Re: Encrypted ext2 fs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Sanchez wrote:
| Finally I will use either the cryptoloop or the dm-crypt
| implementation.
|
| Has somebody already used the dm-crypt implementation? Does it work
| fine ? And where can I find HOW-TO on dm-crypt ?
|
| Thanks David

Best to use loop-aes.sf.net (see readme there for a detailed howto)
which supports multi-key crypto, and I have used it with reiserfs and
ext3 without any issues on software raid etc., as well as encrypted
multi-key swap, ephemeral /tmp etc.

Single key crypto (afaik dm-crypt as well the last time I checked) is
susceptible to the watermark attack... It has been discussed many times
on this list, see http://mareichelt.de/pub/texts.cryptoloop.php for a
start, and search the list archives.

Best regards,

- ---Venkat.

- --
https://rayservers.com/
Computers. Installed Secure. OpenPGP. AES Encrypted HD. Colocation.
Tel:+1-607-546-7300 Fax:+1-607-546-7387 Skype: rayservers
PGP/GPG Key: https://rayservers.com/keys/0x12430522.asc
4856 01AB F8BA E0EB F128 A57F 59D9 16FD 1243 0522
Your Privacy and Security are our Business [TM]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDDJqgWdkW/RJDBSIRAoVMAKDNLixOb/o5JSZDOzCzLDJzAtFcHgCgwWE7
3Yhps/RlRPe2bWXbWAkgzA4=
=7ZYa
-----END PGP SIGNATURE-----

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/


[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux