Re: safety of encrypted filesystems

[Isaac To <iketo2@netscape.net>]

>>>>> "martin" == martin f krafft <madduck@debian.org> writes:

    >> And also, when you write any block, you have to reencrypt all
    >> the remaining blocks.

    martin> Yes, don't you?

Didn't you realize that if that is the case, every single-byte write
would means writing, on average, half the disk, and on a disk of say a
few GB, at the current technology of disk systems, would takes several
hours?  But more importantly (you might be thinking about disk cache),
since it is unlikely that you won't be writing some data right before
a reboot, a reboot would take several hours?

Writing a block means writing a block (or at most a few).  Nobody can
turn it to writing a disk, if any meaningful performance is wanted.

Regards,
Isaac.