[SM-Discuss] loop-AES in test

Vlad Glagolev stealth at sourcemage.org
Fri May 30 03:56:03 EDT 2008


OK, it's time for announcement :)

2 weeks ago I looked into some article about the encrypting Linux partitions. I solved to try that by myself :)

There are a few ones (listed here: http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software) we already have, such as dm-crypt/luks, truecrypt, ecryptfs.

Well, two days ago I asked Ladislav about eCryptFS, but it wasn't what I needed. I chose to try some dm-crypt alternative: loop-AES.

During these two days I was chechking the whole system/fixing the stuff/asking people on IRC, and finally it's done! :^) loop-AES is now integrated in test, so feel free to try it (if you're brave enough! ;^) and wanna try something new besides dm-crypt and really need it).

Be careful doing the steps in official README (http://loop-aes.sourceforge.net/loop-AES.README) but it's enough to make it finally working/usable.

With loop-AES you can encrypt root partition, swap, the other partitions and automount them (i added some simple script to make it possible)

In a few words, what do you need:
1. disable loop driver in your kernel (it'll be replaced by loop-aes kernel module)
2. update your test grimoire via `scribe update'
3. cast loop-aes and aespipe (to encrypt the partitions on the fly), it'll ask to recompile gnupg (static) and util-linux with loop-aes patch.
4. follow the README @ official website or @ /usr/share/doc/loop-aes

And yes, don't forget to backup your data anyway!

Here's what do i have:

root at carrier:~ # df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/loop/5            94G   15G   79G  16% /
/dev/sda1             108M   11M   97M  11% /boot
tmpfs                  64M     0   64M   0% /dev/shm
/dev/loop/6            18G  2.9G   15G  17% /home

root at carrier:~ # losetup -a
/dev/loop/5: [0100]:9 (/dev/sda4) encryption=AES256 multi-key-v3
/dev/loop/6: [000d]:4143 (/dev/sda3) encryption=AES256 multi-key-v3
/dev/loop/7: [000d]:4085 (/dev/sda2) offset=4096 encryption=AES256 multi-key-v3

loop/7 is swap..

So yeah, it works ;^) And there's a lot of examples in README to boot from cd, usb-stick, etc.

Some thoughts/advices are always welcomed. Enjoy the fs-crypting and have a nice day starting with "AES revolution"! :^)

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Enqlave" Glagolev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-discuss/attachments/20080530/c845631d/attachment.bin 


More information about the SM-Discuss mailing list