Page 1 of 1

security chip and Linux crypted partitions

Posted: Wed Feb 02, 2011 9:49 am
by Caterpillar
Do you know if Linux uses the security chip of Thinkpads when you have a computer with encrypted partition? I think it will help the cpu.
Actually I am using a T60 with a Crucial SSD C300 64gb and Fedora 14 on a crypted partition.

Re: security chip and Linux crypted partitions

Posted: Wed Feb 02, 2011 10:35 am
by comps
If the "security chip" you're reffering to is TPM, then please see http://trousers.sourceforge.net/faq.html#3.3 .

Re: security chip and Linux crypted partitions

Posted: Wed Feb 02, 2011 6:17 pm
by ThinkRob
Caterpillar wrote:Do you know if Linux uses the security chip of Thinkpads when you have a computer with encrypted partition? I think it will help the cpu.
Actually I am using a T60 with a Crucial SSD C300 64gb and Fedora 14 on a crypted partition.
No, it does not. And even if it could, it would not help performance. LUKS uses symmetric ciphers such as AES, Blowfish, etc. The TPM chip does public-key crypto, and slowly at that.

TPM can help you determine whether or not somebody's tampered with, say, your bootloader, but it's basically useless as a crypto offload device.

Re: security chip and Linux crypted partitions

Posted: Sun Feb 13, 2011 4:35 am
by Caterpillar
ThinkRob wrote: TPM can help you determine whether or not somebody's tampered with, say, your bootloader
How can it do it?

Re: security chip and Linux crypted partitions

Posted: Sun Feb 13, 2011 8:38 am
by Harryc
Moved to the Linux forum.