Bug 807494 - LUKS setup inefficiency
Summary: LUKS setup inefficiency
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: doc-Security_Guide
Version: 6.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Martin Prpič
QA Contact: ecs-bugs
URL:
Whiteboard:
: 834463 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-03-28 00:08 UTC by Pádraig Brady
Modified: 2016-01-04 14:47 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-02-25 13:39:26 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Pádraig Brady 2012-03-28 00:08:27 UTC
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-LUKS_Disk_Encryption-Manually_Encrypting_Directories-Step_by_Step_Instructions.html

Step 5

dd if=/dev/urandom ... is used rather than the equivalent shred,
which is much faster, and also gives a progress report.
Also the following note is less than informative,
and is a bit facetious in telling users to leave the command
running overnight!

I've updated step 5 at the fedora wiki as to how I think it should read:
https://fedoraproject.org/wiki/Implementing_LUKS_Disk_Encryption
(I wouldn't include the mention of scrub or wipe from there)

Note I'm quite sure the PRNG within shred is good enough for this operation:
http://burtleburtle.net/bob/rand/isaacafa.html

Comment 3 Martin Prpič 2012-11-12 12:30:36 UTC
*** Bug 834463 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.