Re: geli keys

2010-10-25 Thread RW
On Mon, 25 Oct 2010 10:07:11 +0700 Victor Sudakov suda...@sibptus.tomsk.ru wrote: RW wrote: The geli(8) man page suggests initializing a geli provider with a random keyfile (geli init -K). It also asks for a passphrase by default. What happens if a provider is initialized

geli keys

2010-10-24 Thread Victor Sudakov
Colleagues, The geli(8) man page suggests initializing a geli provider with a random keyfile (geli init -K). It also asks for a passphrase by default. What happens if a provider is initialized without the -K option, just with a passphrase? Will there be no encryption? Encryption will be weaker?

Re: geli keys

2010-10-24 Thread RW
On Sun, 24 Oct 2010 17:14:57 +0700 Victor Sudakov suda...@sibptus.tomsk.ru wrote: Colleagues, The geli(8) man page suggests initializing a geli provider with a random keyfile (geli init -K). It also asks for a passphrase by default. What happens if a provider is initialized without the

Re: geli keys

2010-10-24 Thread Roland Smith
On Sun, Oct 24, 2010 at 05:14:57PM +0700, Victor Sudakov wrote: Colleagues, The geli(8) man page suggests initializing a geli provider with a random keyfile (geli init -K). It also asks for a passphrase by default. What happens if a provider is initialized without the -K option, just with

Re: geli keys

2010-10-24 Thread Victor Sudakov
RW wrote: The geli(8) man page suggests initializing a geli provider with a random keyfile (geli init -K). It also asks for a passphrase by default. What happens if a provider is initialized without the -K option, just with a passphrase? Will there be no encryption? Encryption will

Re: Getting GELI Keys from Floppy

2006-09-07 Thread Nikos Vassiliadis
On Thursday 07 September 2006 00:00, Frank Steinborn wrote: Hello, i want to encrypt my HDD's with GELI (not the root-fs, though). I want to do the encryption without password, just with a key. The key should be stored in a floppy disk, and the read should be read automatically on boot, from

Re: Getting GELI Keys from Floppy

2006-09-07 Thread Frank Steinborn
Nikos Vassiliadis wrote: Are you sure you want to trust a floppy disk for your keys?? It's not the most safe medium these days... I'll backup the keys on CD. It's just that I don't want to waste a CD-ROM drive in this server. There is a problem here, because GELI initializes _before_

Re: Getting GELI Keys from Floppy

2006-09-07 Thread Matt Piechota
On Thu, 7 Sep 2006, Frank Steinborn wrote: I could use /dev/fd0 directly but then I had to use the same key for all 6 HDD's in the server. I got a solution by hacking /etc/rc.d/geli - I'm just mounting the floppy there before it tries to read the key. You could read different parts of the

Getting GELI Keys from Floppy

2006-09-06 Thread Frank Steinborn
Hello, i want to encrypt my HDD's with GELI (not the root-fs, though). I want to do the encryption without password, just with a key. The key should be stored in a floppy disk, and the read should be read automatically on boot, from the floppy. There is a problem here, because GELI initializes