Christophe Devine wrote: > A new version of the encrypted filesystem howto for the LFS project > has been released, and is available at: > > http://hints.linuxfromscratch.org/hints/cryptoapi.txt > > Please let me know if you find any errors or typos in it. 1) For encrypted swap, best choice is to put put swap on encrypted partition. Type "man swapon" for more details. 2) You recommend use of unseeded (unsalted) passwords. Please consider using 'losetup -S XXX' and 'mount -o pseed=XXX' options. Seeded passwords offer much better resistance against optimized dictionary attacks. 3) You recommend loop-AES-v1.6i version. A small but important bug was fixed in loop-AES-v1.7b that affects version v1.6i. If you insist on using version v1.6i, please apply this patch after applying loop-AES-v1.6i/kernel-2.4.20.diff --- linux-2.4.21-pre4-AES/drivers/block/loop.c.old Thu Jan 30 11:59:54 2003 +++ linux-2.4.21-pre4-AES/drivers/block/loop.c Thu Jan 30 12:00:37 2003 @@ -600,6 +600,7 @@ struct buffer_head *bh; struct loop_device *lo; + set_current_state(TASK_RUNNING); if (!buffer_locked(rbh)) BUG(); Regards, Jari Ruusu <jari.ruusu@pp.inet.fi> - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
