hackertube.io

ZFS Native Encryption by Tom Caputi

OpenZFS · talk · Watch on YouTube

Databases & storageCryptography

What it is

Tom Caputi presents the design of native encryption for ZFS at the OpenZFS Developer Summit, including design decisions and how authentication uses checksum fields.

Why Hacker News recommends it

Recommended whenever ZFS encryption comes up as the authoritative explanation of how it was added and its trade-offs at scale.

  • 2 people recommended it
  • 2 different months
  • 0 strong recommendations
  • first 2016, last 2022

What HN commenters said

  1. “check out this presentation on how encryption was bolted on ZFS”

    How encryption was added to ZFS, with authentication via checksum fields

    dchest, 2017-05 · Recommendation · in “TFS: A file system built for performance, space efficiency, and scalability”

  2. “The presentation about ZFS' native encryption[1] covers many of these sorts of trade-offs necessary to do full-disk encryption at scale.”

    Covers trade-offs of encryption at scale in ZFS

    drbawb, 2022-12 · Recommendation · in “Apple advances user security with powerful new data protections”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: zfs, encryption, filesystems, openzfs, storage

Also recommended by the same people