Encrypted swap

john99 · 10-31-2009, 04:11 AM

Hello

I don't know if Icognito does enrypt swap. Probably it does not even swap to disk...

Nevertheless I would like to be able to determine if the swapped data (witten to disk)
is encrypted or not. Simply carving the swap file or swap partition
of a Linux system dosen't give an answer (unlike the pagefile under Windows)..

Question:
What is the best approach to recognize if swap is encrypted or not?

Thank's a lot for any feedback!

John

rupertwh · 10-31-2009, 08:54 PM

Quote:

Originally Posted by john99

What is the best approach to recognize if swap is encrypted or not?

Have a look at /etc/fstab to see if it uses a regular partition or an encrypted device?

anonym · 11-01-2009, 10:52 AM

Quote:

Originally Posted by john99

I don't know if Icognito does enrypt swap. Probably it does not even swap to disk...

Incognito doesn't use disk swapping at all -- it runs only in memory.