From mboxrd@z Thu Jan 1 00:00:00 1970 From: Billy Crook Subject: Re: Encryption implementation like ZFS? Date: Fri, 30 Dec 2011 13:27:43 -0600 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Cc: linux-btrfs@vger.kernel.org To: Sandra Schlichting Return-path: In-Reply-To: List-ID: On Fri, Dec 30, 2011 at 12:32, Sandra Schlichting wrote: > According to [0] ZFS does encryption: > > One exception to this is the encryption support being added to the ZFS > filesystem. Filesystem metadata such as filenames, ownership, ACLs, > extended attributes are all stored encrypted on disk. The ZFS metadata > about the storage pool is still stored in the clear so it is possible > to determine how many filesystems (datasets) are available in the pool > and even which ones are encrypted but not what the content of the > stored files or directories are. How is this advantageous over dmcrypt-LUKS? LUKS has always been supported between the block device and a btrfs filesystem, and would not even let an attacker discern what type of file-system was in use.