On Thu, 2009-02-12 at 00:09 +0100, Ingo Klöcker wrote:
> On Wednesday 11 February 2009, Christoph Anton Mitterer wrote:
> > On Wed, 2009-02-11 at 22:37 +0100, Ingo Klöcker wrote:
> > > > Your machine suspends, and writes a snapshot of its memory to
> > > > disk. Sure, let's say it's even encrypted.  When you wake the
> > > > machine, is the encrypted disk still mounted?
> > >
> > > Obviously not.
> >
> > Why? This IS of course possible...
> 
> Do you mean in a secure way? If yes, then that's not what I understood 
> that David meant.

He just meant that one has to now what one does in order to do it really 
secure, if I understood him correctly.


> USB stick and secure? :-)

Of course. The idea is that you can encrypt everything but the kernel
+initrd, which is needed in order to decrypt the partition (better said,
to set up the dm-crypt mapping).
And an USB stick could be always with you.


Chris.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to