Public SourceMage Discussion List

[Vlad Glagolev <stealth AT sourcemage.org>]

OK, it's time for announcement :)

2 weeks ago I looked into some article about the encrypting Linux partitions. 
I solved to try that by myself :)

There are a few ones (listed here: 
http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software) we 
already have, such as dm-crypt/luks, truecrypt, ecryptfs.

Well, two days ago I asked Ladislav about eCryptFS, but it wasn't what I 
needed. I chose to try some dm-crypt alternative: loop-AES.

During these two days I was chechking the whole system/fixing the 
stuff/asking people on IRC, and finally it's done! :^) loop-AES is now 
integrated in test, so feel free to try it (if you're brave enough! ;^) and 
wanna try something new besides dm-crypt and really need it).

Be careful doing the steps in official README 
(http://loop-aes.sourceforge.net/loop-AES.README) but it's enough to make it 
finally working/usable.

With loop-AES you can encrypt root partition, swap, the other partitions and 
automount them (i added some simple script to make it possible)

In a few words, what do you need:
1. disable loop driver in your kernel (it'll be replaced by loop-aes kernel 
module)
2. update your test grimoire via `scribe update'
3. cast loop-aes and aespipe (to encrypt the partitions on the fly), it'll 
ask to recompile gnupg (static) and util-linux with loop-aes patch.
4. follow the README @ official website or @ /usr/share/doc/loop-aes

And yes, don't forget to backup your data anyway!

Here's what do i have:

root@carrier:~ # df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/loop/5            94G   15G   79G  16% /
/dev/sda1             108M   11M   97M  11% /boot
tmpfs                  64M     0   64M   0% /dev/shm
/dev/loop/6            18G  2.9G   15G  17% /home

root@carrier:~ # losetup -a
/dev/loop/5: [0100]:9 (/dev/sda4) encryption=AES256 multi-key-v3
/dev/loop/6: [000d]:4143 (/dev/sda3) encryption=AES256 multi-key-v3
/dev/loop/7: [000d]:4085 (/dev/sda2) offset=4096 encryption=AES256 
multi-key-v3

loop/7 is swap..

So yeah, it works ;^) And there's a lot of examples in README to boot from 
cd, usb-stick, etc.

Some thoughts/advices are always welcomed. Enjoy the fs-crypting and have a 
nice day starting with "AES revolution"! :^)

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Enqlave" Glagolev

Attachment: pgpCasKzvQscm.pgp
Description: PGP signature