Re: encrypting swap

[Tom Vogt <tom@lemuria.org>]

"Strohm Thomas (FV/SLD) *" <Thomas.Strohm@de.bosch.com> wrote:
> I don't like very much the idea of an encrypted swap because of the large 
> performance penalty you're going to suffer.

unfortunately, there are many scenarios where "let's wipe the swap" doesn't
cut it. example: the evil guys storm your house and take the machine. the
power is gone, but it's not been through a shutdown procedure and you had
no chance to wipe anything.

*if* you are paranoid enough to be afraid of your own swap, you've got to
think about the worst-case scenarios. the example above and the residual
magnetism problem make anything but encryption not-good-enough.

-- 
"The net treats censorship as a malfunction and re-routes around it."
(John Gilmore)

Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/