Re: Checking integrity of /sbin/init from within kernel

[Otto Moerbeek <otto@drijf.net>]

On Tuesday, October 1, 2002, at 01:58 PM, Torsten Valentin wrote:

> You obviously did not understand that you won't be able to decrypt the
> encrypted filesystem if you use a stock kernel, because you don't have
> the secret-key to decrypt it, because it is in my modified kernel only.

But you rely on a clever, unknown scheme to hide a secret key. Well I 
think it is well know that that is a big mistake. I just have to trust 
you that you did a good job. And even if I do think that your method is 
really clever, I can use a debugger or a logic analyzer to find the key 
or capture the data being written to the ram disk.

Otto