Re: geli - why do I need a keyfile

2018-09-15 Thread Lee Brown
On Sat, Sep 15, 2018 at 12:18 PM, RW via freebsd-geom < freebsd-geom@freebsd.org> wrote: > On Fri, 14 Sep 2018 17:55:58 -0700 > Lee Brown wrote: > > > I want to create a geli provider as authentication only, no password, > > no encryption. I do: > ... > > Instead: > > # echo " " > /tmp/key > > so

Re: geli - why do I need a keyfile

2018-09-15 Thread RW via freebsd-geom
On Fri, 14 Sep 2018 17:55:58 -0700 Lee Brown wrote: > I want to create a geli provider as authentication only, no password, > no encryption. I do: ... > Instead: > # echo " " > /tmp/key > solves that issue, but I still don't get why I even need a key file > with -e NULL? Because HMAC itself need

geli - why do I need a keyfile

2018-09-14 Thread Lee Brown
I want to create a geli provider as authentication only, no password, no encryption. I do: # geli init -a HMAC/SHA256 -e NULL -P -s 4096 geli: No key components given. instead I tried # touch /tmp/key # geli init -a HMAC/SHA256 -e NULL -P -s 4096 -k /tmp/key test it # geli attach -p -k /tmp/key