RE: [Devil-linux-develop] vacation

[Bruce S. <bw...@ar...>]

> > btw, i'm interested in this patch:
> >
> > http://loop-aes.sourceforge.net/loop-AES.README
> >
> > it provides a secure loopback system, so you could use the aes modules
> from
> > kernel to have an encrypted loop device. it is backwards compatible with
> > the classic loop command.
> >[...]
> >
> > anyone/someone/everyone against? agree? opinions?
> 
> I would vote against the idea.
> 
> While AES is a very good encryption system, I would have to reasons against
> integrating it into DL (for the loopback):
> o Extra CPU power would be required to handle the AES decryption - and that
> is on top of the CPU power required to handle the decompression that is
> already required!  Remember - a lot of people run DL on some very old (and
> slow) processors.
> o Not sure I understand the need.  What is it about the ISO image that you
> believe requires the encryption?  I.e., what are you trying to protect?

I don't think you understand.  (or maybe I don't understand :)

I believe it's for creating encrypted filesystems, on a hard drive.
I don't think it has anything to do with the DL ISO image.
I also think it's completely optional, so no extra CPU power is required
unless you actually setup an encrypted filesystem (in a loopback file).

 - BS