Re: Using the filesystem's underlying block/sector/whatever info as part
of the crypto chain

Naive question: Won't this break in situations where the encrypted data
file is moved between dissimilar filesystems?  Or am I misunderstanding that
part of the conversation?

Example: create the encrypted data in a file on a zfs filesystem,
          un-lofi-mount it,
          copy the encrypted data file to an USB keychain drive,
          take it home,
          move it onto a CDROM and then
          try to lofi mount it and read the unencrypted data...

   -John

Reply via email to