Re: how can I be sure that my data is encrypted ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Basically, you would have to take the device mapper crypto target
specifocation and try to read the volume with software you 
implemebnted yourself.

To check that at least some transformation is done, look at the 
raw data in the partition (/dev/sda6). It needs to look random.

As to mounting, the cipher is not involved in the mount. That
would be for an encrypted filesystem, but standard dm-crypt
does create an encrypted partition (i.e. raw storage).
'volume0' in your case is already unencrypted. The encrypted
partition is /dev/sda6.

Arno



On Thu, Apr 16, 2009 at 12:39:58PM +0600, Muhammad Sharfuddin wrote:
> I did the following
> 
> # echo 0 `blockdev --getsize /dev/sda6` crypt aes-plain
> 0123456789abcdef0123456789abcdef 0 /dev/sda6 0 | dmsetup create volume0
> 
> # mkfs.reiserfs /dev/mapper/volume0
> # mount /dev/mapper/volume0 /mnt
> # mount |grep volume0
> /dev/mapper/volume0 on /mnt type reiserfs (rw)
> 
> Now how can I verify that its(encryption) working fine or not ? 
> 
> I unmount and mount the /dev/mapper/volume0 several times, but it never
> ask me to provide the cipher. 
> 
> How can I be sure that my data is safe ?
> 
> -- 
> Regards,
> 
> Muhammad Sharfuddin
> 
> 
> 
> 
> ---------------------------------------------------------------------
> dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
> To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
> For additional commands, e-mail: dm-crypt-help@xxxxxxxx
> 

-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux