Re: Encrypted partitions with sectors to zero?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello Arno.

> Encryption does not overwrite your data. If you want that
> with LUKS or plain dm-crypt, ypu need to do the overwrite
> yyourself. Some tools, like TrueCrypt, offer you to do
> this optionally during installation.
>
> See also FAQ item 5.3.

My bad, this is actually obvious (I always used shred when I was
converting my old unsecured machines before encrypting them).


> Yes. See FAQ item 5.3. If you do it for an already created
> filesystem, you will not reach everything though, that is
> why the overwrite should be done after crypto-mapping, but
> before filesystem creation.
>
> Arno

Good point, I was looking to avoid insecurities by disabling TRIM but
I didn't understood that this insecurity was "by default" even
wwithout TRIM (as I didn't filled the LUKS container).


Thanks a lot Arno, this is a lot more understandable for me now.
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt




[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux