Re: Re: trouble managing key.file

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all!
Dear Jonas, You guessed all perfectly...
Now I've to backup and restore all partition on a new encrypted device with a 32 bytes key...
Thanks for all!
:)
Cheers...

Salud!
Pierino, la peste.

Info di servizio.. http://utenti.tripod.it/Pierino_lapeste/
E' l'indirizzo della mia home page.. utile a chi ha intenzione di rinfrescarsi la memoria sui modems. Ringrazio tutti i volenterosi che vorranno aiutarmi a migliorarla!


--- Mer 7/1/09, Jonas Meurer <jonas@xxxxxxxxxxxxxxx> ha scritto:

> Da: Jonas Meurer <jonas@xxxxxxxxxxxxxxx>
> Oggetto: Re:   Re: trouble managing key.file
> A: "mum laris" <mum_laris@xxxxxxxxx>
> Cc: dm-crypt@xxxxxxxx
> Data: Mercoledì 7 gennaio 2009, 00:40
> Hey,
> 
> On 06/01/2009 mum laris wrote:
> > 2) sudo cryptsetup create sda10 /dev/sda10
> > --key-file=/mnt/"long_path_to_my"/sda10
> > Command failed: Key processing error: Could not read
> 32 bytes from key
> > file
> > 
> > So, may be system expect a 32bit key, also if I've
> use a shortest one
> > and this is the reason for which auto-mount fails
> during startup? Is
> > there a way to explain it that: ok the key is shortest
> of what do You
> > expect, but... please don't say it anymore?
> 
> The issue here is that plain dm-crypt mapping requires a
> keyfile with at
> least 32 bytes. iirc this is not the case for LUKS
> mappings, but I'm not
> sure about that.
> 
> If I got you right, then you used a passphrase to
> originally create the
> dm-crypt mapping, and now you tried to setup mapping for
> the same device
> with a keyfile containing the passphrase instead of using
> the passphrase
> input prompt.
> 
> Even if this works in theory (i'm still not sure about
> it), then the
> requirement of a key larger or equal to 32 bytes still
> applies. So
> you'll have to use a passphrase with more than 32
> bytes.
> 
> And no, there's no way to make cryptsetup ignore this
> requirement.
> 
> Why don't you use the --key-file facility with a real
> random key in the
> first place to setup your dm-crypt mapping?
> 
> greetings,
>  jonas


      

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx



[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux