The Handbook contains descriptions of GELI and GBDE for encrypting disk partitions; will both of these techniques remain available into the future? The fact that there are two implies (to me) that one may be on the way out, in preference of the other. In src/sys/geom/eli (RELENG_6) the oldest GELI sources are younger than the youngest GBDE stuff in src/sys/geom/bde. Is GBDE falling by the wayside in favor of GELI? Thanks for any information, Mike.
Definitely GELI. GBDE will become obsolete very soon as some other things like vinum and such. It was there just as a test of concept as I understand. Many those different disk subsystems are incompatible in fact, the case of GBDE and Vinum is mentioned as an example in the handbook. Read more about GEOM, as this system will unite all possible disk techniqies. Also, GELI takes advantage of crypto-hardware, but I believe that one gets a benefit out of it only if the main CPU is very slow. Michael C Voorhis said the following on 14.04.2007 18:07:> The Handbook contains descriptions of GELI and GBDE for encrypting > disk partitions; will both of these techniques remain available into > the future? The fact that there are two implies (to me) that one may > be on the way out, in preference of the other. > > In src/sys/geom/eli (RELENG_6) the oldest GELI sources are younger > than the youngest GBDE stuff in src/sys/geom/bde. Is GBDE falling by > the wayside in favor of GELI? > > Thanks for any information, > > Mike. > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" >
Oh, and of course! GELI allow selection of the algorithm, key length and such. GBDE uses AES-128 only. I migrated to GELI in December, 2006. After the problem I had was resolved: http://www.freebsd.org/cgi/query-pr.cgi?pr=104669 Honestly, I also had a problem with GELI data authentication support, but I don't really need it. Google and search the PR database to see what other folks had to say. Michael C Voorhis said the following on 14.04.2007 18:07:> The Handbook contains descriptions of GELI and GBDE for encrypting > disk partitions; will both of these techniques remain available into > the future? The fact that there are two implies (to me) that one may > be on the way out, in preference of the other. > > In src/sys/geom/eli (RELENG_6) the oldest GELI sources are younger > than the youngest GBDE stuff in src/sys/geom/bde. Is GBDE falling by > the wayside in favor of GELI? > > Thanks for any information, > > Mike. > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" >