I'm not really familiar with the development process between ZFS on Linux and ZFS on BSD, do these pull requests usually get merged upstream for use on BSD, Solaris, etc?
Solaris is completely separate, but I believe the encryption comes from Illumos just needs a ton of changing to work on Linux.
Playing with ZFS encryption on Linux
11–20 of 56 posts
Re: Playing with ZFS encryption on Linux
#1264 bytes seems like an arbitrarily short limit for passphrases; it's going to be hashed at some point anyway (preferably with a decent KDF designed for the purpose) and 64 bytes is nowhere near long enough for natural English language text to be used to derive 32 bytes of entropy (estimates of English language text are ~1.5bits of entropy per character).
32 bytes => 64 hex digits, which is probably not a coincidence. :-)
Re: Playing with ZFS encryption on Linux
#13Re: Playing with ZFS encryption on Linux
#14Does anyone know a good guide for getting set up with ZFS (particularly on Linux/Ubuntu)? The Ubuntu wiki basically just say "apt install zfs" and then links to a page that appears to be a brain dump of all the possible commands. Something with more coherence explanation of the relevant concepts would be really helpful.
I'm not in a good position to judge whether this is the correct level of detail for someone new to ZFS; it seems slightly lighter on explanation of concepts than I'd prefer.
[2] seems reasonably nice at a quick look.
[1] - https://github.com/zfsonlinux/zfs/wiki/Ubuntu-16.04-Root-on-...
Re: Playing with ZFS encryption on Linux
#1564 bytes seems like an arbitrarily short limit for passphrases; it's going to be hashed at some point anyway (preferably with a decent KDF designed for the purpose) and 64 bytes is nowhere near long enough for natural English language text to be used to derive 32 bytes of entropy (estimates of English language text are ~1.5bits of entropy per character).
Re: Playing with ZFS encryption on Linux
#16I'm not really familiar with the development process between ZFS on Linux and ZFS on BSD, do these pull requests usually get merged upstream for use on BSD, Solaris, etc?
Together FreeBSD, ZoL and the Illumos groups work on OpenZFS. Oracle closed off Solaris. The decendent of Open Solaris is Illumos. Oracle ZFS and OpenZFS are not hte same thing. OpenZFS repo is the upstream, though it is closely tracks the Illumos version. From there the projects pull on OpenZFS to create their implementations. New features are developed independently by the projects with rules that a new feature mus…
Re: Playing with ZFS encryption on Linux
#1764 bytes seems like an arbitrarily short limit for passphrases; it's going to be hashed at some point anyway (preferably with a decent KDF designed for the purpose) and 64 bytes is nowhere near long enough for natural English language text to be used to derive 32 bytes of entropy (estimates of English language text are ~1.5bits of entropy per character).
Re: Playing with ZFS encryption on Linux
#1864 bytes seems like an arbitrarily short limit for passphrases; it's going to be hashed at some point anyway (preferably with a decent KDF designed for the purpose) and 64 bytes is nowhere near long enough for natural English language text to be used to derive 32 bytes of entropy (estimates of English language text are ~1.5bits of entropy per character).
At the risk of invoking Cunningham's Law, nobody uses passphrases anywhere near 64 bytes that he / she has to memorize. And if you're using a password manager, just use the raw or hex key option. 32 bytes => 64 hex digits, which is probably not a coincidence. :-)
Re: Playing with ZFS encryption on Linux
#19Earlier quoted context omitted.
At the risk of invoking Cunningham's Law, nobody uses passphrases anywhere near 64 bytes that he / she has to memorize. And if you're using a password manager, just use the raw or hex key option. 32 bytes => 64 hex digits, which is probably not a coincidence. :-)
Password yes, passphprase it's quite possible.
Re: Playing with ZFS encryption on Linux
#20Does anyone know a good guide for getting set up with ZFS (particularly on Linux/Ubuntu)? The Ubuntu wiki basically just say "apt install zfs" and then links to a page that appears to be a brain dump of all the possible commands. Something with more coherence explanation of the relevant concepts would be really helpful.
[1]: http://docs.oracle.com/cd/E19253-01/819-5461/gamnq/index.htm...