[ltp] Encryption - security?

Tino Keitel linux-thinkpad@linux-thinkpad.org
Thu, 11 Aug 2005 14:38:02 +0200


On Tue, Aug 09, 2005 at 23:38:12 +0100, Richard Neill wrote:
> Is this safe?
> In particular, is it safe if stolen while the machine is suspended, with 
> /home mounted, but the screen locked?

Should be safe, but the machine can be resumed and it will run with all
encrypted partions mounted and networking enabled, which might give
some chance to break in.

> understand it!

You could also use suspend to disk to an encrypted device. I use
dm-crypt, newer versions of suspend2 also have native encryption
support via the crypto-API of the Linux kernel. This way, even after
resume from suspend a password is needed to get the machine back to
life.

Regards,
Tino