toad wrote on 4/10/01 9:32 pm:

<>

> Put the 
>key file on the RAMfs, right. 
>Add it to some FAQ 
>somewhere.

I think this would be as simple as providing an option in the config
file saying 'Where should I store the encryption key?'  People
with good OSen that don't reboot ever can specify that file
to be on a mounted RAM disk.  To help facilitate this, the encryption
key should only be held in real memory while it needs to be used
and then immedately destroyed.  This helds ensure that
the key *never* hits swap space.


Timm Murray

-----------
Somewhere, their is an english major getting mad at me for using the wrong

Reply via email to