On Wed, Nov 03, 2010 at 07:26:12PM +0100, Jean-Michel Pour? - GOOZE wrote: > Dear friends, > > We would be happy to offer three Feitian PKI smartcards to the dm-crypt > project. Free Software developer can register here: > http://gooze.eu/feitian-pki-free-software-developer-card > > Also, we are currently writing a HOWTO to publish on GOOZE. > > Is there a way to enable dm-crypt using opensc-pkcs11.so on startup? > The idea is to have a complete encrypted system on boot. > > This probably involves creating an initrd with OpenSSL and OpenSC > included. Did anyone succeed in this? Having a not completely encrypted initrd and kernel does not qualify as "completely encrypted system on boot". Anyways, this is not really in the dm-crypt/LUKS focus, although some people go the way of having an initrd that does set-up an encrypted root. They typically find it painful and difficult to set-up, but it is possible. The main dm-crypt/LUKS focus is encrypted partitions in an otherwise not encrypted system. The only interface for integrating external keys is by reading them from file or stdin and that is by desing to keep things simple. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
