Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 29/12/2012 23:53, Polytropon wrote: On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: So from the security point of view it might be a good choice to have a unencrypted and (hardware) readonly boot partition. To prevent unintended modification by attacker of the boot process's

Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 28/12/2012 12:29, mhca12 wrote: On Fri, Dec 28, 2012 at 9:33 AM, C-S c...@c-s.li wrote: Date: Wed, 26 Dec 2012 22:18:40 +0100 From: mhca12 mhc...@gmail.com To: freebsd-questions@freebsd.org Subject: Re: Full disk encryption without root partition Message-ID

Re: Full disk encryption without root partition

2012-12-30 Thread mhca12
: Full disk encryption without root partition Message-ID: cahuomant1m446mvy85r7epbd2pw14gdl03fpmvpmksrr_ep...@mail.gmail.com Content-Type: text/plain; charset=ISO-8859-1 On Wed, Dec 26, 2012 at 10:17 PM, mhca12 mhc...@gmail.com wrote: Are there any plans or is there already support for full

Re: Full disk encryption without root partition

2012-12-30 Thread RW
On Sun, 30 Dec 2012 10:34:51 +0100 David Demelier wrote: I think a good idea would be to store the key directly in the bootloader, but that needs a large enough partition scheme that can store the bootloader (boot0 or boot1) plus the encryption key. However this needs to add support for

Re: Full disk encryption without root partition

2012-12-29 Thread Bernt Hansson
2012-12-26 22:17, mhca12 skrev: Are there any plans or is there already support for full disk encryption without the need for a root partition? Not exactly what asked for, but here it is http://forums.freebsd.org/showthread.php?t=2775 ___

Re: Full disk encryption without root partition

2012-12-29 Thread Martin Laabs
Hi, Are there any plans or is there already support for full disk encryption without the need for a boot partition? Well - what would be your benefit? OK - you might not create another partition but I think this is not the problem. From the point of security you would not get any improvement

Re: Full disk encryption without root partition

2012-12-29 Thread Polytropon
On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: So from the security point of view it might be a good choice to have a unencrypted and (hardware) readonly boot partition. To prevent unintended modification by attacker of the boot process's components, an option would be to have the

Re: Full disk encryption without root partition

2012-12-29 Thread RW
On Sat, 29 Dec 2012 22:43:29 +0100 Martin Laabs wrote: Hi, Are there any plans or is there already support for full disk encryption without the need for a boot partition? Well - what would be your benefit? OK - you might not create another partition but I think this is not the problem.

Re: Full disk encryption without root partition

2012-12-28 Thread C-S
Date: Wed, 26 Dec 2012 22:18:40 +0100 From: mhca12 mhc...@gmail.com To: freebsd-questions@freebsd.org Subject: Re: Full disk encryption without root partition Message-ID: cahuomant1m446mvy85r7epbd2pw14gdl03fpmvpmksrr_ep...@mail.gmail.com Content-Type: text/plain; charset=ISO-8859-1

Re: Full disk encryption without root partition

2012-12-28 Thread mhca12
On Fri, Dec 28, 2012 at 9:33 AM, C-S c...@c-s.li wrote: Date: Wed, 26 Dec 2012 22:18:40 +0100 From: mhca12 mhc...@gmail.com To: freebsd-questions@freebsd.org Subject: Re: Full disk encryption without root partition Message-ID: cahuomant1m446mvy85r7epbd2pw14gdl03fpmvpmksrr_ep

Full disk encryption without root partition

2012-12-26 Thread mhca12
Are there any plans or is there already support for full disk encryption without the need for a root partition? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: Full disk encryption without root partition

2012-12-26 Thread mhca12
On Wed, Dec 26, 2012 at 10:17 PM, mhca12 mhc...@gmail.com wrote: Are there any plans or is there already support for full disk encryption without the need for a root partition? I am sorry, I certainly meant to write boot partition. ___