Remove All Ads from XDA
Find Your Device:
Or Continue to Thread: [RECOVERY][OFFICIAL] TWRP for …
4th September 2017, 04:33 AM
Member
Thanks Meter: 3
 
More
Quote:
Originally Posted by c3k

I suggest you to take a look at "Samsung Nougat and encryption" here: https://plus.google.com/+Chainfire/posts/XikxTkhHpiG
(spoiler: no good news for a Nexus user)

Thanks for pointing me to that interesting thread.
That thread clearly shows someone isn't doing his work. It makes no sense at all to create a custom recovery and give the users something as simple and basic as the ability to run as root at the expense of losing important features like the possibility of encrypting /data partition and external sdcards!

Even more strange is the absence of a disclaimer... People making custom recoveries or offering root should clearly state this: "Attention: after installing TWRP and/or flashing root zip and booting the OS you will not be able to encrypt /data again or even encrypt an external sd card, because system will (or could) not reboot and you even risk bricking your phone".

And the fact that Samsung recent phones, when encrypted, sign /boot and /data is no excuse for offering solutions which give the users custom recoveries, custom ROMs and root at the expense of running their system unencrypted! LUKS is around here for ages! Android is Linux. Almost all distros have root AND LUKS encryption for ages. Samsung stock ROMs encrypt /data and external sd cards precisely using LUKS! So the "problem" resides only in the specific way Samsung and other brands decided to implement LUKS encryption...

Custom recovery and custom ROMs developers should simply offer the users the possibility of using normal LUKS encryption (without signing keys for /data and /boot)! Couldn't be more simpler (for normal developers)...

Making custom recoveries and custom ROMs, which need to format encrypted partitions, and then preventing users to reencrypt those partitions after booting their devices, only because a normal LUKS encryption (one that doesn't sign partitions) isn't offered, is plain stupid...

Linux users are encrypting their PCs with LUKS without signing keys for ages! And many phone manufacturers have been encrypting /data with LUKS and without signing keys for years! All custom recovery and custom ROM developers must do is the same...
The Following User Says Thank You to Niccolò Paganini For This Useful Post: [ View ] Gift Niccolò Paganini Ad-Free