Damian Jurd wrote:> All,
>
> What system are you planning to use for key management?
The OpenSolaris Key Management Framework:
http://opensolaris.org/os/project/kmf/
> Will the volumes
> have some kind of header block with a key table such as LUKS
> (http://luks.endorphin.org/) and FreeOTFE (http://www.freeotfe.org/) use,
> or are you planning on just using a flat encrypted volume?
Volumes ?
ZFS doesn''t work like other volume manager / file system combinations.
The encryption/decryption will be done as part of the ZIO pipeline, just
like compression and checksum are done today.
To understand how ZFS crypto will work you will first need to understand
how ZFS works with compression, I''d suggest reading the design and on
disk format documents available from the zfs community pages.
--
Darren J Moffat