On 04/23/2010 12:22 AM, Richard Zidlicky wrote: > On Thu, Apr 22, 2010 at 01:00:01AM +0200, Milan Broz wrote: >> On 04/22/2010 12:48 AM, Felix Blanke wrote: >>> does anybody know a way to trim a luks encrypted SSD? (btrfs filesystem >>> on top, but I think that doesn't count) >> >> TRIM is not yet supported in device-mapper devices (thus dm-crypt/LUKS too) >> but it is planned. > > isn't TRIM considered information leakage in the case of dm-crypt? What do you mean? Information that some blocks are not used in device? It depends what are you trying to do. If it is problem, you should not use FS with TRIM support in the first place. dm-crypt basically should support TRIM if the request comes, it is just block device. dm-crypt is just transparent layer, it is configured some way and configuration depends on your requirements and previous analysis. The same logic - should I ban old ciphers and weak IV because they are insecure? Nope, it is not dm-crypt level decision. Milan _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
