I don't know if this ever got resolved or not, but I just burnt an encrypted CD with ext2 format... here's what I did for anyone interested, step by step... Oh, I'm using loop-AES 1.5b... I never did get this to work with just the cryptoapi, but i had an old version... I'm assuming it was because of the IV mode problem... anyways, here's what I've done... // Create the original image dd if=/dev/urandom of=image.img bs=1M count=650 mke2fs -m 0 -b 1024 image.img mount -o loop image.img temp <Copy stuff into temp to fill the image> umount temp // Encrypt it // image.img must NOT be mounted at this point> losetup /dev/loop0 image.img losetup -e aes256 /dev/loop1 image.img <enter password> dd if=/dev/loop0 of=/dev/loop1 bs=1M conv=notrunc sync losetup -d /dev/loop0 losetup -d /dev/loop1 <test it, make sure everything mounts and you used the correct password> // Burn it cdrecord -v speed=8 dev=0,0,0 image.img <cd burns> // Mount it losetup -e aes256 /dev/loop0 /dev/cdrom <enter password> mount /dev/loop0 /mnt And that's that ;) Hope it helps ;) Give me feedback on whether that works for everyone or not... If you want a non-destructive encrypt, simply create a new file of the same size and mount that on /dev/loop1 when encrypting. -Tim Erik Kunze wrote: > > * Chris Schadl <cschadl@satan.org.uk> [020221 16:57]: > > Date: Thu, 21 Feb 2002 09:57:44 -0600 > > From: Chris Schadl <cschadl@satan.org.uk> > > Subject: Re: Crypted CDROMs > > > > # dd if=/dev/urandom of=~/crypto.iso bs=1M count=650 > > # losetup -e aes -k 192 /dev/loop0 ~/crypto.iso > > # mkisofs -r /stuff/SUPAR-SECRET-STUFF/ >/dev/loop0 > > # losetup -d /dev/loop0 > > > > Then you should be able to mount the encrypted iso image, or burn it to a > > CD-ROM. > > That's how I did! Please read my initial posting! Mounting of the image > fails. I haven't tried to burn the image and mount the CDROM. > > - > Linux-crypto: cryptography in and on the Linux system > Archive: http://mail.nl.linux.org/linux-crypto/ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
