Hibernation and secret keys

[Ingo Klöcker]

On Wednesday 11 February 2009, David Shaw wrote:
> On Wed, Feb 11, 2009 at 12:59:48PM +0100, Christoph Anton Mitterer 
wrote:
> > A good workaround is to use disk encryption (dm-crypt or similar
> > things).
>
> Encrypted disks don't help without serious OS support around suspend.

Obviously.


> Your machine suspends, and writes a snapshot of its memory to disk.
> Sure, let's say it's even encrypted.  When you wake the machine, is
> the encrypted disk still mounted?

Obviously not.

Usually your messages are very helpful. Unfortunately, this particular 
message is the exact opposite. Googling for "encryption suspend to disk 
linux" I found many websites explaining how this works with most common 
distributions (mostly out-of-the box, i.e. without compiling a kernel).


Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/attachments/20090211/a3134f62/attachment.pgp>