From: Mikko Rauhala <mjrauhal@cc.helsinki.fi>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] Hybrid drives
Date: Sat, 17 Jul 2010 14:05:48 +0300 [thread overview]
Message-ID: <1279364748.28285.5.camel@phantom.hip> (raw)
In-Reply-To: <20100717094646.GA8391@fancy-poultry.org>
la, 2010-07-17 kello 11:46 +0200, Heinz Diehl kirjoitti:
> As far as I understand, the SSD part of these hybrid drives is used as a
> cache, which doesn't loose its data when powered off.
Correct, but the same of course applies for the disk itself.
It doesn't magically cache the computer's unencrypted memory, merely
what's written on the disk. If that includes unencrypted encryption
keys, you'd have the same problem without said cache.
The most the SSD cache can do to harm you is to perhaps have leftover
overwritten old data that wouldn't otherwise exist on the drive anymore.
But with proper use of dm-crypt, any such leftovers would be encrypted
along with the rest of it.
> When you format the disc using "cryptsetup luksFormat", the 4 GB SSD part
> isn't included. Please correct me if I'm wrong.
You're wrong in a very confused way. The SSD never stores anything that
wasn't on the hard disk, and only a part of that anyway. All operations
on the disk likewise indirectly affect the SSD cache.
--
Mikko Rauhala <mjr@iki.fi> - http://www.iki.fi/mjr/blog/
The Finnish Pirate Party - http://piraattipuolue.fi/
World Transhumanist Association - http://transhumanism.org/
Singularity Institute - http://singinst.org/
next prev parent reply other threads:[~2010-07-17 11:04 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-07-17 7:13 [dm-crypt] Hybrid drives Heinz Diehl
2010-07-17 7:17 ` Heinz Diehl
2010-07-17 7:58 ` Luca Berra
2010-07-17 9:46 ` Heinz Diehl
2010-07-17 11:05 ` Mikko Rauhala [this message]
2010-07-17 11:45 ` Heinz Diehl
2010-07-17 13:27 ` Sven Eschenberg
2010-07-17 11:10 ` Christoph Anton Mitterer
2010-07-17 10:57 ` Christoph Anton Mitterer
2010-07-18 17:01 ` Arno Wagner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1279364748.28285.5.camel@phantom.hip \
--to=mjrauhal@cc.helsinki.fi \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.