linux-ext4 - state of ext4 encryption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <d938b36d643ed1a14a7c9dead66cbd30@mail.ud19.udmedia.de>
Date:	Wed, 13 Jul 2016 20:40:42 +0200
From:	Matthias Dahl <ml_linux-kernel@...ary-island.eu>
To:	linux-ext4@...r.kernel.org
Subject: state of ext4 encryption

Hello,

I am currently setting up a new machine and I am looking into encryption
to be able to better deal with faulty disks (e.g. sending them in for
warranty or throwing them away) without having to worry that private
and/or business data is still readable to anyone when wiping them is no
longer possible (e.g. defects, relocated sectors, ...).

So, dm-crypt is causing me some unfortunate headaches at this point and
thus I am considering the ext4 fs encryption.

To make a long story short: I could not find any recent updates on what
state it is currently considered to be in? Is it ready to be used or is
it still too early?

I heard rumors that Android N will possibly already replace dm-crypt w/
ext4's fs encryption? Is that true? That would naturally show quite a
sign of confidence. ;-)

And last but not least: I guess full fs encryption (as-in: everything
from the root down) will be rather problematic?

Since I currently have to make do with a crappy webmail interface until
I have the new machine up, I am not subscribed to the list and would ask
to be cc'd.

Thanks,
Matthias

-- 
Dipl.-Inf. (FH) Matthias Dahl | Software Engineer | binary-island.eu
  services: custom software [desktop, mobile, web], server administration
--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html