Hi! Maybe thats too simple, but why not just overwrite the keys in DRAM as soon as a shutdown is signaled? Should be quickly patched and work fine except for a sudden power down. Well, "as soon as possible" might be a bit rush tho, when the filesystem unmounting still needs the keys but I'm sure there is a way to do this right. Regards, Andreas - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
