Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-07-06 Thread Yu Chen
Sorry for late reply. On Fri, Jul 06, 2018 at 12:16:37AM +0800, joeyli wrote: > Hi Chen Yu, > > On Wed, Jun 20, 2018 at 05:39:37PM +0800, Chen Yu wrote: > > Hi, > > As security becomes more and more important, we add the in-kernel > > encryption support for hibernation. > > > > This prototype is

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-07-05 Thread joeyli
Hi Chen Yu, On Wed, Jun 20, 2018 at 05:39:37PM +0800, Chen Yu wrote: > Hi, > As security becomes more and more important, we add the in-kernel > encryption support for hibernation. > > This prototype is a trial version to implement the hibernation > encryption in the kernel, so that the users do

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-25 Thread Rafael J. Wysocki
On Mon, Jun 25, 2018 at 1:59 PM, Pavel Machek wrote: > > >> > Well, AFAICT in this case userland has the key and encrypted data are >> > on disk. That does not seem to be improvement. >> >> Not really. >> >> With the encryption in the kernel, if the kernel is careful enough, >> use space will not

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-25 Thread Pavel Machek
> > Well, AFAICT in this case userland has the key and encrypted data are > > on disk. That does not seem to be improvement. > > Not really. > > With the encryption in the kernel, if the kernel is careful enough, > use space will not be able to read the image even if it knows the > passphrase,

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-25 Thread Pavel Machek
On Fri 2018-06-22 10:14:10, Yu Chen wrote: > Hi, > On Thu, Jun 21, 2018 at 09:14:43PM +0200, Pavel Machek wrote: > > On Thu 2018-06-21 14:08:40, Rafael J. Wysocki wrote: > > > On Thu, Jun 21, 2018 at 10:53 AM, Pavel Machek wrote: > > > > Hi! > > > > > > > >> As security becomes more and more impor

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-25 Thread Rafael J. Wysocki
On Thu, Jun 21, 2018 at 9:14 PM, Pavel Machek wrote: > On Thu 2018-06-21 14:08:40, Rafael J. Wysocki wrote: >> On Thu, Jun 21, 2018 at 10:53 AM, Pavel Machek wrote: >> > Hi! >> > >> >> As security becomes more and more important, we add the in-kernel >> >> encryption support for hibernation. >> >

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-21 Thread Yu Chen
Hi, On Thu, Jun 21, 2018 at 09:14:43PM +0200, Pavel Machek wrote: > On Thu 2018-06-21 14:08:40, Rafael J. Wysocki wrote: > > On Thu, Jun 21, 2018 at 10:53 AM, Pavel Machek wrote: > > > Hi! > > > > > >> As security becomes more and more important, we add the in-kernel > > >> encryption support for

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-21 Thread Pavel Machek
On Thu 2018-06-21 14:08:40, Rafael J. Wysocki wrote: > On Thu, Jun 21, 2018 at 10:53 AM, Pavel Machek wrote: > > Hi! > > > >> As security becomes more and more important, we add the in-kernel > >> encryption support for hibernation. > > ... > >> There was a discussion on the mailing list on whethe

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-21 Thread Rafael J. Wysocki
On Thu, Jun 21, 2018 at 10:53 AM, Pavel Machek wrote: > Hi! > >> As security becomes more and more important, we add the in-kernel >> encryption support for hibernation. > ... >> There was a discussion on the mailing list on whether this key should >> be derived in kernel or in user space. And it

Re: [PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-21 Thread Pavel Machek
Hi! > As security becomes more and more important, we add the in-kernel > encryption support for hibernation. ... > There was a discussion on the mailing list on whether this key should > be derived in kernel or in user space. And it turns out to be generating > the key by user space is more accep

[PATCH 0/3][RFC] Introduce the in-kernel hibernation encryption

2018-06-20 Thread Chen Yu
Hi, As security becomes more and more important, we add the in-kernel encryption support for hibernation. This prototype is a trial version to implement the hibernation encryption in the kernel, so that the users do not have to rely on third-party tools to encrypt the hibernation image. The only d