Hello! I want to setup an encrypted filesystem. And I'm not sure which tools to use. Am I right that there are three mainly different methods? 1. CryotoAPI 2. loop-aes 3. int-kernel-patch I want to tell you how I understand it and maybe you could tell if I'm right or correct me. If I use CryptoAPI I have to patch the kernel with CryptoAPI and I have to patch the loop.c in der kernel-tree (with the IV or with the JARI patch). When I want to setup the EFS I have to load a few modlules from CryptoAPI and the ciphres and the patched loop modules. Right? I have to patch util-linux. But I heard thar the Debian-Packages are already pathed. Isn't it? If I use loop-aes I have to path just the loop.c and the util-linux programms and then I just have to load the patched loop module and can setup the EFS. Right? I tried this with a Debian 3.0r0 stable and I haven't patches util-linux but take the debian-packages. This doesn't work. I think the the patches in the Debian Package are just for CryptoAPI. Right? Int-Kernel-Patch is just list CryptoAPI. I also have to patch the loop module or add the LOOP_IV_HACK. I have choosen the LOOP_IV_HACK and it works. But I have read that you have to know what you are doning when using the LOOP_IV_HACK. I don't know... Can somebody tell me something about this hack? If it isn't good I want to use another method. So, if I am right, can you tell me which method to choos? I just want AES Encryption with 256 or 512 (better 512) Bits. I don't need all the other ciphers. But I don't want to ruin my debian-box. I want a clean and a secure setup. Maybe you can help me with the decision. Greetings from Germany, Florian Heiderich - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
