encrypt flash

[NewDisplayName]

Hi, so since i encrypted my whole array, i wonder if it would be possible to encrypt the flash.

 

Like a bootloader which just receives the key somewhere (http, smb, ftp), encrypts the flash and then start unraid. (i load mine from ftp on startup)

 

It would be useful bc on stick is some sensitive data. 

Edited February 7, 2019 by nuhll

[JonathanM]

No, I don't believe the whole flash drive could (or should) be encrypted. However, we can certainly discuss protecting the sensitive data you speak of.

 

Can you provide a list of what files you feel should be protected on the flash? Depending on what it is, and when it needs to be available, maybe it could be moved to an encrypted volume. That volume could possibly live on the flash drive as an encrypted archive or image file.

[NewDisplayName]

I think Logs and Config?

I know u cant encrypt it as a whole because then there is nothing to boot, but a way to encrypt atleast logs and config, would be fantastic. Then everything is "really secure".

Edited February 7, 2019 by nuhll

[Derek_]

On 2/7/2019 at 11:41 PM, jonathanm said:

No, I don't believe the whole flash drive could (or should) be encrypted.

Why couldn't the USB be encrypted? It's just a Linux distro, and there's LUKS on this thing i don't see why it couldn't be encrypted. I guess creating a /boot partition would require a redesign. But it could be done i would think.

 

A problem would be you'd need physical access to the device to enter the key. But encrypting the USB would be by choice and that would be a consequence.

Edited January 12, 2020 by Derek_

[NewDisplayName]

i explizit said "or should".

 

Who the f wants to enter the key every time?

 

Thats just not for the mass.