Re: encrypted filesystems



Hi,

actually it was in the kernel 2.4-days when I tried, but I guess, it
mostly works along the same lines.

What I did then was an encrypted file which I mounted (with -o loop) as
partition. Your hard drive should behave the same, but I would suggest
you to check whether you want to encrypt the whole drive or rather just
a part of it (say 2 GB) which you use for the sensitive data.

Check back on the discussion about security versus safety ;-) My
suggestion is to keep the amount of encrypted data low so at least some
attacks on the key (the ones which need a lot of data to work) are harder.

The howto was something like this:
1. check if your kernel has the modules for encryption.
2. create a file (dd if=/dev/null of=mycrptfs.file bs=1024)
3. create an encrypted fs in it
4. mount manually each time you want to use it, giving the password

Though I cannot tell you the exact commands from memory, you should be
able to find all the information you need. Especially as you said you
found an old howto, check back if it lists the same procedure and give
it a try! The stuff inside the kernel did change since 2.2, but the user
interface did stay mostly the same ;-)

Have fun!

PS: I will not give you any warranty ;-)

.



Relevant Pages

  • Re: Back to the future.
    ... Then port lzf to the kernel, or help with the lzo port. ... Swsusp might want RSA crypto, but it doesn't really need it. ... it only uses it to be able to suspend without asking for a passphrase. ... When a user logs in: get random data and encrypt it with the password, ...
    (Linux-Kernel)
  • Re: Am I thinking correctly?
    ... > ext3 and fs code in the kernel proper. ... > The idea is to encrypt data just prior to it being written to disk. ... To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ ...
    (Linux-Kernel)
  • Re: Encrypted Hard Drive
    ... I think you can encrypt everything except from your /boot partition. ... This teqniue should work with both bestcrypt and ... If you want to hide your kernel as well, ...
    (comp.os.linux.security)
  • Q: losetup encryption on raw disk
    ... I am running Debian/Gnu Linux with the 2.4.22 kernel. ... use losetup to encrypt a raw disk. ...
    (comp.os.linux.misc)
  • Re: RFC: backporting GEOM to the 4.x branch
    ... > would be addressed by this, but wouldn't require replacing AES entirely. ... > cipher with a 64-bit blocksize), one should never encrypt more than ... Regarding the threat model - imagine an attacker sending you a number ... Algebraic attacks on AES show that AES may indeed be broken sooner than ...
    (freebsd-hackers)