary resides."

I use full disk encryption and the cryptsetup binary is from initramfs

kind regards
 Christian Bahls

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2012-12-20 13:51 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-12-20 13:00 Encrypted block devices and suspend to ram Christian Bahls - gmx.de
2012-12-20 13:20 ` Alan Cox
2012-12-20 13:50   ` Christian Bahls - gmx.de

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

Powered by JetHome