<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div dir="ltr" >Hey all,</div>
<div dir="ltr" > </div>
<div dir="ltr" >On the documentation of encryption restrictions and encryption/HAWC interplay...</div>
<div dir="ltr" > </div>
<div dir="ltr" >The encryption documentation currently states:</div>
<div dir="ltr" > </div>
<div dir="ltr" >"Secure storage uses encryption to make data unreadable to anyone who does not possess the necessary encryption keys...Only data, not metadata, is encrypted."</div>
<div dir="ltr" > </div>
<div dir="ltr" >The HAWC restrictions include:</div>
<div dir="ltr" > </div>
<div dir="ltr" >"Encrypted data is never stored in the recovery log..."</div>
<div dir="ltr" > </div>
<div dir="ltr" >If this is unclear, I'm open to suggestions for improvements.</div>
<div dir="ltr" > </div>
<div dir="ltr" >Cordially,</div>
<div dir="ltr" > </div>
<div dir="ltr" >Jamie</div>
<div dir="ltr" > </div>
<blockquote data-history-content-modified="1" dir="ltr" style="border-left:solid #aaaaaa 2px; margin-left:5px; padding-left:5px; direction:ltr; margin-right:0px" >----- Original message -----<br>From: valdis.kletnieks@vt.edu<br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>Cc:<br>Subject: Re: [gpfsug-discuss] GPFS, LTFS/EE and data-in-inode?<br>Date: Fri, Jul 21, 2017 6:24 PM<br>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace" >On Fri, 21 Jul 2017 22:04:32 -0000, Sven Oehme said:<br>> i talked with a few others to confirm this, but unfortunate this is a<br>> limitation of the code today (maybe not well documented which we will look<br>> into). Encryption only encrypts data blocks, it doesn't encrypt metadata.<br>> Hence, if encryption is enabled, we don't store data in the inode, because<br>> then it wouldn't be encrypted. For the same reason HAWC and encryption are<br>> incompatible.<br><br>I can live with that restriction if it's documented better, thanks...</font></div>
<p> </p>
<table cellspacing="2" cellpadding="4" border="1" > <tbody> <tr valign="middle" > <td><a href="https://mail.notes.na.collabserv.com/livemail/0/82a99bcc9635f22a6009b956b15655c7/Body/M1.2/attq4saq.dat?OpenElement" target="_blank" ><img alt="Document Icon" src="/icons/medoc.gif" hspace="4" align="middle" border="0" >attq4saq.dat</a></td> <td><b>Type: </b>application/pgp-signature<br> <b>Name: </b>attq4saq.dat</td> </tr> </tbody></table>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace" >_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank" >http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></div></blockquote>
<div dir="ltr" > </div></div>
<BR>