THE VIDEO SHELF · zfs native encryption
ZFS Native Encryption by Tom Caputi
Tom Caputi presents the design of native encryption for ZFS at the OpenZFS Developer Summit, including design decisions and how authentication uses checksum fields.
Why HN readers recommended it
Recommended whenever ZFS encryption comes up as the authoritative explanation of how it was added and its trade-offs at scale.
This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.
Video & recommendation details
- Creator / channel
- OpenZFS
- Topic
- zfs native encryption
- Format
- talk
- Level
- advanced
- HN recommenders in dataset
- 2
- HN mentions in dataset
- 5
- Recommendation years in dataset
- 2016–2022
These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.
From the original HN conversations
Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.
On the contrary, it makes it suitable for file systems! File systems are not block devices, they are data structures on top of block devices — it's the job of these data structures to keep stuff, such as data, inodes, and... keys, and IVs, and …
dchest on Hacker News · 2017-05
In TFS: A file system built for performance, space efficiency, and scalabilityThe problem is that a stream cipher is going to have some per-object uniqueness (a salt, IV, etc.), so by design even if you feed it related input blocks you will get different output blocks. This is, of course, antithetical to deduplication: so you need …
drbawb on Hacker News · 2022-12
In Apple advances user security with powerful new data protections
Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.