--5PPnVwj6ulmYFu5t
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 02, 2006 at 03:24:20PM -0700, Bill Studenmund wrote:
> Actually, you are not correct. Check out the "randomkey" and "urandomkey"=
=20
> key generation methods. They are specifically designed to work with thing=
s=20
> like swap.

That only applies when they're rekeyed - ie, at reboot.  This prevents
operators reading stale swap data from last run, but not swap data for
the current boot.

--
Dan.



--5PPnVwj6ulmYFu5t
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (NetBSD)

iD8DBQFE0TUkEAVxvV4N66cRAjToAKDStyU68db0OIONXkDdCWXKryp+5gCg4jch
gVYz5wRPYR/J05e76E3i4o0=
=LGWk
-----END PGP SIGNATURE-----

--5PPnVwj6ulmYFu5t--