3 ms·
Openbsd encrypts it's swap by default, you can jump through a couple of hoops and encrypt your swap on linux. on windows, i don't know, however, if you have an
by somat 3y ago
Openbsd encrypts it's swap by default, you can jump through a couple of hoops and encrypt your swap on linux. on windows, i don't know, however, if you have an encrypted disk your pagefile(if on that encrypted disk) will also be encrypted.
- dist-epoch 3y agoOn Windows the swap FILE is encrypted if the partition is stored into is encrypted. Same with the hibernation file, Bitlocker will require your password again (if it has one) on resume.
- somat 3y agoI went on a sort of deep dive of how swap partitions are encrypted. Most of the time the crypto block device is tied into the swap system, which makes a lot of sense, reusing layers and all that, That is how linux and freebsd do it. but openbsd is interesting. it uses 512KB blocks each with it's own encryption key, and once all references to a block are gone the key is discarded. so no guarantee but openbsd does try to lose anything that was put in swap as soon as possible. https://man.openbsd.org/sysctl.2#VM_SWAPENCRYPT~2 https://man.openbsd.org/sysctl.2#VM_SWAPENCRYPT~2