-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 04/29/2014 12:27 PM, Walter Dnes wrote: > On Mon, Apr 28, 2014 at 09:51:18PM -0400, Rick "Zero_Chaos" Farina wrote > >> I suggest with LUKS. Also I suggest using ext4 and disabling the >> journal (mkfs.ext4 -O ^has_journal). > > I didn't know you could do that, but what's the point? I'm not trying > to be argumentative, but isn't ext4 without a journal a glorified ext2? > I believe that an ext2 driver can read ext4, if none of the fancy ext4 > options have been invoked. And ext4 can read ext2.
I'm not a filesystem expert but there are more differences between ext2 and ext4 than the journal... I think :-) > > Another couple of things I didn't realize. According to > https://wiki.gentoo.org/wiki/Dm-crypt I have to build in support for the > crypt target in the kernel. It also suggests > <*> SHA224 and SHA256 digest algorithm > > Any comments on their strength? I'm not worried about the NSA or CSIS > as much as opportunistic criminals. I use whirlpool. Why you ask? It sounds cool! Also it supported 512bit which seems nice. > > One other item in passing. The "make menuconfig" help text for > CONFIG_DM_CRYPT points to http://www.saout.de/misc/dm-crypt/ but that > site says, and I quote... > >> Note: This page is horribly out of date. >> You can find the current pages for the dm-crypt project (the Linux >> kernel part) here: http://code.google.com/p/cryptsetup/wiki/DMCrypt >> and the project page for the command line tool cryptsetup (with Linux >> Unified Key Setup - LUKS) here: http://code.google.com/p/cryptsetup/. > > Who should be notified about this? I don't think kernel help text > (except for Gentoo Sources patches) is handled by Gentoo developers. > https://bugzilla.kernel.org/ Thanks, Zero -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTX+I+AAoJEKXdFCfdEflKolMP/isYoZMccymIqKeVI/MVDxSM 2EMuEFVpopcvmvuDwRXw0U9XB0b04Yr8SDevL+Tb+zOgSGidKGX4cAwHkAH5p2fp KOchjP0gXzO/oHfRJgaECP7G8ovtvaOyiUdokb352D1RJsYcq/aqXGbNNDLmziZo Ng3qR8R3/3TuwJSZZ8TGFFN/wBc05yUzWy+FD9YDWucn6fBQrloogU/Ie5Pdussf xxQt/Hb4+6Rjz8mUsGs2vWcoHHkyYmOAt/Qp5HaZ4bwXtZEpxB49xAPXjAyi2Z2n Z99+xR14BpAi61RdsJE3OIbOscf5w5prx7gWtoWKKCSvWX9OL7/F22duBZP2KnVx Epwv4+sySlb0Cco+gd6Chxw3HsKPqiNhSoObTMzdFVoqZHoBhut8/d1ynwcI46+J +kVfXUOhKIchFf4KVTcQxO3uD3BniDhZc17AB5KNy52A9cKX+OEEZGdu/JxzwwjQ BTkUkbb8cDc5PSB/zE0udksxFWcSIJR231oUMesWdtCT7R81ZonBEg3lE1UpmCaB neg+RPhdEMA7zPLq8SdaNUuz0xoxDRRFX43mwLyXdf/EcHoGIFazjHb9AW/Yu3WF 4cYVXAlNQ69/Q84M6jlLR+9ED5zegLy3WsVApE1+Am9uEwYmoO5Lnk69wxr3pGkf mDfrIIdHQlY45aP/tnFz =JKfw -----END PGP SIGNATURE-----
