3 ms·
What's the usage model here? When you boot up the server, someone sits down at the console and types in 100 unique passphrases?
by cperciva 10y ago
What's the usage model here? When you boot up the server, someone sits down at the console and types in 100 unique passphrases?
- jorangreef 10y agoIt's a single process managing multiple disks with a fixed-size extent system on each. 1. The process has a single passphrase entered at startup. 2. This passphrase is then used to derive the master key encryption key for each disk using the disk's own parameters (KDF_SALT, KDF_ITERATIONS) which are generated and estimated when the disk is formatted and added to the array (disks may come and go). 3. The master key encryption key for each disk is then used to decrypt the AF-split master key for each disk, similar to LUKS.