public inbox for cryptsetup@lists.linux.dev
 help / color / mirror / Atom feed
From: Arno Wagner <wagner@arnowagner.info>
To: cryptsetup@lists.linux.dev
Subject: Re: Is it possible to set the amount of CRC32C hashes per a data sector in integritysetup?
Date: Mon, 11 Sep 2023 00:05:13 +0200	[thread overview]
Message-ID: <20230910220513.GA30714@tansi.org> (raw)
In-Reply-To: <207ef66a-7797-480e-8ffd-75fd8c5c1d97@home.arpa>

On Sun, Sep 10, 2023 at 18:53:04 CEST, Michael Kjörling wrote:
> On 10 Sep 2023 18:12 +0300, from bodqhrohro@gmail.com (Горбешко Богдан):
> > AFAIU, the primary goal of dm-integrity is checking if the data are not
> > corrupted and throwing read errors otherwise. Though it still supports
> > checksums besides of hashes. Can they be used for recovering the data
> > on-the-fly?
> 
> _My understanding_ (which may be wrong) is that this is not what
> dm-integrity is intended for; nor does it look like it supports it.
 
It is not. What this needs is things like RAID 1/5/6 (which can 
be done in files) and some specialized tools. 

Incidentally, "checksums" do never support recovery from 
errors. What you need for that is error correcting codes.
Transparently, RAID is probably the easiest option in Linux
and the one the works on sector-level. Given that modern drives
(HDD and SSDs) already do extensive error-correction, you probably
need to deal with whole-sector loss (or worse) to get any
additional effect. 

You can do RAID wia the md layer or integrated in some 
filesystems. 

If this is about some embedded device having its storage 
survive long-term, I suggest going for industrial flash
instead (often PCMCIA, sometimes SD) as that can be 
gotten with 10 years and more data lifetime. 

Regards,
Arno


-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier

  reply	other threads:[~2023-09-10 22:14 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-09-10 15:12 Is it possible to set the amount of CRC32C hashes per a data sector in integritysetup? Горбешко Богдан
2023-09-10 16:53 ` Michael Kjörling
2023-09-10 22:05   ` Arno Wagner [this message]
2023-09-11 10:12     ` Milan Broz

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20230910220513.GA30714@tansi.org \
    --to=wagner@arnowagner.info \
    --cc=arno@wagner.name \
    --cc=cryptsetup@lists.linux.dev \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox