Archive-Team
/
zfs
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 103 Wiki Activity

Document zfs change-key caveats 

As discussed on the 2019-01-07 OpenZFS Leadership Meeting, we need to be
clear about the limitations of `zfs change-key`.  Changing the user key
does not change the master key, nor does it currently overwrite the old
wrapped master key on disk.

Reviewed-by: Tom Caputi <tcaputi@datto.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Matt Ahrens <matt@delphix.com>
Reviewed-by: George Melikov <mail@gmelikov.ru>
Reviewed-by: Garrett Fields <ghfields@gmail.com>
Reviewed-by: Kjeld Schouten <kjeld@schouten-lebbing.nl>
Signed-off-by: Richard Laager <rlaager@wiktel.com>
Closes #9819
This commit is contained in:
Richard Laager 2020-01-14 12:11:07 -06:00 committed by Brian Behlendorf
parent 7e2da7786e
commit f744f36ce5
1 changed files with 25 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
man/man8/zfs-load-key.8
View File

@ -30,7 +30,7 @@
.\" Copyright 2018 Nexenta Systems, Inc. .\" Copyright 2018 Nexenta Systems, Inc.
.\" Copyright 2019 Joyent, Inc. .\" Copyright 2019 Joyent, Inc.
.\" .\"
.Dd June 30, 2019 .Dd January 13, 2020
.Dt ZFS-LOAD-KEY 8 .Dt ZFS-LOAD-KEY 8
.Os Linux .Os Linux
.Sh NAME .Sh NAME
@ -154,7 +154,7 @@ Unloads the keys for all encryption roots in all imported pools.
.Op Fl l .Op Fl l
.Ar filesystem .Ar filesystem
.Xc .Xc
Allows a user to change the encryption key used to access a dataset. This Changes the user's key (e.g. a passphrase) used to access a dataset. This
command requires that the existing key for the dataset is already loaded into command requires that the existing key for the dataset is already loaded into
ZFS. This command may also be used to change the ZFS. This command may also be used to change the
.Sy keylocation , .Sy keylocation ,
@ -166,6 +166,29 @@ will become one. Alternatively, the
.Fl i .Fl i
flag may be provided to cause an encryption root to inherit the parent's key flag may be provided to cause an encryption root to inherit the parent's key
instead. instead.
.Pp
If the user's key is compromised,
.Nm zfs Cm change-key
does not necessarily protect existing or newly-written data from attack.
Newly-written data will continue to be encrypted with the same master key as
the existing data. The master key is compromised if an attacker obtains a
user key and the corresponding wrapped master key. Currently,
.Nm zfs Cm change-key
does not overwrite the previous wrapped master key on disk, so it is
accessible via forensic analysis for an indeterminate length of time.
.Pp
In the event of a master key compromise, ideally the drives should be securely
erased to remove all the old data (which is readable using the compromised
master key), a new pool created, and the data copied back. This can be
approximated in place by creating new datasets, copying the data
(e.g. using
.Nm zfs Cm send
|
.Nm zfs Cm recv Ns
), and then clearing the free space with
.Nm zpool Cm trim --secure
if supported by your hardware, otherwise
.Nm zpool Cm initialize Ns .
.Bl -tag -width "-r" .Bl -tag -width "-r"
.It Fl l .It Fl l
Ensures the key is loaded before attempting to change the key. This is Ensures the key is loaded before attempting to change the key. This is