Re: geli(8) breaks after a couple hours of uptime
--Sig_/FJored+Y1cbfkC5.k/EJO3Z
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
Pawel Jakub Dawidek <pjd@FreeBSD.org> wrote:
> On Sun, Feb 10, 2013 at 09:50:58AM +0200, Andriy Gapon wrote:
=20
> > I think that PAGE_SIZE (or at most a small multiple of it) should be
> > sufficient. I don't think that we currently have (or expect to see in
> > the near future) algorithms where keys with more than 4096 size
> > provide any additional security.
>=20
> geli(8) deals just fine with files that are larger than buffers, so even
> with smaller buffer it can read the data in few steps.
>=20
> The proposed patch is here if someone would like to give it a try:
>=20
> http://people.freebsd.org/~pjd/patches/geom_eli.c.patch
Works for me, thanks a lot.
I tested with a couple of geli providers ranging from
v3 AES-CBC 128 bit to v7 AES-XTS 256 bit and didn't get
any crashes.
Fabian
--Sig_/FJored+Y1cbfkC5.k/EJO3Z
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iEYEARECAAYFAlEYyvMACgkQBYqIVf93VJ0+5wCfTKTMcizs0Ar6apZ5nD7AHwWZ
U+gAn0UD1pRpg8lku8sVVlG4Y3F6uDTr
=ONNF
-----END PGP SIGNATURE-----
--Sig_/FJored+Y1cbfkC5.k/EJO3Z--
討論串 (同標題文章)
完整討論串 (本文為第 16 之 17 篇)：