[Bug 1210264] New installation option: partial disk encryption with Trusted Platform
https://bugzilla.suse.com/show_bug.cgi?id=1210264 https://bugzilla.suse.com/show_bug.cgi?id=1210264#c2 --- Comment #2 from S��awomir Lach <slawek@lach.art.pl> --- (In reply to Stefan Hundhammer from comment #1)
First of all, this is clearly a feature request, not a bug.
Why do you think dividing up the root filesystem into an encrypted and an unencrypted part would save any disk space? It only makes things more complicated; a LOT more complicated, actually.
Any miniscule performance gain by not needing to decrypt every disk block while reading would immediately be out the window by the need to constantly check everything while reading, as you suggest.
You can already verify individual or all software packages with "rpm --verify" (see "man rpm" for more details) if you want to do this every now and then. Doing it all the time would be a huge performance drain. That's basically combining all the disadvantages of an unencrypted filesystem and an encrypted filesystem into one.
I do not perform calculation of cpu power needed to check checksum. And I though encrypting disk force bigger memory usage. If it is not the case (space usage for encrypted partition), I do bad decision (my disk is unencrypted). If encryption on OpenSUSE enforces bigger space usage, maybe allow to use algorithm without bigger space usage than unencrypted data? -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com