Re: Encrypting root partition

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le Samedi 4 Mai 2002 17:03, Eric a écrit :
>
> [...] My goal
> is to create a fully self-contained Linux system on a flash disk that can
> be distributed. [...]

> [...] I've got specific needs and reasons to want to
> accomplish this, so I'm hoping no one starts to debate the issue of
> distributing an encrypted Linux system.

Whatever your reasons can be, I believe that distributing an encrypted, 
copy-protected, Linux system, would be a major infrigement of the GPL licence.

So you are more than probably not legally allowed to do this.

You can encrypt _your_own_programs_and_code_ if you wish, buit you shouldn't 
distribute Linux itself in an encrypted way.


> The question, however, is how can
> I accomplish this?

Short answer: You probably cannot.

Because if there is to be no user-interaction (for entering a decryption key 
or password), and no machine-related lock or customization, then your flash 
card *must* contain its own decryption key, and be able to decrypt itself 
entirely by itself.

If so, anybody can easily copy the flash memory, and willl then get its exact 
copy that will run as well as the original did.

If you want to (try to) prevent copying, you will probably need to use custom 
hardware, you can't achieve this with storing something on a standard mass 
memory medium.

Furthermore, "encryption" and "copy protection" are two rather different 
topics, and this list is about encryption, not copy protection.

Besides this, most people in the free software world will probably share my 
opinion that copy protection is *bad* (besides the fact that it doesn't work, 
and doesn't stand very long against a determined and competent opponent).

Regards.

-- 
Michel Bouissou <michel@bouissou.net> OpenPGP ID 0x5C2BEE8F
-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/


[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux