Re: feature: shufflecake encryption without any metadata leakage (like Geli/ZFS)

Polarian <[email protected]> Tue, 5 May 2026 00:13:07 +0100

Newsgroups	gmane.os.openbsd.bugs
Message-ID	<20260505001307.5ea73c79@Hydrogen>

Hey,

> Geli / ZFS encryption leaks metadata such as geli header which
> confirms that the partition is encrypted. This allows an adversary to
> force you to reveal password (whether physically/litigation).

GELI is FreeBSD, not OpenBSD.

OpenBSD has bio(4) bioctl(8) for this, see [1] for more info.

Take care,
-- 
Polarian
Jabber/XMPP: [email protected]

[1] https://www.openbsd.org/faq/faq14.html