Re: [work] Re: Encrypted CDs/DVDs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jari,

thanks so much, for your help. It is exactly what I want.

I use Redhat 8.0 and it comes with the other crypt-loop (is it called IV?)

I've been able to create an image like below:

mkisofs -J -R -o cd3.img photo-album/
aespipe -e AES128 -T < cd3.img > cd3enc.img
cdrecord -v dev=0,0,0 -eject cd3enc.img

I could not mount it with 'mount', but I've been able to do this:

losetup -e aes -k 128 -P sha256 /dev/loop0 /dev/cdrom
mount -o ro -t iso9660 /dev/loop0 /cryptcd

So all of that works.

But I really like to have an entry in /etc/fstab, that can transparently mount it.
Right now I have:
/dev/cdrom              /cryptcd                iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=AES128 0 0
but that does not work.

Any comments or tips? Much appreciated!

Happy new year!!

      Michael


Jari Ruusu wrote:
Michael Janich wrote:
  
I want to create/burn  encrypted CDs and DVDs.

Do I do this with

   mkisofs ... | aespipe -k256 ... | cdwrite -
   mount /dev/cdrom -o loop -e aes256 /cdrom

Does someone have any experience with this?
    

Example 4 from aespipe README file:

Create encrypted ISO9660 CD-ROM image that can be mounted using Linux
loop-AES crypto package:

    mkisofs -r directory-tree | aespipe -e AES128 -T >image.iso
    
This image file can then be mounted under Linux like this:

    mount -t iso9660 image.iso /cdrom -o loop=/dev/loop0,encryption=AES128

Or, after writing image.iso to CD-ROM, like this:

    mount -t iso9660 /dev/cdrom /cdrom -o loop=/dev/loop0,encryption=AES128


Latest version (v2.1a) of aespipe is here:

    http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2
    http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2.sign

Regards,
Jari Ruusu <jari.ruusu@pp.inet.fi>

  

-- 

   Michael Janich, Chief Technology Officer, Noble Group Ltd, Hong Kong
   http://www.thisisnoble.com/  Tel: +852 2861-4615. Fax: +852 2865-3865. 

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux