linux-ext4 - RE: Shred mount option for ext4?

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date:	Wed, 1 Nov 2006 08:57:37 -0800
From:	"Wolber, Richard C" <richard.c.wolber@...ing.com>
To:	"Andreas Dilger" <adilger@...sterfs.com>,
	"Nikolai Joukov" <kolya@...sunysb.edu>
Subject: RE: Shred mount option for ext4?

> On Wednesday, November 01, 2006 8:17 AM Andreas Dilger Wrote:
> 
> Did anyone discuss doing this with crypto instead of actually 
> overwriting the whole file?  It would be pretty easy to store 
> a per-file crypto key in each inode as an EA, then to 
> "delete" the file all that would be needed would be to erase 
> the key in a secure matter (which is a great deal easier 
> because inodes don't move around on disk).

If it's cheap to delete the keys, it's also cheap to harvest 
the keys. A per file crypto-key lowers the barrier to entry.

This is Schneier 101.

..Chuck..
-
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html