Re: GRUB and boot partition

2018-01-06 Thread Richard Hector
On 06/01/18 03:56, Gary Dale wrote: > One once-popular code was to replace all words in a message with 2 > numbers each, referring to a page & word number within an agreed-upon > book. If you used it electronically, you could send a binary file where > each original word was reduced to 2 bytes. Th

encryption and compression similarities -- was GRUB and boot partition

2018-01-05 Thread David Christensen
On 01/05/18 06:56, Gary Dale wrote: > On 2018-01-03 01:59 PM, David Christensen wrote: >> On 01/03/18 06:45, Gary Dale wrote: >>> ... Encryption is similar in concept to compression. >>> ... It could even reduce the space requirements. >> >> I'm curious -- can you cite a compressing cipher code th

Re: GRUB and boot partition

2018-01-05 Thread Gary Dale
On 2018-01-03 01:59 PM, David Christensen wrote: On 01/03/18 06:45, Gary Dale wrote: On 2018-01-02 02:35 PM, Pascal Hambourg wrote: Encryption does not require extra space (except for header and block padding). Encrypted data have the same size of cleartext data. +1 Encryption is similar

Re: GRUB and boot partition

2018-01-03 Thread David Christensen
On 01/03/18 06:45, Gary Dale wrote: On 2018-01-02 02:35 PM, Pascal Hambourg wrote: Encryption does not require extra space (except for header and block padding). Encrypted data have the same size of cleartext data. +1 Encryption is similar in concept to compression. AFAIK common use on

Re: GRUB and boot partition

2018-01-03 Thread Gary Dale
On 2018-01-02 02:35 PM, Pascal Hambourg wrote: Le 02/01/2018 à 02:29, microsoft gaofei a écrit : So AES is very lightweight ? I thought cryptography takes very much space , but I saw 1MB space is plenty for AES What are you talking about ? Where did you see this ? It does not make sense. Encr

Re: GRUB and boot partition

2018-01-02 Thread Pascal Hambourg
Le 02/01/2018 à 02:29, microsoft gaofei a écrit : So AES is very lightweight ? I thought cryptography takes very much space , but I saw 1MB space is plenty for AES What are you talking about ? Where did you see this ? It does not make sense. Encryption does not require extra space (except for

Re: GRUB and boot partition

2017-12-29 Thread Gary Dale
On 2017-12-29 06:46 AM, Pascal Hambourg wrote: Le 29/12/2017 à 11:02, deloptes a écrit : microsoft gaofei wrote: I'm thinking about a question ,how my hard disk admits so much data ? If /boot partition is encrypted , then how does my hard disk admit GRUB ? sudo fdisk /dev/sda , and press o t

Re: GRUB and boot partition

2017-12-29 Thread Pascal Hambourg
Le 29/12/2017 à 11:02, deloptes a écrit : microsoft gaofei wrote: I'm thinking about a question ,how my hard disk admits so much data ? If /boot partition is encrypted , then how does my hard disk admit GRUB ? sudo fdisk /dev/sda , and press o to create a DOS partition table . This software st

Re: GRUB and boot partition

2017-12-29 Thread deloptes
microsoft gaofei wrote: > I'm thinking about a question ,how my hard disk admits so much data ? If > /boot partition is encrypted , then how does my hard disk admit GRUB ? > > sudo fdisk /dev/sda , and press o to create a DOS partition table . This > software starts on sector 2048 by default . So

Re: GRUB and boot partition

2017-12-28 Thread microsoft gaofei
I'm thinking about a question ,how my hard disk admits so much data ? If /boot partition is encrypted , then how does my hard disk admit GRUB ? sudo fdisk /dev/sda , and press o to create a DOS partition table . This software starts on sector 2048 by default . So how does the 2048 sectors admit

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 02:24:24PM +0100, Pascal Hambourg wrote: [...] > I read that some UEFI implementations allow the user to manage > secure boot keys. Carefully choose your hardware. > > Oh, by the way I forgot twice to mention another situatio

Re: GRUB and boot partition

2017-12-26 Thread Reco
On Tue, Dec 26, 2017 at 02:24:24PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 13:58, Reco a écrit : > > On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: > > > > > > > > > > Is there any inherent advantage to having /boot encrypted? > > > > > The only things which might help

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 13:58, Reco a écrit : On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: Is there any inherent advantage to having /boot encrypted? The only things which might help against an evil maid attack [1] are: secure boot (tying your bootable to secure firmware) [3],

Re: GRUB and boot partition

2017-12-26 Thread Reco
On Tue, Dec 26, 2017 at 11:59:18AM +0100, to...@tuxteam.de wrote: > On Tue, Dec 26, 2017 at 01:47:23PM +0300, Reco wrote: > > Hi. > > > > On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > > > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > > > Le 26/12/20

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:33:36PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 12:24, to...@tuxteam.de a écrit : [...] > >In the days you measure (small) external media in gigabytes, this > >argument has lost a lot of push. > > What does storage

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 12:24, to...@tuxteam.de a écrit : On Tue, Dec 26, 2017 at 12:10:52PM +0100, Pascal Hambourg wrote: Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : Is there any inherent advantage to having /boot encrypted? I can imagine a few situations. - When you can enforce the early s

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:26:35PM +0100, Pascal Hambourg wrote: [...] > As explained in my previous reply, the difference is only in > convenience. You need the boot media to be present and writable when > updating when updating the kernel [...] Ye

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 11:59, to...@tuxteam.de a écrit : The only things which might help against an evil maid attack [1] are: secure boot (tying your bootable to secure firmware) Only if you replacy the default keys with your own key in the firmware. Any signed GRUB provided by Ubuntu, RedHat or op

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 12:10:52PM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : > > > >On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > >>Note however that in any case, the early part of GRUB canno

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 11:36, to...@tuxteam.de a écrit : On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: Note however that in any case, the early part of GRUB cannot be encrypted [...] Is there any inherent advantage to having /boot encrypted? I can imagine a few situations. - Wh

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 01:47:23PM +0300, Reco wrote: > Hi. > > On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > > Le 26/12/2017 à 02:47, microsoft gaofei

Re: GRUB and boot partition

2017-12-26 Thread Reco
Hi. On Tue, Dec 26, 2017 at 11:36:13AM +0100, to...@tuxteam.de wrote: > On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > > Le 26/12/2017 à 02:47, microsoft gaofei a écrit : > > >https://wiki.archlinux.org/index.php/GRUB#Boot_partition > > >ArchWiki has carried an introduc

Re: GRUB and boot partition

2017-12-26 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Dec 26, 2017 at 10:42:46AM +0100, Pascal Hambourg wrote: > Le 26/12/2017 à 02:47, microsoft gaofei a écrit : > >https://wiki.archlinux.org/index.php/GRUB#Boot_partition > >ArchWiki has carried an introduction of GRUB , it offers a feature to >

Re: GRUB and boot partition

2017-12-26 Thread Pascal Hambourg
Le 26/12/2017 à 02:47, microsoft gaofei a écrit : https://wiki.archlinux.org/index.php/GRUB#Boot_partition ArchWiki has carried an introduction of GRUB , it offers a feature to decrypt your partitions and you don't need to separate /boot . Debian also uses GRUB as its boot loader ,but Debian st

GRUB and boot partition

2017-12-25 Thread microsoft gaofei
https://wiki.archlinux.org/index.php/GRUB#Boot_partition . ArchWiki has carried an introduction of GRUB , it offers a feature to decrypt your partitions and you don't need to separate /boot . Debian also uses GRUB as its boot loader ,but Debian still separates /boot partition and leave it u