Re: [gentoo-user] Encripting /home

2005-07-31 Thread Alexander Skwar
Richard Fish schrieb: Alexander Skwar wrote: Richard Fish schrieb: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in

Re: [gentoo-user] Encripting /home

2005-07-31 Thread Luigi Pinna
Alle 13:53, domenica 31 luglio 2005, Alexander Skwar ha scritto: How? /bin/crypsetup file-with-passphrase Where does the attacker see the passphrase? Oh. You took my example way too literally. *echo*ing the password is an extremely bad idea. You're of course right. But in reality I of

Re: [gentoo-user] Encripting /home

2005-07-31 Thread Richard Fish
Alexander Skwar wrote: Is it possible to encrypt the complete block device with loop-AES? Or does it only encrypt a file that's afterwards loop mounted? Yes. Everything that can be encrypted with dm-crypt can also be encrypted with loop-AES. For example, my laptop has two hard drives.

Re: [gentoo-user] Encripting /home

2005-07-30 Thread Richard Fish
Alexander Skwar wrote: Pupeno schrieb: On Wednesday 27 July 2005 20:54, Luigi Pinna wrote: I use the dm-crypt from the kernel I've read that it is unsecure Where? And how is it insecure? Some history: The original crypto-loop from 2.4 is very susceptible

Re: [gentoo-user] Encripting /home

2005-07-30 Thread Richard Fish
Alexander Skwar wrote: Richard Fish schrieb: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel, but I find it

Re: [gentoo-user] Encripting /home

2005-07-30 Thread Richard Fish
Alexander Skwar wrote: Richard Fish schrieb: So dm-crypt today provides the same level of security as loop-AES in single key mode, which as I already stated in a previous email, should be sufficient for most people. However, you did ask how it was insecure! :-) Yep, I did ask

Re: [gentoo-user] Encripting /home

2005-07-30 Thread Hani Duwaik
I'm not sure if anyone has covered this, but the following pdf was very useful for me to encrypt my home dir: www.flyn.org/docs/ehd.pdf The interesting part was using openssl to encrypt the key and then using your account's linux password to encrypt the openssl file. This way, you can change

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Ralph Slooten
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. You read wrong. Dm-crypt *is* the encryption technique now used in the kernel, and it wasn't chosen out

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Pupeno
On Friday 29 July 2005 04:13, Ralph Slooten wrote: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. You read wrong. Dm-crypt *is* the encryption technique now used in the kernel, and it wasn't

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Ralph Slooten
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As I said in another message, what I read is that the userland tools weren't supporting dm-crypt propersy. Probably I've read something that was outdated. An old bug I believe. ATM there is nothing I know of that supports a bug or flaw in any way.

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Alexander Skwar
Pupeno schrieb: On Wednesday 27 July 2005 20:54, Luigi Pinna wrote: I use the dm-crypt from the kernel I've read that it is unsecure Where? And how is it insecure? Beyond that, encripting with a key is much better than doing that with a passphrase because the passphrase can be

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Alexander Skwar
Richard Fish schrieb: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel, but I find it to be harder to setup hard to setup? How?

Re: [gentoo-user] Encripting /home

2005-07-29 Thread Alexander Skwar
Pupeno schrieb: On Thursday 28 July 2005 02:54, Richard Fish wrote: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel, but I find it to be

Re: [gentoo-user] Encripting /home

2005-07-28 Thread Pupeno
On Thursday 28 July 2005 02:54, Richard Fish wrote: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel, but I find it to be harder to setup

Re: [gentoo-user] Encripting /home

2005-07-28 Thread Richard Fish
Pupeno wrote: On Thursday 28 July 2005 02:54, Richard Fish wrote: Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel,

[gentoo-user] Encripting /home

2005-07-27 Thread Pupeno
Hello, I want to have the /home of my laptop encripted, with an external key (in a CD or floppy, until I get an usb pain drive), specially to be able to change the passphrase easily and have various medias with different passphrases and the same key (so, my wife can uses her own passphrase), is

Re: [gentoo-user] Encripting /home

2005-07-27 Thread Luigi Pinna
Alle 01:18, giovedì 28 luglio 2005, Pupeno ha scritto: Hello, I want to have the /home of my laptop encripted, with an external key (in a CD or floppy, until I get an usb pain drive), specially to be able to change the passphrase easily and have various medias with different passphrases and

Re: [gentoo-user] Encripting /home

2005-07-27 Thread Jerry McBride
On Wednesday 27 July 2005 07:54 pm, Luigi Pinna wrote: Alle 01:18, giovedì 28 luglio 2005, Pupeno ha scritto: Hello, I want to have the /home of my laptop encripted, with an external key (in a CD or floppy, until I get an usb pain drive), specially to be able to change the passphrase

Re: [gentoo-user] Encripting /home

2005-07-27 Thread Pupeno
On Wednesday 27 July 2005 20:54, Luigi Pinna wrote: Alle 01:18, giovedì 28 luglio 2005, Pupeno ha scritto: Hello, I want to have the /home of my laptop encripted, with an external key (in a CD or floppy, until I get an usb pain drive), specially to be able to change the passphrase easily

Re: [gentoo-user] Encripting /home

2005-07-27 Thread Richard Fish
Pupeno wrote: Hello, I want to have the /home of my laptop encripted, with an external key (in a CD or floppy, until I get an usb pain drive), specially to be able to change the passphrase easily and have various medias with different passphrases and the same key (so, my wife can uses her

Re: [gentoo-user] Encripting /home

2005-07-27 Thread Richard Fish
Pupeno wrote: I use the dm-crypt from the kernel I've read that it is unsecure and I also read that it is not yet vory well suported. Dm-crypt is fairly well supported, since it is in the kernel, but I find it to be harder to setup and less 'flexible' than loop-AES (the changing