recently i set up a crypted filesystem and use it already successfully.
for testing purposes (and 'cause i'm lazy) i've always used the option "-p" when initializing the loop-device via losetup:
losetup -k 128 -p 26 -e serpent /dev/loop6 /dev/sdb2
that way, i don't have to type in the passphrase manually, instead, as i understood correctly, the passphrase is taken from the file located on inode# 26.
now i really _want_ to type in the passphrase manually. but losetup seems not to accept it. there is no error message like "wrong pw" or so but the following mount (right after losetup) is
failing, which leads me to the assuption that losetup has not recognized
the passphrase and the loopdevice was not set up correctly, hence the
mount fails.
the "-p" option is not that much documented in the manpage, am i missing an important fact about it?
an no, and it's no typo here, the passphrase is right :-)
below is the output of some operations i took from the Loopback Encrypted Filesystem HOWTO and CryptoAPI doc resources. i'm new to this crypto-fs stuff, so maybe there is even more wrong, please have a look.
Thanks, Christian.
root@xxxxx:~# losetup -k 128 -p 26 -e serpent /dev/loop6 /dev/sdb2 root@xxxxx:~# losetup /dev/loop6 /dev/loop6: [0805]:22698 (serpent-cbc) offset 0, undefined encryption root@xxxxx:~#
(undefined encryption?)
root@xxxxx:~# losetup -d /dev/loop6
root@xxxxx:~# losetup /dev/loop6
loop: can't get info on device /dev/loop6: No such device or address
root@xxxxx:~#
root@xxxxx:~# losetup -k 128 -e serpent /dev/loop6 /dev/sdb2
Password :
root@xxxxx:~# mount -t ext3 -o loop=/dev/loop7,noatime /dev/loop6 /data/New/
mount: wrong fs type, bad option, bad superblock on /dev/loop7,
or too many mounted file systems
root@xxxxx:~#upon mounting, no matter with or without "-p", syslog brings:
Jun 30 17:16:20 sheep cryptoapi: trying cipher-(null)-cbc
Jun 30 17:16:20 sheep modprobe: modprobe: Can't locate module cipher-(null)-cbc
Jun 30 17:16:20 sheep cryptoapi: trying cipher-(null)
Jun 30 17:16:20 sheep modprobe: modprobe: Can't locate module cipher-(null)
Jun 30 17:16:20 sheep cryptoapi: trying cipher
Jun 30 17:16:21 sheep modprobe: modprobe: Can't locate module cipher
Jun 30 17:16:21 sheep cryptoapi: trying cipher-(null)-cbc
Jun 30 17:16:21 sheep modprobe: modprobe: Can't locate module cipher-(null)-cbc
Jun 30 17:16:21 sheep cryptoapi: trying cipher-(null)
Jun 30 17:16:21 sheep modprobe: modprobe: Can't locate module cipher-(null)
Jun 30 17:16:21 sheep modprobe: modprobe: Can't locate module cipher
root@xxxxx:~# ls /proc/crypto/cipher/ serpent-cbc serpent-cfb serpent-ctr serpent-ecb serpent-rtc root@xxxxx:~# ls /proc/crypto/digest/ root@xxxxx:~#
this is Linux Debian/PPC, stable with kernel 2.4.20, cryptoapi-core-source 0.1.0-2, cryptoloop-source 0.0.0+0.0.1-pre1-6.
-- BOFH excuse #46:
waste water tank overflowed onto computer
- Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
