[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
CVS: cvs.openbsd.org: src
- To: source-changes_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org
- Subject: CVS: cvs.openbsd.org: src
- From: Niels Provos <provos_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>
- Date: Thu, 30 Dec 1999 11:21:56 -0700 (MST)
- Reply-to: Niels Provos <provos_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>
CVSROOT: /cvs
Module name: src
Changes by: provos_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org 1999/12/30 11:21:56
Modified files:
sys/uvm : uvm_meter.c uvm_pdaemon.c uvm_swap.c
sys/vm : vm_page.h vm_param.h
sys/conf : files
Added files:
sys/uvm : uvm_swap_encrypt.c uvm_swap_encrypt.h
Log message:
swap encryption for UVM, option UVM_SWAP_ENCRYPT. needs to be enabled
via sysctl.
Pages are encrypted with the Blowfish encryption algorithm, the key
is initialized randomly on first swap out, ensuring that entropy has
accumulated in the kernel randomness pool. Eventually, swap encryption
will be decided on a process by process basis, e.g. a process that reads from
a cryptographic filesystem will enable swap encrypt for its pages. okay
art@ and deraadt_(_at_)__(_dot_)_
Visit your host, monkey.org