Announcement
Collapse
No announcement yet.
OpenSUSE Expanding Encryption Options For Its Installer
Collapse
X
-
I hope they make encryption setups faster at decrypting during boot... it takes a long time after I give password and hit enter...
-
Originally posted by lsatenstein View PostIn a parallel topic, What about zypper downloads. I presume that each downloaded item is signed
should that download be done using SSH? (Avoids man in the middle attack where, in a download session, a signed module could be substituted
If that happened, SSH won't help you much.
Leave a comment:
-
In a parallel topic, What about zypper downloads. I presume that each downloaded item is signed but if not already, should that download be done using SSH? (Avoids man in the middle attack where, in a download session, a signed module could be substituted
Leave a comment:
-
Originally posted by anarki2 View PostMore stuff only nerds care about. How about make encryption usable. Use TPM unlock without messing around in dracut and shit, and the user literally won't even notice encryption's present. As it should be.
Leave a comment:
-
More stuff only nerds care about. How about make encryption usable. Use TPM unlock without messing around in dracut and shit, and the user literally won't even notice encryption's present. As it should be.
Leave a comment:
-
Guest repliedI've actually encrypted swap with that "random keys on every boot" option. It wasn't working properly though, because systemd was doing this silly auto-detect thing and trying to mount it as a normal swap partition. I got it working now after disabling that systemd feature for that partition.
I don't remember if I enabled zram and zswap, got to check. I don't think there will be any problems though.
- Likes 1
Leave a comment:
-
Michael
SUSE is also exploring adding other encryption options -- including general support for LUKS2 over LUKS1
Anyhoo, I wonder if that encrypted swap stuff applies to zram/zswap. A quick crtl+f didn't find any mention of those.
- Likes 2
Leave a comment:
-
OpenSUSE Expanding Encryption Options For Its Installer
Phoronix: OpenSUSE Expanding Encryption Options For Its Installer
While Ubuntu developers are busy adding experimental ZFS support to their installer, the SUSE developers working on their YaST installer are working on offering better security options for their platform by beefing up the encryption capabilities at install-time...
Tags: None
Leave a comment: