Re: [Cooker] Encrypted partitions with Mandrake?
On Thu, 2 Oct 2003, lamikr_mdk wrote: Thanks, that was exactly the way how I would actually like to make the partition. Can I ask some more questions... What tools you use/did use for initializing the keys, creating the 2 GB file and for mounting that file as a partition. Err - that's a tricky one. So long ago :-) I *think* I grabbed an RPM - mkcryptfs from someplace. I'm operating remotely right now - I'll be back in Australia next week and can less painfully check. But have a look for mkcryptfs, it's just a script. That helped to googling. I found following page which contains instructions: http://openpgp.vie-privee.org/linux_en.html According to page the password must always be atleast 20 characters long just like you descriped... :-( Mika Perhaps one of you can add a short howto on the community wiki? d.
Re: [Cooker] Encrypted partitions with Mandrake?
Thomas Backlund wrote: See http://loop-aes.sourceforge.net/loop-AES.README for details? This is supported in MDK kernels... Yes, since 8.2, and it is really cool to support this out-of-the-box (SuSE does, but RedHat doesn't). Swap can also be encrypted (in your /etc/fstab, at the swap line, replace defaults by encrypted and reboot). But remember to come back to defaults before you upgrade your Mandrake 9.1 in 9.2 ! The problem with encrypted FS is : how to create easily the encrypted folder or the encrypted partition ? - Encrypted folder : mkcryptfs is a little script to help the creation (RPM noarch.mdk available at https://www.bouissou.net/wws/d_read/open-crypto/linux-crypto/mkcryptfs - Encrypted partition : during installation, Diskdrake supports the encrypted partition creation (choose custom partitionning, then options, then encrypted) for /home and /tmp, but unfortunately NOT for the /var partition. -- pplf - French OpenPGP page[EMAIL PROTECTED] OpenPGP en francais PGP: 8263 8399 2074 5277 a6d3 http://www.openpgp.fr.st 622d 1b66 ea3d caa0 8c94 Anyone who quotes me in their sig is an idiot. -- Rusty Russell.
Re: [Cooker] Encrypted partitions with Mandrake?
I use the MDK provided encrypted FS for 1 File System - not a partition - just a 2GB file inside an ext3 FS. Works in a non-integrated way (as in tools like nautilus have no way of asking you for the password when you go to mount it). It uses the AES cipher, with 256 bit keys. Some people don't like typing in the 20 odd characters it wants for a key. Apart from that, haven't had a problem or an issue with it. The nice thing about this is I can put it on a DVD, and not worry about mis-placing the DVD. Can mount it anyplace with the loop AES stuff. Thanks, that was exactly the way how I would actually like to make the partition. Can I ask some more questions... What tools you use/did use for initializing the keys, creating the 2 GB file and for mounting that file as a partition. Does all tools you need come with Mandrake or have you downloaded some other tools from the internet? Has there ever been any problems with this partition? (Noticieable speedup problems, problems with symbolic links, copying large amount of files or something like that...) Mika
Re: [Cooker] Encrypted partitions with Mandrake?
On Wed, 2003-10-01 at 22:19, lamikr_mdk wrote: Thanks, that was exactly the way how I would actually like to make the partition. Can I ask some more questions... What tools you use/did use for initializing the keys, creating the 2 GB file and for mounting that file as a partition. Err - that's a tricky one. So long ago :-) I *think* I grabbed an RPM - mkcryptfs from someplace. I'm operating remotely right now - I'll be back in Australia next week and can less painfully check. But have a look for mkcryptfs, it's just a script. Does all tools you need come with Mandrake or have you downloaded some other tools from the internet? Has there ever been any problems with this partition? (Noticieable speedup problems, problems with symbolic links, copying large amount of files or something like that...) Zero problems. It's an ext3 FS, my only qualm is that I can't recall fsck'ing it ever :-) /Kevin -- Kevin J. Maciunas Net: [EMAIL PROTECTED] Dept. of Computer Science Ph : +61 8 8303 5845 University of Adelaide Fax: +61 8 8303 4366 Adelaide 5005 SOUTH AUSTRALIA Web: http://www.cs.adelaide.edu.au/~kevin Fingerprint = 7E5A A0C2 22BC 5993 17F2 93CE B1FD DEC6 D0C0 50CD
Re: [Cooker] Encrypted partitions with Mandrake?
Thanks, that was exactly the way how I would actually like to make the partition. Can I ask some more questions... What tools you use/did use for initializing the keys, creating the 2 GB file and for mounting that file as a partition. Err - that's a tricky one. So long ago :-) I *think* I grabbed an RPM - mkcryptfs from someplace. I'm operating remotely right now - I'll be back in Australia next week and can less painfully check. But have a look for mkcryptfs, it's just a script. That helped to googling. I found following page which contains instructions: http://openpgp.vie-privee.org/linux_en.html According to page the password must always be atleast 20 characters long just like you descriped... :-( Mika
Re: [Cooker] Encrypted partitions with Mandrake?
From: lamikr_mdk [EMAIL PROTECTED] Can anybody give me details how strong is the encryption if I create encrypted mount point partition during the Mandrake install? Or should I use some PKI based loopback crypto package like loop-AES. See http://loop-aes.sourceforge.net/loop-AES.README for details? This is supported in MDK kernels... Has anybody had any experiences from either of these? Or from some other encrypted loop device solutions? Thomas
Re: [Cooker] Encrypted partitions with Mandrake?
Has anybody had any experiences from either of these? Or from some other encrypted loop device solutions? I use the MDK provided encrypted FS for 1 File System - not a partition - just a 2GB file inside an ext3 FS. Works in a non-integrated way (as in tools like nautilus have no way of asking you for the password when you go to mount it). It uses the AES cipher, with 256 bit keys. Some people don't like typing in the 20 odd characters it wants for a key. Apart from that, haven't had a problem or an issue with it. The nice thing about this is I can put it on a DVD, and not worry about mis-placing the DVD. Can mount it anyplace with the loop AES stuff. /Kevin -- Kevin J. Maciunas Net: [EMAIL PROTECTED] Dept. of Computer Science Ph : +61 8 8303 5845 University of Adelaide Fax: +61 8 8303 4366 Adelaide 5005 SOUTH AUSTRALIA Web: http://www.cs.adelaide.edu.au/~kevin Fingerprint = 7E5A A0C2 22BC 5993 17F2 93CE B1FD DEC6 D0C0 50CD
Re: [Cooker] Encrypted partitions with Mandrake?
The nice thing about this is I can put it on a DVD, and not worry about mis-placing the DVD. Can mount it anyplace with the loop AES stuff. well lets just say if you ever need to worry about the DVD then you have bigger problems also (of the acronym kind ie NSA FBI GRU KGB CIA ...)
[Cooker] Encrypted partitions with Mandrake?
Can anybody give me details how strong is the encryption if I create encrypted mount point partition during the Mandrake install? Or should I use some PKI based loopback crypto package like loop-AES. See http://loop-aes.sourceforge.net/loop-AES.README for details? Has anybody had any experiences from either of these? Or from some other encrypted loop device solutions? Mika
