2 ms·
It's a single process managing multiple disks with a fixed-size extent system on each. 1. The process has a single passphrase entered at startup. 2. This pass
by jorangreef 10y ago
It's a single process managing multiple disks with a fixed-size extent system on each.
1. The process has a single passphrase entered at startup.
2. This passphrase is then used to derive the master key encryption key for each disk using the disk's own parameters (KDF_SALT, KDF_ITERATIONS) which are generated and estimated when the disk is formatted and added to the array (disks may come and go).
3. The master key encryption key for each disk is then used to decrypt the AF-split master key for each disk, similar to LUKS.