encrypted swap question

Mike C mike.cloaked at gmail.com
Tue Aug 5 17:37:16 UTC 2008


Frank Cox <theatre <at> sasktel.net> writes:

> What's the point of encrypting a partition and then keeping the key for that
> partition on the hard drive so you don't have to enter anything to access it?

Well - if unencrypted then in principle in the even of theft the swap partition
would have information in clear which could be read.  If the root partition
contains the luks keyfile and you need a luks passphrase to open the / partition
then in principle there is no unencrypted information on any of the partitions
that could easily be accessed since the / partition needs to be opened with 
a luks passphrase before the keyfile to open the swap partition could be
accessed. 







More information about the users mailing list