encrypt

https://blog.henrici.name/blog/2021-07-06/

https://blog.heckel.io/2017/01/08/zfs-encryption-openzfs-zfs-on-linux/

zpool create -o ashift=12 -O compression=lz4 -O dnodesize=auto -O normalization=formD -O relatime=on -O xattr=sa -O atime=off -O acltype=posixacl -O encryption=aes-256-gcm -O keylocation=prompt -O keyformat=passphrase tank0 mirror wwn-0x5000cca22dcbf093 wwn-0x5000cca22dd2fc89 mirror wwn-0x5000cca22dd31cdb wwn-0x5000cca22dd0624

https://github.com/TeamWin/Team-Win-Recovery-Project/issues/323#issueco…

https://android.stackexchange.com/questions/125121/mount-android-encryp…

https://www.reddit.com/r/LineageOS/comments/6oanxv/encrypted_phone_vs_l…

Preparation

Prepare a mount point for your data and change ownership.
# Create a mount point
sudo mkdir /media/cryptoUSB
# Set permissions for the owner
sudo chown stefan:stefan /media/cryptoUSB

Create an Encrypted Device

Encrypt the device with LUKS. Note that all data on the partition will be overwritten during this process.
# Create encrypted device
sudo cryptsetup --verify-passphrase luksFormat /dev/sdX -c aes -s 256 -h sha256

https://www.linux.com/learn/how-encrypt-email-linux

apt-get install cryptsetup
vgscan
vgchange -a y vg00
lvscan
mkdir /media/home
cryptsetup luksOpen /dev/vg00/home home_antigo
ls /dev/mapper
mount /dev/mapper/home_antigo /media/home

http://sidweb.mine.nu/cms/en/debian-linux/other-packages/encryption.html

http://www.howtoforge.com/how-to-encrypt-directories-partitions-with-ec…
http://www.hermann-uwe.de/blog/howto-disk-encryption-with-dm-crypt-luks…
http://www.richardneill.org/a22p-mdk11-0.php#encrypt2

visualizar o conteúdo da swap:
cat /dev/[swap-partition] | strings

para activar a encriptação por hardware nesta board temos que activar os módulos cryptosoft, cryptodev e ocf:
# modprobe cryptodev
# modprobe geode-aes
# modprobe cryptosoft

para testar:
openssl speed -evp aes-128-cbc -engine cryptodev

http://www.punknix.com/node/120
http://list.voyage.hk/pipermail/voyage-linux/2010-February/012511.html