Re: [work] Re: Encrypted CDs/DVDs

[Michael Janich <mjanich@thisisnoble.com>]

Title:

Jari,

thanks so much, for your help. It is exactly what I want.

I use Redhat 8.0 and it comes with the other crypt-loop (is it called IV?)

I've been able to create an image like below:

mkisofs -J -R -o cd3.img photo-album/
aespipe -e AES128 -T < cd3.img > cd3enc.img
cdrecord -v dev=0,0,0 -eject cd3enc.img

I could not mount it with 'mount', but I've been able to do this:

losetup -e aes -k 128 -P sha256 /dev/loop0 /dev/cdrom
mount -o ro -t iso9660 /dev/loop0 /cryptcd

So all of that works.

But I really like to have an entry in /etc/fstab, that can transparently
mount it.
Right now I have:
/dev/cdrom              /cryptcd                iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=AES128 0 0
but that does not work.

Any comments or tips? Much appreciated!

Happy new year!!

      Michael


Jari Ruusu wrote:
> Michael Janich wrote:
> > I want to create/burn  encrypted CDs and DVDs.
> >
> > Do I do this with
> >
> >    mkisofs ... | aespipe -k256 ... | cdwrite -
> >    mount /dev/cdrom -o loop -e aes256 /cdrom
> >
> > Does someone have any experience with this?
> >   
> Example 4 from aespipe README file:
>
> Create encrypted ISO9660 CD-ROM image that can be mounted using Linux
> loop-AES crypto package:
>
>     mkisofs -r directory-tree | aespipe -e AES128 -T >image.iso
>     
> This image file can then be mounted under Linux like this:
>
>     mount -t iso9660 image.iso /cdrom -o loop=/dev/loop0,encryption=AES128
>
> Or, after writing image.iso to CD-ROM, like this:
>
>     mount -t iso9660 /dev/cdrom /cdrom -o loop=/dev/loop0,encryption=AES128
>
>
> Latest version (v2.1a) of aespipe is here:
>
>     http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2
>     http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2.sign
>
> Regards,
> Jari Ruusu <jari.ruusu@pp.inet.fi>

-- 

   Michael Janich, Chief Technology Officer, Noble Group Ltd, Hong Kong
   http://www.thisisnoble.com/  Tel: +852 2861-4615. Fax: +852 2865-3865.

S/MIME Cryptographic Signature