-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The Sunday 2007-12-09 at 12:54 -0800, John R. Sowden wrote:
I had a mb die. I pulled the ide drive, put it in a usb/ide thingie
(technical term), plugged it into my new box with 10.3 installed. I can
access the dos partitions, but not the reiser root partition. Additionally,
I read, somewhere, that the crypto system has changed in 10.3. Of course I
know the key, but I am not sure of the encryption method.
In 9.3 the method changed.
Look up in the security list archive this thread:
Date: Sun, 11 Feb 2007 02:06:11 +0100 (CET)
From: Carlos E. R.
To: OS-sec <[EMAIL PROTECTED]>
Subject: [opensuse-security] Weird encrypted filesystem problem.
There the different encryption methods used by Yast in 9.2 and later were
explained somewhat.
Basically:
twofish256: <--- I think this was used in 9.3, not sure
ivgen='plain'
hashalgo='sha512'
klen='256'
istwofish=''
twofishSL92:
ivgen=null
hashalgo='sha512'
klen='256'
istwofish=''
twofish:
ivgen=null
hashalgo='sha512'
klen=192
istwofish=''
hashalgo="ripemd160:20"
name=justaname
dev=/dev/availableloopdeice
losetup $dev /encriptedfileorpartitiontomount
cryptsetup create "$name" "$dev" --cipher twofish-cbc-$ivgen -s $klen -h
$hashalgo
Then, read this other thread:
Date: Thu, 29 Nov 2007 04:18:21 +0100 (CET)
From: Carlos E. R.
To: OS-sec <[EMAIL PROTECTED]>
Subject: [opensuse-security] How does one convert from /etc/cryptotab to
/etc/crypttab
- From there you can glean the data to edit the /etc/crypttab file
appropiately to activate your partition. There is also a web page listed
with a lot of info:
http://www.suse.de/~lnussel/hdencryption/hdencryption.html
and:
cryptsetup manpage
http://www.saout.de/tikiwiki/tiki-index.php
http://www.saout.de/tikiwiki/tiki-index.php?page=LUKS
http://luks.endorphin.org
- --
Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
iD8DBQFHXHNetTMYHG2NR9URAqjkAJ9hTl7cL++LKq0qkOquXaf4UZWLZgCfbjjg
IyWO20WaV0AniuA6yHFwd5M=
=mQXl
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
