[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: LoopAES and FreeOTFE

Hi Melkor Lord,

Freeotfe only seems to support single-key mode. I don't have any
problems with it. (perhaps there are the usual problems with wrong
keymaps, short passphrases,...)

example:
PASSPHRASE="LevwQM0dBmfltvfzk6chjKTrMICZUgpM+vtD82rZtZMfgaWxGvO+4NXmJ1KKRHTf" 
echo "$PASSPHRASE" | losetup -e AES128 -p 0 /dev/loopX /dev/sdX

freeotfe settings:
key:LevwQM0dBmfltvfzk6chjKTrMICZUgpM+vtD82rZtZMfgaWxGvO+4NXmJ1KKRHTf
hash: sha256 (or sha384 for aes192, sha512 for aes256)
sector IV: 32bit sector id
Cipher: aes-cbc

single key mode of loop-AES is also compatible with aes-cbc-plain of
dmcrypt. you can access /dev/sdX in this way: 

echo "$PASSPHRASE" | cryptsetup create -c aes-cbc-plain -h sha256 \
-s 128 mydevice /dev/sdX 

dmcrypt is a little bit faster than loop-AES (at least at my
system,...) (Of course, the '-C' switch won't work here)

However, using single-key mode is not recommended.


Am Wed, 19 Mar 2008 06:15:59 +0100
schrieb "Melkor Lord" <melkor.lord@xxxxxxxxx>:
> Hi all, especially Jari :-)
> 
> Is there a way to open simple file backed LoopAES volumes using
> FreeOTFE ? (http://www.freeotfe.org)
> 
> Ie:
> 
> losetup -e AES128 /dev/loop0 SomeFile
> 
> mkdosfs -F 32 /dev/loop0
> 
> mount /dev/loop0 /mnt/windisk
> 
> cp /etc/issue /mnt/windisk
> 
> umount /mnt/windisk
> 
> 
> So, this is the simplest encryption mode of LoopAES (no multikey,
> etc..)
> 
> I tried to open it with FreeOTFE (which mentions LoopAES in the docs
> as references but not about supporting it of course) but no success.
> 
> Anybody tried and succeeded ?

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/