OpenBSD disk encryption (2015)

http://xn--thibaud-dya.fr/openbsd_softraid.html

by pentestercrab • 10 years ago

81 12 10 years ago

akerro2• 10 years ago

Recently there are more and more BSD related news :)

microtonal• 10 years ago

I think that's great. The BSD projects have been extremely undervalued. OpenBSD provides OpenSSH, LibreSSL, etc. FreeBSD provided a lot code to Mac OS X and used used in a some commercial products (Playstation's OS, Juniper routers, etc.).

The BSDs have worked on shoestring budgets. Let's hope this attention leads to more sponsorship!

akerro2• 10 years ago

And DragonFlyBSD provides HAMMER https://www.dragonflybsd.org/hammer/

Worth mentioning, BSD were the only systems that disabled Intels RNG after leaks that it might be compromised and Intel cooperate with NSA.

https://www.freebsdfoundation.org/donate/

https://www.openbsd.org/donations.html

https://www.dragonflybsd.org/donations/

tlsfan• 10 years ago

Like this: https://news.ycombinator.com/item?id=12431248

dimman• 10 years ago

I think that almost every experienced Linux user has some secret love for *BSD deep down, myself included. They just seem to get it right for the majority of times.

0x0• 10 years ago

What's with this highlighted comment? Are you guaranteed corruption on every half terabyte?

"XXX - this does not handle the case where the read/write spans across a different key blocks (e.g. 0.5TB boundary). Currently this is already broken by the use of scr_key[0] below."

nnn• 10 years ago

Based on my reading of the article, it says that OpenBSD always uses the same key, scr_key[0], and does not implement the use of different keys for different parts of the disk. I haven't looked at the OpenBSD source code to confirm this, though.

ktta• 10 years ago

interesting domain name. HN shows it as xn--thibaud-dya.fr but browers show it as thiebaud.fr (accented e) . Reminds me of something I read here on HN about a month ago about the history of web/URLs

RJIb8RBYxzAMX9u• 10 years ago

It's Punycode.

https://en.wikipedia.org/wiki/Punycode

In Firefox, you can force it to always show the encoded form, as HN had, with network.IDN_show_punycode. Not as pretty, but may protect you against homograph attacks.

https://en.wikipedia.org/wiki/IDN_homograph_attack

OpenBSD disk encryption (2015)

Related Stories