keyfile on another HDD.

Pawel Jakub Dawidek pjd at FreeBSD.org
Fri Dec 28 12:59:28 UTC 2012


On Mon, Dec 24, 2012 at 11:42:22PM +0300, Блогер wrote:
> В ответ на сообщение товарища Alaksiej Carniajeu,
> датированное 2012-12-24 17:05:
> 
> > > Is it possible to read key file from another HDD with FAT16 during
> > > system boot?
> > 
> > Why do you want it (if it's not a big secret)?
> For security and practical reason. It will be more easy to hide and copy
> back (make available) my key when I need it.
> 
> I have another question: how long (in bytes) can be geli key file?

There is no limit on keyfile size. geli(8) reads entire thing and adds
everything to HMAC along the way.

-- 
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://tupytaj.pl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-geom/attachments/20121228/26746850/attachment.sig>


More information about the freebsd-geom mailing list