Re: Use /dev/random before encrypting disks?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2008-02-05 at 10:23 +0100, Alexander Todorov wrote:
> in many disk encryption resources on the web the user is given an advice 
> to use /dev/random to populate the disk before he sets up the encryption 
>   process. This is said to increase entropy and recommended for brand 
> new disks.
> 
> Does anaconda have the support for that in the current block device 
> encryption implementation? I guess not but haven't looked at the code.
> IMO a GIU/TUI/kickstart flag is enough to let the user choose if they 
> want to populate the device with random data prior to encryption.
> What do you think?

Given the amount of under the covers remapping that disks do these days
and things like hidden sectors, etc, I really don't think it makes much
difference.  But if you do it, then you've got a very painful and long
process that's pretty impossible to message in the UI.

And if you're paranoid, there's always %pre

Jeremy

_______________________________________________
Anaconda-devel-list mailing list
Anaconda-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/anaconda-devel-list

[Index of Archives]     [Kickstart]     [Fedora Users]     [Fedora Legacy List]     [Fedora Maintainers]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]
  Powered by Linux