Re: encrypting swap

[Tom Vogt <tom@lemuria.org>]

Tim Robbins <fyre@box3n.gumbynet.org> wrote:
> Quite a few programs do something similar to this but I can't think of any
> examples right now.

gpg (if installed suid root, since mlock requires root privs)

> I think encrypting swap would be hard to do quickly and securely - compare
> copying a file across a network using scp to using ftp. On low end
> hardware, the ftp transfer can go 10-20 times faster.

depends. if you use -c blowfish, current hardware (a p3) can satiate a 100
mbit ethernet. I know my old pentium 133 can satiate a 10 mbit ethernet
with blowfish.

-- 
"The net treats censorship as a malfunction and re-routes around it."
(John Gilmore)

Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/