Re: [Suspend-devel] encryption docs

2007-08-14 Thread Luca
On 8/14/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > Hi! > > > > I think that adding the PK logic into suspend is an overkill... > > > Best to support only symmetric operations, and load symmetric key from > > > a file/handle as losetup does. > > > > The image is always encrypted with symmetric al

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Alon Bar-Lev
On 8/15/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > With symetric-operations only -- how do you set it up in a way that > passphrase is only needed during resume, not during boot or bootup? asymmetric... gpg is capable of it But never mind... > Yep, seen that. I don't get the "integrity veri

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Alon Bar-Lev
On 8/14/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > I don't think we can rely on external programs during > suspend/resume. suspend is pagelocked, so that we don't access > filesystems after snapshot is made. You can access initramfs... --

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Pavel Machek
On Tue 2007-08-14 23:07:56, Alon Bar-Lev wrote: > On 8/14/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > > Hi! > > > > I'd like to commit > > > > Suspend encryption > > ~~ > > > > Encryption in suspend.sf.net uses RSA internally; reason is that we > > want to only prompt for passphra

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Pavel Machek
On Tue 2007-08-14 23:55:27, Alon Bar-Lev wrote: > On 8/14/07, Luca <[EMAIL PROTECTED]> wrote: > > IOW we don't use RSA to encrypt the whole image ;) > > Sure you don't. > I referred the symmetric decryption... > This can be done using gpg or any other external decryption software. > > Something l

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Pavel Machek
Hi! > > I think that adding the PK logic into suspend is an overkill... > > Best to support only symmetric operations, and load symmetric key from > > a file/handle as losetup does. > > The image is always encrypted with symmetric algo. If RSA is used > (optional) then the key for the symmetric e

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Alon Bar-Lev
On 8/14/07, Luca <[EMAIL PROTECTED]> wrote: > IOW we don't use RSA to encrypt the whole image ;) Sure you don't. I referred the symmetric decryption... This can be done using gpg or any other external decryption software. Something like: resume --get-key-meterial | gpg --decrypt | resume When yo

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Luca
On 8/14/07, Alon Bar-Lev <[EMAIL PROTECTED]> wrote: > On 8/14/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > > Hi! > > > > I'd like to commit > > > > Suspend encryption > > ~~ > > > > Encryption in suspend.sf.net uses RSA internally; reason is that we > > want to only prompt for pass

Re: [Suspend-devel] encryption docs

2007-08-14 Thread Alon Bar-Lev
On 8/14/07, Pavel Machek <[EMAIL PROTECTED]> wrote: > Hi! > > I'd like to commit > > Suspend encryption > ~~ > > Encryption in suspend.sf.net uses RSA internally; reason is that we > want to only prompt for passphrase on resume. So, during suspend, > image is effectively encrypted w

[Suspend-devel] encryption docs

2007-08-14 Thread Pavel Machek
Hi! I'd like to commit Suspend encryption ~~ Encryption in suspend.sf.net uses RSA internally; reason is that we want to only prompt for passphrase on resume. So, during suspend, image is effectively encrypted with public key, and during resume, user has to first decrypt private