Aha.

*Is* the keydisk the master key, and hence can't be changed?


Very low priority topic:

What about implementing some routine for regenerating the master key, even if that would imply reprocessing *all* of the disk's contents?

That could be beneficial in a place where you don't have the space to backup 100% of the disk as to start over.

On 2015-11-21 03:03, Ted Unangst wrote:
Tinker wrote:
Aha.

*Is* the keydisk the master key, and hence can't be changed?

The keydisk is the mask for the master key. It can (in theory) be changed like
changing a password. Really, the key disk is just a prehashed password.



Very low priority topic:

What about implementing some routine for regenerating the master key,
even if that would imply reprocessing *all* of the disk's contents?

That could be beneficial in a place where you don't have the space to
backup 100% of the disk as to start over.

You could, but you'd be really screwed if you crashed halfway. I don't think the kernel can/should do this, but it is not impossible for a userland utility
to manipulate softraid partitions.

Reply via email to