On Sat, Jun 26, 2010 at 05:29:08PM +0200, Milan Broz wrote: > On 06/12/2010 08:06 PM, booger@xxxxxxx wrote: >> Hello, >> >> I own the QNAP TS419 PRO NAS device which is basically: >> >> Linux NAS 2.6.30.6 #1 Tue Apr 27 02:06:10 CST 2010 armv5tel unknown >> >> It has dm-crypt support and I am trying to encrypt my external disk, >> connected by esata interface. It is visible as /dev/sdy, it has one >> partition, /dev/sdy1. >> >> Unfortunatelly when I do cryptsetup luksFormat I get following error message: > > > The command fails, because you are trying to use AES, not DES or triple DES. > If there is no aes module (try modprobe aes) and you really want to force use 3DES, > you can - just you have to specify key size also. > (But you cannot use ESSIV here, just plain or benbi type IV mode.) > > For DES: > cryptsetup -c des-cbc-plain -s 64 luksFormat <dev> > > FOR 3DES: > cryptsetup -c des3_ede-cbc-plain -s 192 luksFormat <dev> > > Milan Be aware that on practically all hardware, DES and especially 3DES is significantly slower than AES. Also DES can be regarded as broken in practice, not only in the academic sense. Do not use DES/3DES unless you have a very good reason and do not mind running an insecure system. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
