Native encryption added to ZFS on Linux

Re:Native encryption added to ZFS on Linux by rincebrain on Wednesday July 20, 2016 @04:20PM (#12132165)

ZFS boards really encourage you to use ECC because one of the nominal features of ZFS, "end-to-end checksumming", is not quite as useful if you have a point between ends where it won't notice silent data corruption (e.g. a bad stick of non-ECC RAM).

ZFS will notice, depending on _when_ the munging happened (if it was mangled after it got to RAM but before ZFS checksummed it, it obviously can't), but that's (primarily) why ZFS boards often tell you not to do that.

[ Parent | on HN ]

Re:Native encryption added to ZFS on Linux by erkkie on Thursday July 21, 2016 @05:11AM (#12135667)

Not only that, but I believe a bad checksum can also cause a cascade to "fix the data", causing further corruption.

[ Parent | on HN ]

Re:Native encryption added to ZFS on Linux by the_why_of_y on Saturday July 23, 2016 @02:42PM (#12150513)

For that to happen, you would need a bad checksum and the corresponding data block to be corrupted in such a way that the corrupted data block checksums to the corrupted checksum. Given that the checksum is 256-bit, the scariest I'd call that is "possible in theory".

[ Parent | on HN ]