Newbie Q: decryption
    Robert J. Hansen 
    rjh at sixdemonbag.org
       
    Tue Feb 27 06:13:18 CET 2007
    
    
  
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
> Having GnuPG use swap partitions/files is a risky business.
As a general principle, I'm unconvinced of the truth of this as a  
general statement.
It's risky within certain security models.  Let's not go about saying  
it's universally risky.  Let's also not recommend encrypting swap  
space _a priori_ without also warning people of the (massive)  
performance penalty that can result from encrypted swap.  I recall  
seeing some numbers from OpenBSD that indicated encrypted swap  
resulted in a 33% slowdown for swap access compared to unencrypted  
swap.  This could be related to OpenBSD internals or it could be  
indicative of a deeper problem with encrypted swap.  Either way, the  
potential downsides of encrypted swap should be considered before  
anyone decides to undertake this.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (Darwin)
iQEcBAEBCAAGBQJF473vAAoJELcA9IL+r4EJrHgH/2azJYCxZXWYd53Ir6f7AwSe
X3XmXaX4w3lSD9JbaF7xPlTSlLZThuyfEC59hOKUWiPAd9QcJwkySOx0/rrwVZRp
sAArZgGaTbvInn7R7xKWSUrztXJtM/fNRuP3UOCg7hvNtdVe2E7Oe2Q60fl753Om
p6vk3H93dwyIG2tbJqnJUAXyBhx/Mm5ULct4F99zXHdtgWpvIaylkR0CNvAiLUfM
bm/8zk1uXY+4dAJONUB7uQITMynpbwCEGan9ej8JsQMt5Bv1rDZLW5fc7ra+MLG+
UMEDdFTa7KoRU1c3ljM+dwuzub9+CFoeevsDIUEJ5wn1no2ou/HFuWk4aW44Zto=
=kZwk
-----END PGP SIGNATURE-----
    
    
More information about the Gnupg-users
mailing list