up vote -1 down vote favorite
share [g+] share [fb]

I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID.

  • Should I encrypt the drive partition, the software RAID device, or both?
  • Should I encrypt swap?

Wondering the pros/cons of each approach in case I mentally missed something.

Thanks

link|improve this question
40% accept rate
feedback

1 Answer

up vote 0 down vote

What sense should there be in encrypting both the md device and the underlying block device? It just slows things down.

Also, when using a RAID and encrypting the physical device, you would effectively encrypting the same set of data multiple times, again slowing things down.

As for encrypted Swap space: There can be intersting data in swapped out memory, but it depends on your threat model. If I would use encrypted disks, I would also encrypt swap space.

link|improve this answer
OK so should I encrypt the partition or the MD device? – Rob Olmos Dec 16 '11 at 18:47
@RobOlmos: Did you actually read my answer? If you encrypt the basic physical devices (possibly the partitions) of a software RAID, you will need to do the encryption multiple times, without any security benefit. – SvenW Dec 16 '11 at 18:51
@RobOlmos: Also, you should work on your accept ratio. – SvenW Dec 16 '11 at 18:54
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.