Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] loop-AES in test

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Vlad Glagolev <stealth AT sourcemage.org>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: [SM-Discuss] loop-AES in test
  • Date: Fri, 30 May 2008 11:56:03 +0400

OK, it's time for announcement :)

2 weeks ago I looked into some article about the encrypting Linux partitions.
I solved to try that by myself :)

There are a few ones (listed here:
http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software) we
already have, such as dm-crypt/luks, truecrypt, ecryptfs.

Well, two days ago I asked Ladislav about eCryptFS, but it wasn't what I
needed. I chose to try some dm-crypt alternative: loop-AES.

During these two days I was chechking the whole system/fixing the
stuff/asking people on IRC, and finally it's done! :^) loop-AES is now
integrated in test, so feel free to try it (if you're brave enough! ;^) and
wanna try something new besides dm-crypt and really need it).

Be careful doing the steps in official README
(http://loop-aes.sourceforge.net/loop-AES.README) but it's enough to make it
finally working/usable.

With loop-AES you can encrypt root partition, swap, the other partitions and
automount them (i added some simple script to make it possible)

In a few words, what do you need:
1. disable loop driver in your kernel (it'll be replaced by loop-aes kernel
module)
2. update your test grimoire via `scribe update'
3. cast loop-aes and aespipe (to encrypt the partitions on the fly), it'll
ask to recompile gnupg (static) and util-linux with loop-aes patch.
4. follow the README @ official website or @ /usr/share/doc/loop-aes

And yes, don't forget to backup your data anyway!

Here's what do i have:

root@carrier:~ # df -h
Filesystem Size Used Avail Use% Mounted on
/dev/loop/5 94G 15G 79G 16% /
/dev/sda1 108M 11M 97M 11% /boot
tmpfs 64M 0 64M 0% /dev/shm
/dev/loop/6 18G 2.9G 15G 17% /home

root@carrier:~ # losetup -a
/dev/loop/5: [0100]:9 (/dev/sda4) encryption=AES256 multi-key-v3
/dev/loop/6: [000d]:4143 (/dev/sda3) encryption=AES256 multi-key-v3
/dev/loop/7: [000d]:4085 (/dev/sda2) offset=4096 encryption=AES256
multi-key-v3

loop/7 is swap..

So yeah, it works ;^) And there's a lot of examples in README to boot from
cd, usb-stick, etc.

Some thoughts/advices are always welcomed. Enjoy the fs-crypting and have a
nice day starting with "AES revolution"! :^)

--
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Enqlave" Glagolev

Attachment: pgpCasKzvQscm.pgp
Description: PGP signature



  • [SM-Discuss] loop-AES in test, Vlad Glagolev, 05/30/2008

Archive powered by MHonArc 2.6.24.

Top of Page