hi, i'm trying to use cryptsetup and loop devices on an embedded device with ARM architecture. first some info: kernel: 2.6.16.16-arm1, i added some modules manually to the stock kernel (e.g. dm-mod, dm-crypt, fuse, ...) device-mapper: 1.02.10 (newer versions seem to check for DM_NOFLUSH_FLAG which isn't present in my kernel) cryptsetup-luks-1.0.4 with 03_no_header_conv.patch e2fsprogs-1.39 for libuuid popt 1.7 hashalot-0.3 libgpg-error-1.6 libgcrypt-1.4.0 losetup from util-linux-ng-2.13 i tested aes-cbc-essiv:sha256 and -c blowfish -h sha256 for luksFormat. i'm using a test keyfile generated with head -c1024 /dev/urandom setting up: losetup /dev/loop0 testfile cat /mnt/usb/key | cryptsetup -c aes-cbc-essiv:sha256 luksFormat /dev/loop0 cat /mnt/usb/key | cryptsetup luksOpen /dev/loop0 media mount /dev/mapper/media /mnt/disk1/decrypted now the problem: when issuing the luksOpen command, the system *sometimes* gives me the following error message: Command failed: No key available with this passphrase. if i try the command say 2-10 times it suddenly works fine after a while: key slot 0 unlocked. Command successful. what could be the problem? my guess is some problem with the device-mapper, but i can't figure it out (can't debug on the device, no strace). as a workaround i've written a mount perl script that checks for a few times whether luksOpen worked an then mounts the device. tx for any input, JG --------------------------------------------------------------------- dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/ To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx For additional commands, e-mail: dm-crypt-help@xxxxxxxx
