geli overhead?

RW rwmaillists at googlemail.com
Thu Feb 7 19:51:31 UTC 2013


On Mon, 4 Feb 2013 22:25:33 +0100
mhca12 wrote:


> Does skipping authentication also remove the requirement of
> zeroing the whole eli disk for the checksums?

It's not needed from that perspective, but it makes it a bit more
secure if you do that or fill the device from /dev/random before the
init. If you don't do either an attacker may be able infer information
about the layout of files. 



More information about the freebsd-questions mailing list