Re: Full disk encryption without root partition

2012-12-30 Thread RW
On Sun, 30 Dec 2012 10:34:51 +0100 David Demelier wrote: > I think a good idea would be to store the key directly in the > bootloader, but that needs a large enough partition scheme that can > store the bootloader (boot0 or boot1) plus the encryption key. > However this needs to add support for

Re: Full disk encryption without root partition

2012-12-30 Thread mhca12
On Sun, Dec 30, 2012 at 10:30 AM, David Demelier wrote: > On 28/12/2012 12:29, mhca12 wrote: >> >> On Fri, Dec 28, 2012 at 9:33 AM, C-S wrote: >>> >>> >>>> Date: Wed, 26 Dec 2012 22:18:40 +0100 >>>> From: mhca12 >>>> To:

Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 28/12/2012 12:29, mhca12 wrote: On Fri, Dec 28, 2012 at 9:33 AM, C-S wrote: Date: Wed, 26 Dec 2012 22:18:40 +0100 From: mhca12 To: freebsd-questions@freebsd.org Subject: Re: Full disk encryption without root partition Message-ID: Content-Type: text/plain; charset=ISO-8859-1 On

Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 29/12/2012 23:53, Polytropon wrote: On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: So from the security point of view it might be a good choice to have a unencrypted and (hardware) readonly boot partition. To prevent unintended modification by of the boot process's components, an

Re: Full disk encryption without root partition

2012-12-29 Thread RW
On Sat, 29 Dec 2012 22:43:29 +0100 Martin Laabs wrote: > Hi, > > >> Are there any plans or is there already support for full > >> disk encryption without the need for a boot partition? > > Well - what would be your benefit? OK - you might not create another > partition but I think this is not th

Re: Full disk encryption without root partition

2012-12-29 Thread Polytropon
On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: > So from the security point of view it might be a good choice to have a > unencrypted and (hardware) readonly boot partition. To prevent unintended modification by of the boot process's components, an option would be to have the system boot

Re: Full disk encryption without root partition

2012-12-29 Thread Martin Laabs
Hi, >> Are there any plans or is there already support for full >> disk encryption without the need for a boot partition? Well - what would be your benefit? OK - you might not create another partition but I think this is not the problem. >From the point of security you would not get any improveme

Re: Full disk encryption without root partition

2012-12-29 Thread Bernt Hansson
2012-12-26 22:17, mhca12 skrev: Are there any plans or is there already support for full disk encryption without the need for a root partition? Not exactly what asked for, but here it is http://forums.freebsd.org/showthread.php?t=2775 ___ freebsd-que

Re: Full disk encryption without root partition

2012-12-28 Thread mhca12
On Fri, Dec 28, 2012 at 9:33 AM, C-S wrote: > >> Date: Wed, 26 Dec 2012 22:18:40 +0100 >> From: mhca12 >> To: freebsd-questions@freebsd.org >> Subject: Re: Full disk encryption without root partition >> Message-ID: >> >> Content-Type: text/p

Re: Full disk encryption without root partition

2012-12-28 Thread C-S
> Date: Wed, 26 Dec 2012 22:18:40 +0100 > From: mhca12 > To: freebsd-questions@freebsd.org > Subject: Re: Full disk encryption without root partition > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > On Wed, Dec 26, 2012 at 10:17 PM, mhca12 wr

Re: Full disk encryption without root partition

2012-12-26 Thread mhca12
On Wed, Dec 26, 2012 at 10:17 PM, mhca12 wrote: > Are there any plans or is there already support for full > disk encryption without the need for a root partition? I am sorry, I certainly meant to write "boot partition". ___ freebsd-questions@freebsd.or

Full disk encryption without root partition

2012-12-26 Thread mhca12
Are there any plans or is there already support for full disk encryption without the need for a root partition? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "fr