Re: instead of wiping the data, filling an encrypted volume with zeros

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> Andreas Grassl wrote:
>
>> i encrypted a partition with
>>
>> cryptsetup -c aes-cbc-essiv:sha256 -y -s 256 luksFormat /dev/sda6
>>
>> but forgot to wipe the data first :-)
>>
>> now i thought to write simply a zero-file on the encrypted partition to
>> fill the whole space.


The problem with writing zeros is that every block will be encoded the same so it's possible to see where the real data ends and the encoded zeros blocks begin.

Using (u)random is not really necessary 9and is expensive) since the data is going to be 'scrambled' anyway but some sort of arbitrary non-repeating data is needed.

Random data is needed if you are preparing the raw partition.

Dick


---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux