encrypted swsusp image
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 52 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | core functionalitykernel/ | +153 | 50 replies | |
| 2/3 | configurationkernel/ | +11 | 0 replies | |
| 3/3 | documentationDocumentation/ | +7 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH encrypted swsusp 0/3] encrypted swsusp image
The following patches allow for encryption of the on-disk swsusp image to prevent data gathering of e.g. in-kernel keys or mlocked data after resume.
For this purpose the aes cipher must be compiled into the kernel as module load is not possible at resume time.
A random key is generated at suspend time, stored in the suspend header on disk and deleted from the header at resume time. If you don't resume a mkswap on the suspend partition will also delete the temporary key.
Only the data pages are encrypted as only these may contain sensitive data.
This works on my x86_64 laptop (64bit mode) and probably needs testing on other platforms.
Signature · 1 line
Andreas Steinmetz SPAMmers use [email protected]