Re: security concerns with RAID on top of dmcrpyt and with mulitple devices with the same key slot key?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2016-06-02 at 19:41 -0700, David Christensen wrote:
> If you put encryption on top of a RAID of N devices, your CPU will
> have 
> to process one layer of encryption.  If you put a RAID on top of N 
> encrypted devices, your CPU will have to process N layers of
> encryption. 
Well that's of course clear (I should have mentioned this),... but I
cannot do the former with btrfs RAID, which in turn has the nice
feature of being able to (try to) recover from silent block corruption
(via the checksums), which MD RAID cannot.


> For stability, the kernel, device drivers, dm-crypt, LVM, btrfs,
> etc., 
> need to function correctly under concurrent workloads.  Choose your 
> software accordingly.
Well...are there any current known issues in here? I used to remember
that btrfs once had problems on top of dm-crypt, but that's long ago.


Thanks,
Chris.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt

[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux