cow versus data erasure

cow versus data erasure

[radames42]

RGVhciBhbGwsDQoNCnNpbmNlIGJ0cmZzIHVzZXMgY293IEkgd29uZGVyIGhvdyBJIGNhbiBlcmFz
ZSBjb25maWRlbnRpYWwgZGF0YS4NCg0KUmVwbGFjaW5nIHRoZSBmaWxlIGRvZXMgbm90IHdvcmss
IHNpbmNlIHRoZSBuZXcgY29udGVudCBpcyB3cml0dGVuIHRvIG5ldyBibG9ja3Mgd2hpbGUgdGhl
IG9sZCBjb25maWRlbnRpYWwgY29udGVudCByZW1haW5zIGluIGl0cyBvbGQgYmxvY2sgKHdoaWNo
IG1heSBiZSB1bnVzZWQgbm93IC0gZGVwZW5kaW5nIG9uIHNuYXBzaG90cykuDQoNCklzIHRoZXJl
IGEgbWV0aG9kIHRvIG92ZXJ3cml0ZSB0aGUgYmxvY2tzIG9mIGEgZmlsZSAoaWYgdGhlcmUgYXJl
IG5vIHNuYXBzaG90cyBwb2ludGluZyB0byBpdCk/DQoNCkFsdGVybmF0aXZlcyBhcmU6DQotIHVz
aW5nIGVuY2ZzIHRvIHNhdmUgY29uZmlkZW50aWFsIGRhdGENCi0gdXNpbmcgbHVrcyB0byBlbmNy
eXB0IHRoZSB3aG9sZSBkaXNrL3BhcnRpdGlvbg0Kb3RoZXIgc3VnZ2VzdGlvbnM/DQoNCktpbmQg
cmVnYXJkcywNClJhZGFtZXMNCg0KDQoKCi0tLQpOdXR6ZW4gU2llIGZyZWVuZXQgTWFpbCBvcHRp
bWFsIGFuZ2VwYXNzdCBmw7xyIElociBpUGhvbmUsIEFuZHJvaWQgb2RlciBOb2tpYSBIYW5keSBh
dWNoIHZvbiB1bnRlcndlZ3MuCkFsbGUgSW5mb3MgdW5kIERvd25sb2FkIHVudGVyIGh0dHA6Ly9t
YWlsLmZyZWVuZXQuZGUvbW9iaWxlLWVtYWlsL2luZGV4Lmh0bWwKCg==

Re: cow versus data erasure

[Swâmi Petaramesh]

Le dimanche 15 mai 2011 =C3=A0 11:43 +0200, radames42@freenet.de a =C3=A9=
crit :

> since btrfs uses cow I wonder how I can erase confidential data.
> Replacing the file does not work, since the new content is written to=
 new
> blocks while the old confidential content remains in its old block (w=
hich
> may be unused now - depending on snapshots).

Yep. COW filesystems typically do not allow secure deletion, there's no
way to work around this AFAIK.

> Alternatives are:
> - using encfs to save confidential data
> - using luks to encrypt the whole disk/partition
> other suggestions?

I'm currently writing this message from a machine using a BTRFS inside
an LVM built upon LUKS. That works fine.

I also use some ecryptfs on other machines, that comes standard with
Ubuntu and is allright.

It may be worth noting that encryption is not equivalent to secure
deletion : If it's secure-deleted, it's truly gone. If it's "unsecurely=
"
deleted from an encrypted container, somebody getting the decryption
key, possibly by force, might be able to recover the data.

OTOH, even though COW filesystems don't allow secure deletion, they're
typically known to generally not have any reliable "undelete" tools, an=
d
COW filesystems have a greater chance to overwrite relased blocks soone=
r
than non-COW FSes would do, so the average lifespan of "parts of erased
files data on disk" is probably typically much shorter with a COW FS
than with a non-COW one.

--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" =
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: cow versus data erasure

[Radames]

A method to overwrite all unused block may be another alternative.

<radames42 <at> freenet.de> writes:
> since btrfs uses cow I wonder how I can erase confidential data.
> 
> Alternatives are:
> - using encfs to save confidential data
> - using luks to encrypt the whole disk/partition
> other suggestions?

Kind regards,
Radames