Speed isn't the only consideration. If you're using disk encryption, the only wa... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

reedalex01 on April 13, 2014 | parent | context | favorite | on: Linux 3.15 Can Resume From Suspend Faster

Speed isn't the only consideration. If you're using disk encryption, the only way to remove keys from RAM is to power off or hibernate. Preserving state between sessions with hibernation is much more convenient. Also, Linux only uses RAM * 2/5 as the size of the hibernation image [1]. You can make this even smaller by changing /sys/power/image_size. So with 16GB of RAM, it only has to write/read about 6.4GB.

[1] https://www.kernel.org/doc/Documentation/power/interface.txt

ciupicri on April 13, 2014 [–]

If you use hibernate won't the keys be stored on the swap partition?

reedalex01 on April 13, 2014 | [–]

You can use LVM to make the swap partition inside the encrypted container. If you don't want to use LVM, you can just use a swap file on an encrypted partition (but this isn't supported with btrfs).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact