GBDE not protecting the user

[Allan Jude]

On 2014-10-11 03:44, Michael W. Lucas wrote:
> On Sat, Oct 11, 2014 at 11:30:08AM +0800, Erich Dollansky wrote:
>> Hi,
>>
>> On Fri, 10 Oct 2014 17:58:42 -0400
>> "Michael W. Lucas" <mwlucas at michaelwlucas.com> wrote:
>>
>>> [Tried questions@, no answer, and the code contains things I just
>>> cannot trigger.]
>>>
>> just try geli. It works for me. What I like most is that you can have
>> key and password on external media. No external media - no decyphering.
> 
> GELI does not verify key destruction when the correct passphrase is
> used. There are use cases where this is very important--e.g., finance.
> 
> I'd really like to include GBDE in my FreeBSD storage book, but it
> seems that it doesn't actually work.
> 
> ==ml
> 

Michael: please file a PR on this now that it is confirmed, and together
we can nag someone to fix it.

-- 
Allan Jude

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 834 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20141011/cbd7589f/attachment.sig>