Hibernation and secret keys

[David Shaw]

On Wed, Feb 11, 2009 at 12:59:48PM +0100, Christoph Anton Mitterer wrote:
> A good workaround is to use disk encryption (dm-crypt or similar things).

Encrypted disks don't help without serious OS support around suspend.
Your machine suspends, and writes a snapshot of its memory to disk.
Sure, let's say it's even encrypted.  When you wake the machine, is
the encrypted disk still mounted?  If so, then why would I care if
it's encrypted or not?

David