From linux-crypto-bounce@nl.linux.org Sun Aug 01 02:20:53 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Br40W-0004yK-BB; Sun, 01 Aug 2004 02:15:20 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 01 Aug 2004 02:15:13 +0200 (CEST) Received: from pop.gmx.net ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Br40G-0004wZ-DB for linux-crypto@nl.linux.org; Sun, 01 Aug 2004 02:15:04 +0200 Received: (qmail 931 invoked by uid 65534); 1 Aug 2004 00:14:53 -0000 Received: from pD9E716C9.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.22.201) by mail.gmx.net (mp003) with SMTP; 01 Aug 2004 02:14:53 +0200 X-Authenticated: #6241123 Message-ID: <410C444E.7060306@gmx.net> Date: Sun, 01 Aug 2004 02:15:58 +0100 From: Christian User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Kernel panic Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hello, I'm at step 14 of Jari's HOWTO (Section "7.6. Example 6 - Boot from CD-ROM + encrypted root partition"). Before encrypting my data with the rescue CD, I wanted to test the CD burned at step 13e. However, I get a kernel panic: VFS: Unable to mount root fs on ram0. Is this an expected error since nothing is encrypted yet? How can I make sure that the CD will work after my data is encrypted? Thanks, Christian - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Aug 01 16:49:44 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrHQD-0001RF-8w; Sun, 01 Aug 2004 16:34:45 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 01 Aug 2004 16:34:39 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrHPv-0001QP-Kf for linux-crypto@nl.linux.org; Sun, 01 Aug 2004 16:34:27 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 5B5E4100067; Sun, 1 Aug 2004 17:34:19 +0300 (EEST) Received: from users.sourceforge.net (e717.yhteys.mtv3.fi [62.237.23.231]) by mato.luukku.com (Postfix) with ESMTP id A88CD22EE88; Sun, 1 Aug 2004 17:34:18 +0300 (EEST) Message-ID: <410CFFA1.55BED425@users.sourceforge.net> Date: Sun, 01 Aug 2004 17:35:13 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: a.engels@gmx.net Cc: linux-crypto@nl.linux.org Subject: Re: Security pgp + mulitkey vs. single key References: <15673.1091283196@www13.gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto a.engels@gmx.net wrote: > Imagine the following 2 scenarios: > > a) > salted single key setup: > the encrypted image is stolen. the attacker knows the salt, but not the used > password. > > b) > pgp multikey setup: > encrypted image + pgp encrypted multikey file is stolen and the attacker > doesnt know the pgp password. > > In which case it is easier to recover the data? a) has some known security > weaknesses (watermark), but maybe its easier in b) to do brute force > cracking? pgp multi-key setup is better, especially if patched version of gpg is used (patch from loop-AES tarball). > I think pgp must store some kind of checksum of the encrypted data, because > it recognizes if one enters a wrong password. If I remember correctly, encrypted data is prefixed with random bits and another 16 bits that are copies of earlier random bits. When decrypting, gpg knows that passphrase was wrong if those 16 bits decrypt incorrectly. Also, newer gpg on-disk formats include encrypted sha1 hash of the data. > I assume it could be exploited to speed up cracking? Nope. Most of the per passphrase computing cost is in iterated+salted key setup. And loop-AES' gpg patch makes key iteration 128 times slower than the default value. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Aug 01 16:50:34 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrHaV-0001TP-7W; Sun, 01 Aug 2004 16:45:23 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 01 Aug 2004 16:35:12 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrHQO-0001Rq-Ie for linux-crypto@nl.linux.org; Sun, 01 Aug 2004 16:34:56 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 08E35FFAC3; Sun, 1 Aug 2004 17:34:52 +0300 (EEST) Received: from users.sourceforge.net (e717.yhteys.mtv3.fi [62.237.23.231]) by mato.luukku.com (Postfix) with ESMTP id 582D422EE8C; Sun, 1 Aug 2004 17:34:51 +0300 (EEST) Message-ID: <410CFFC2.EEA5FD33@users.sourceforge.net> Date: Sun, 01 Aug 2004 17:35:46 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: Christian Cc: linux-crypto@nl.linux.org Subject: Re: Kernel panic References: <410C444E.7060306@gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Christian wrote: > I'm at step 14 of Jari's HOWTO (Section "7.6. Example 6 - Boot from > CD-ROM + encrypted root partition"). > > Before encrypting my data with the rescue CD, I wanted to test the CD > burned at step 13e. However, I get a kernel panic: VFS: Unable to mount > root fs on ram0. > > Is this an expected error since nothing is encrypted yet? That is not expected. That CD-ROM will not work ok. Most likely boot loader is misconfigured or kernel does not support ram disks. > How can I make sure that the CD will work after my data is encrypted? Boot should proceed to "password:" prompt even if root partition is not yet encrypted. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 02 06:09:05 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrTxk-0003pA-E9; Mon, 02 Aug 2004 05:58:12 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 02 Aug 2004 05:58:06 +0200 (CEST) Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BrTxT-0003oJ-Dz for linux-crypto@nl.linux.org; Mon, 02 Aug 2004 05:57:55 +0200 Received: (qmail 17728 invoked by uid 65534); 2 Aug 2004 03:57:43 -0000 Received: from pD9E70006.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.0.6) by mail.gmx.net (mp010) with SMTP; 02 Aug 2004 05:57:43 +0200 X-Authenticated: #6241123 Message-ID: <410DCA0A.7060408@gmx.net> Date: Mon, 02 Aug 2004 05:58:50 +0100 From: "Christian (aka Neodaxus)" User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: Plausible deniability Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi! An error in lilo.conf caused the kernel panic I wrote about earlier, thanks for the help. Soon I also want to do what Jari described at http://www.spinics.net/lists/crypto/msg01063.html. Could you, Jari, make this patch available at sourceforge with your signature, possibly with a small README (you could copy most things from the URL mentioned above), also telling how to apply the patch? Recently I asked about howtos or best practices for allowing root encryption and plausibe deniability for protecting e.g. against "lead-pipe" attackers or a provisional court order (which later could be sentenced as unlawful). Unfortunately there were no comment on that yet (Jari also didn't comment this). Alan commented my second related question: > the best plausible denial would be a system where you never knew the key > used for swap. it was generated by the machine and handled by the > machine. You can't rubber hose what someone does not know. (Though these > days they still try...) However, lead-pipe dudes (or legal enforcement dudes) would probably wonder why someone has 2 swap partitions, one of them totally oversized and not in use. Isn't is possible to disguise real root as an unformatted or "Gutmann" formatted partition (so that you could argue that the data on it is just random crap)? Thanks, Christian - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 02 19:19:55 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrgKF-0003Jy-TX; Mon, 02 Aug 2004 19:10:15 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 02 Aug 2004 19:10:09 +0200 (CEST) Received: from tarjoilu.luukku.com ([194.215.205.232]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BrgJw-0003IP-MA for linux-crypto@nl.linux.org; Mon, 02 Aug 2004 19:09:56 +0200 Received: from localhost (mta1-o.i.luukku.com [10.0.1.112]) by mta1-o.i.luukku.com (Postfix) with ESMTP id 528C882D63; Mon, 2 Aug 2004 20:09:49 +0300 (EEST) Received: from users.sourceforge.net (cd17.yhteys.mtv3.fi [62.237.23.205]) by tarjoilu.luukku.com (Postfix) with ESMTP id 980633AE28A; Mon, 2 Aug 2004 20:09:48 +0300 (EEST) Message-ID: <410E758F.D3FA3251@users.sourceforge.net> Date: Mon, 02 Aug 2004 20:10:39 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: "Christian (aka Neodaxus)" Cc: linux-crypto@nl.linux.org Subject: Re: Plausible deniability References: <410DCA0A.7060408@gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto "Christian (aka Neodaxus)" wrote: > Soon I also want to do what Jari described at > http://www.spinics.net/lists/crypto/msg01063.html. Could you, Jari, make > this patch available at sourceforge with your signature, possibly with a > small README (you could copy most things from the URL mentioned above), > also telling how to apply the patch? That patch should work if loopinfo.lo_name is changed to loopinfo.lo_file_name in xstrncpy() function call. However, it will not work ok with gpg encrypted key file as required by loop-AES' multi-key mode. One would have to use two different key files, one of those key files hidden someplace where lead pipe guys don't look. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 03 04:25:14 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Brow6-0008HV-0q; Tue, 03 Aug 2004 04:21:54 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 03 Aug 2004 04:21:47 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Brovh-0008FK-Ro for linux-crypto@nl.linux.org; Tue, 03 Aug 2004 04:21:29 +0200 Received: (qmail 7790 invoked by uid 65534); 3 Aug 2004 02:21:06 -0000 Received: from pD9E7132A.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.19.42) by mail.gmx.net (mp021) with SMTP; 03 Aug 2004 04:21:06 +0200 X-Authenticated: #6241123 Message-ID: <410F04E4.4070809@gmx.net> Date: Tue, 03 Aug 2004 04:22:12 +0100 From: "Christian (aka Neodaxus)" User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: Plausible deniability References: <410DCA0A.7060408@gmx.net> <410E758F.D3FA3251@users.sourceforge.net> In-Reply-To: <410E758F.D3FA3251@users.sourceforge.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto >>Soon I also want to do what Jari described at >>http://www.spinics.net/lists/crypto/msg01063.html. Could you, Jari, make >>this patch available at sourceforge with your signature, possibly with a >>small README (you could copy most things from the URL mentioned above), >>also telling how to apply the patch? > That patch should work if loopinfo.lo_name is changed to > loopinfo.lo_file_name in xstrncpy() function call. Thanks. However, I still want to suggest to you to include the patch and instructions in loop-AES-latest.tar.bz2. > However, it will not work ok with gpg encrypted key file as required by > loop-AES' multi-key mode. One would have to use two different key files, one > of those key files hidden someplace where lead pipe guys don't look. But this would also mean vulnerability to watermark attacks, right? If not, how would I create a boot CD which allows for manual input of the encrypted root partition (/dev/hda?) and keyfile at boot time? BTW, my rootkey.gpg file is only about 4k big. How 64 keys end up taking so little space? Thanks, Christian P.S. If someone analyses data on an multi-key mode loop-AES encrypted partition, can he tell for sure that it is encrypted? - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 03 17:20:05 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bs0zN-0006pD-Q2; Tue, 03 Aug 2004 17:14:05 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 03 Aug 2004 17:13:12 +0200 (CEST) Received: from eureka.globale.net ([204.19.106.253]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bs0xr-0006iH-9r for linux-crypto@nl.linux.org; Tue, 03 Aug 2004 17:12:31 +0200 Received: from mail.globale.net (nix.globale.net [204.19.106.226]) by eureka.globale.net (8.12.10/8.12.10) with SMTP id i73FAM6a025861 for ; Tue, 3 Aug 2004 11:10:22 -0400 (EDT) Message-Id: <200408031510.i73FAM6a025861@eureka.globale.net> From: "rahim" To: linux-crypto@nl.linux.org Subject: Interaction between Kernel and Modules Date: Tue, 03 Aug 2004 11:10:22 -0400 Content-Type: text/plain; charset=iso-8859-1 X-Mailer: Null Webmail / 0.7.1 Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: rahim@globale.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi there, I would like to know how the Linux Modules interact with the Linux Kernel. What is the communication process, who are the different key players in this process, and their specific role. (My question is mostly liked to data flow between for example the Ethernet Module and the Kernel) Thanks in advance for your kind help! Rahim :) - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Aug 04 05:43:56 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BsCVK-00003Y-8W; Wed, 04 Aug 2004 05:31:50 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 04 Aug 2004 05:31:44 +0200 (CEST) Received: from imap.gmx.net ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BsCV1-00002P-Ai for linux-crypto@nl.linux.org; Wed, 04 Aug 2004 05:31:31 +0200 Received: (qmail 10074 invoked by uid 65534); 4 Aug 2004 03:31:18 -0000 Received: from pD9E7172A.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.23.42) by mail.gmx.net (mp003) with SMTP; 04 Aug 2004 05:31:18 +0200 X-Authenticated: #6241123 Message-ID: <411066D8.1080904@gmx.net> Date: Wed, 04 Aug 2004 05:32:24 +0100 From: "Christian (aka Neodaxus)" User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: "gpg key file decryption failed" Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hello, I'm on step 19 of "7.6. Example 6 - Boot from CD-ROM + encrypted root partition". dd if=/dev/hda2 bs=64k \ | /mnt/aespipe -e AES128 -K /mnt/rootkey.gpg -G / \ | dd of=/dev/hda2 bs=64k conv=notrunc returns "gpg key file decryption failed". I tried it more than 10 times and even recreated rootkey.gpg/changed the passphrase. The keymaps are identical. What else could cause this problem? Thanks, Christian - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Aug 04 16:54:25 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BsN4v-0003HH-4f; Wed, 04 Aug 2004 16:49:17 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 04 Aug 2004 16:48:51 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BsN4H-0003Fa-Dx for linux-crypto@nl.linux.org; Wed, 04 Aug 2004 16:48:37 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 6E020102BC8; Wed, 4 Aug 2004 17:48:29 +0300 (EEST) Received: from users.sourceforge.net (3d17.yhteys.mtv3.fi [62.237.23.61]) by mato.luukku.com (Postfix) with ESMTP id BA18522EE8B; Wed, 4 Aug 2004 17:48:28 +0300 (EEST) Message-ID: <4110F768.8B0455AF@users.sourceforge.net> Date: Wed, 04 Aug 2004 17:49:12 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: "Christian (aka Neodaxus)" Cc: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto "Christian (aka Neodaxus)" wrote: > I'm on step 19 of "7.6. Example 6 - Boot from CD-ROM + encrypted root > partition". > > dd if=/dev/hda2 bs=64k \ > | /mnt/aespipe -e AES128 -K /mnt/rootkey.gpg -G / \ > | dd of=/dev/hda2 bs=64k conv=notrunc > > returns "gpg key file decryption failed". I tried it more than 10 times > and even recreated rootkey.gpg/changed the passphrase. The keymaps are > identical. > > What else could cause this problem? Maybe because /mnt partition does not have statically linked gpg program. aespipe program uses gpg to decrypt the key file. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Aug 05 03:38:04 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BsX4n-0007pS-Ey; Thu, 05 Aug 2004 03:29:49 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 05 Aug 2004 03:29:42 +0200 (CEST) Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BsX4U-0007oV-LD for linux-crypto@nl.linux.org; Thu, 05 Aug 2004 03:29:30 +0200 Received: (qmail 4687 invoked by uid 65534); 5 Aug 2004 01:29:19 -0000 Received: from pD9E715E5.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.21.229) by mail.gmx.net (mp018) with SMTP; 05 Aug 2004 03:29:19 +0200 X-Authenticated: #6241123 Message-ID: <41119BC1.50704@gmx.net> Date: Thu, 05 Aug 2004 03:30:25 +0100 From: "Christian (aka Neodaxus)" User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> <4110F768.8B0455AF@users.sourceforge.net> In-Reply-To: <4110F768.8B0455AF@users.sourceforge.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi, >>I'm on step 19 of "7.6. Example 6 - Boot from CD-ROM + encrypted root >>partition". >>dd if=/dev/hda2 bs=64k \ >>| /mnt/aespipe -e AES128 -K /mnt/rootkey.gpg -G / \ >>| dd of=/dev/hda2 bs=64k conv=notrunc >>returns "gpg key file decryption failed". I tried it more than 10 times >>and even recreated rootkey.gpg/changed the passphrase. The keymaps are >>identical. >>What else could cause this problem? > Maybe because /mnt partition does not have statically linked gpg program. > aespipe program uses gpg to decrypt the key file. Well, I now tried a passphrase without special characters and it worked. But I have no idea why because as I've said the keymaps are identical (I checked that at the konsole). Any other ideas why this could happen? How can I change my passphrase? Is there a way to create a second valid passphrase (to avoid to lock me out if the new passphrase won't work)? Thanks, Christian - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Aug 05 13:14:59 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bsg3C-0004tH-09; Thu, 05 Aug 2004 13:04:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 05 Aug 2004 13:04:39 +0200 (CEST) Received: from ns1.g-housing.de ([62.75.136.201] helo=mail.g-house.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bsg2t-0004sO-81 for linux-crypto@nl.linux.org; Thu, 05 Aug 2004 13:04:27 +0200 Received: from g08b8.g.pppool.de ([80.185.8.184] helo=[192.168.1.11]) by mail.g-house.de with asmtp (TLS-1.0:DHE_RSA_AES_128_CBC_SHA:16) (Exim 4.34) id 1BsfxT-0007r4-Ja; Thu, 05 Aug 2004 12:58:51 +0200 Message-ID: <41121420.6030102@g-house.de> Date: Thu, 05 Aug 2004 13:04:00 +0200 From: Christian Kujau User-Agent: Mozilla Thunderbird 0.7.1 (X11/20040715) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Christian (aka Neodaxus)" CC: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> <4110F768.8B0455AF@users.sourceforge.net> <41119BC1.50704@gmx.net> In-Reply-To: <41119BC1.50704@gmx.net> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: evil@g-house.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Christian (aka Neodaxus) wrote: > Well, I now tried a passphrase without special characters and it > worked. > But I have no idea why because as I've said the keymaps are identical > (I checked that at the konsole). > > Any other ideas why this could happen? try to avoid "very" special characters, char-mapping is voodoo anyway. also they can increase the amount of time of brute-force attacks, you might have a system later on where you are unable to generate (i.e. type with your keyboard) these special characters. > > How can I change my passphrase? pls search the archives, it was discussed many times. > Is there a way to create a second valid passphrase (to avoid to lock > me out if the new passphrase won't work)? think about it: which program gets your passphrase? gpg? does gpg have an interface (i.e. an cmdline option) for a "2nd passphrase"? if so, the manpage needs updating. Christian. - -- BOFH excuse #355: Boredom in the Kernel. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBEhPe+A7rjkF8z0wRArQsAKCOtOOUqY8mZ0NJpT0lanim1jZ3VQCeORFs Q1QQkSqawYg2T82b9XnnT/M= =Am8V -----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Aug 05 14:38:05 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BshQb-000391-AM; Thu, 05 Aug 2004 14:33:01 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 05 Aug 2004 14:32:54 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BshQK-00038V-KK for linux-crypto@nl.linux.org; Thu, 05 Aug 2004 14:32:44 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id CC54EFFCB5; Thu, 5 Aug 2004 15:32:40 +0300 (EEST) Received: from users.sourceforge.net (3611.yhteys.mtv3.fi [62.237.17.54]) by mato.luukku.com (Postfix) with ESMTP id 2C11C22EE88; Thu, 5 Aug 2004 15:32:40 +0300 (EEST) Message-ID: <41122910.D3D0208A@users.sourceforge.net> Date: Thu, 05 Aug 2004 15:33:20 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: "Christian (aka Neodaxus)" Cc: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> <4110F768.8B0455AF@users.sourceforge.net> <41119BC1.50704@gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto "Christian (aka Neodaxus)" wrote: > How can I change my passphrase? gpg --decrypt /boot/new.gpg ) mv /boot/new.gpg /boot/rootkey.gpg > Is there a way to create a second valid passphrase (to avoid to lock me > out if the new passphrase won't work)? Use public key crypto and specify multiple receivers. Like in loop-AES' README example 3. But don't forget to copy keyrings to /boot -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Aug 05 20:55:59 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BsnFu-0003Ie-Gs; Thu, 05 Aug 2004 20:46:22 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 05 Aug 2004 20:46:15 +0200 (CEST) Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BsnFc-0003HV-2m for linux-crypto@nl.linux.org; Thu, 05 Aug 2004 20:46:04 +0200 Received: (qmail 2927 invoked by uid 65534); 5 Aug 2004 18:45:52 -0000 Received: from pD9E706C0.dip0.t-ipconnect.de (EHLO gmx.net) (217.231.6.192) by mail.gmx.net (mp005) with SMTP; 05 Aug 2004 20:45:52 +0200 X-Authenticated: #6241123 Message-ID: <411252BF.9040502@gmx.net> Date: Thu, 05 Aug 2004 16:31:11 +0100 From: "Christian (aka Neodaxus)" User-Agent: Mozilla Thunderbird 0.5 (Windows/20040207) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> <4110F768.8B0455AF@users.sourceforge.net> <41119BC1.50704@gmx.net> <41121420.6030102@g-house.de> In-Reply-To: <41121420.6030102@g-house.de> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.7 required=5.0 tests=AWL,BAYES_00, DATE_IN_PAST_03_06 autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: neodaxus@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi! [Christian Kujau] > try to avoid "very" special characters, char-mapping is voodoo anyway. So even if I (when creating rootkey.gpg) press Shift+5 and on the console a % is shown (German key mapping), and before encrypting / I do the same and also a % is shown, it may happen that when using % in the password it won't work? How can that be explained? > also they can increase the amount of time of brute-force attacks, you > might have a system later on where you are unable to generate (i.e. type > with your keyboard) these special characters. Which special characters do you consider safe? >>How can I change my passphrase? [...] >>Is there a way to create a second valid passphrase (to avoid to lock >>me out if the new passphrase won't work)? [replies by Christian Kujau and Jari] Thanks. I suggest to add these 2 questions and answers to the loop-AES README, and also possibly some observation about characters which should be avoided in the passphrase. Regards, Christian - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Aug 07 15:28:24 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BtR9f-0005Gm-12; Sat, 07 Aug 2004 15:22:35 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 07 Aug 2004 15:22:19 +0200 (CEST) Received: from ns1.g-housing.de ([62.75.136.201] helo=mail.g-house.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BtR9A-0005Fp-S6 for linux-crypto@nl.linux.org; Sat, 07 Aug 2004 15:22:04 +0200 Received: from g004d.g.pppool.de ([80.185.0.77] helo=[192.168.1.11]) by mail.g-house.de with asmtp (TLS-1.0:DHE_RSA_AES_128_CBC_SHA:16) (Exim 4.34) id 1BtR3I-0005Cm-Jf; Sat, 07 Aug 2004 15:16:00 +0200 Message-ID: <4114D761.7070407@g-house.de> Date: Sat, 07 Aug 2004 15:21:37 +0200 From: Christian Kujau User-Agent: Mozilla Thunderbird 0.7.1 (X11/20040715) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Christian (aka Neodaxus)" CC: linux-crypto@nl.linux.org Subject: Re: "gpg key file decryption failed" References: <411066D8.1080904@gmx.net> <4110F768.8B0455AF@users.sourceforge.net> <41119BC1.50704@gmx.net> <41121420.6030102@g-house.de> <411252BF.9040502@gmx.net> In-Reply-To: <411252BF.9040502@gmx.net> X-Enigmail-Version: 0.84.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: evil@g-house.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Christian (aka Neodaxus) wrote: > So even if I (when creating rootkey.gpg) press Shift+5 and on the > console a % is shown (German key mapping), and before encrypting / I > do > the same and also a % is shown, it may happen that when using % in the > password it won't work? > > How can that be explained? i dunno. double check keymaps, typos, etc. i tried here and using "%" in a passphrase really works. > >> also they can increase the amount of time of brute-force attacks, you >> might have a system later on where you are unable to generate (i.e. >> type >> with your keyboard) these special characters. > > Which special characters do you consider safe? i am no cryptoexpert, so i can only speak of my own: i still have troubles to generate a " ? " on some machines, but " % " for example is available on almost all machines. you get the point, don't you? > Thanks. I suggest to add these 2 questions and answers to the loop-AES > README mind to send a patch? > and also possibly some observation about characters which should > be avoided in the passphrase. this has nothing to do with AES and it is still unclear if my suspicion regarding "strange characters" is responsible for your problem here. try the same thing with /usr/bin/passwd and see if it is accepting "strange chacacters". Christian. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBFNbH+A7rjkF8z0wRApasAKDSmWi0omKQZIxSzfXgTcjS4FXyTwCeJJBW mVRYHTtQofuny2lWklM6wQI= =MDfJ -----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Aug 07 21:07:28 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BtWRo-0002AT-4a; Sat, 07 Aug 2004 21:01:40 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 07 Aug 2004 21:01:32 +0200 (CEST) Received: from smtp-na2.ea.com ([159.153.6.6]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BtWRN-00028w-UC for linux-crypto@nl.linux.org; Sat, 07 Aug 2004 21:01:14 +0200 Received: from eahq-bh2.rws.ad.ea.com (eahq-bh2.rws.ad.ea.com [10.14.204.33]) by smtp-na2.ea.com (Switch-3.1.6/Switch-3.1.6) with ESMTP id i77JIveh028229 for ; Sat, 7 Aug 2004 12:19:05 -0700 Received: from eahq-e500.rws.ad.ea.com ([10.14.204.36]) by eahq-bh2.rws.ad.ea.com with Microsoft SMTPSVC(6.0.3790.0); Sat, 7 Aug 2004 12:01:07 -0700 Received: from smtp-na2.ea.com(159.153.6.6) by eahq-e500.rws.ad.ea.com via csmap id 16471; Sat, 07 Aug 2004 11:59:10 -0700 (PDT) Received: from nl.linux.org (ACC5303A.ipt.aol.com [172.197.48.58]) by smtp-na2.ea.com (Switch-3.1.6/Switch-3.1.6) with ESMTP id i77JG1E2026358 for ; Sat, 7 Aug 2004 12:16:07 -0700 Message-Id: <200408071916.i77JG1E2026358@smtp-na2.ea.com> From: linux-crypto@nl.linux.org To: privacypolicy@ea.com Subject: Virus Infection Alert! Returned mail: see transcript for details Date: Sat, 7 Aug 2004 11:58:05 -0700 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0011_78D8AAD5.F76AFEF4" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-OriginalArrivalTime: 07 Aug 2004 19:01:07.0991 (UTC) FILETIME=[E5839270:01C47CB0] Received-SPF: X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=1.7 required=5.0 tests=BAYES_20,FORGED_MUA_OUTLOOK, HTML_FONTCOLOR_RED,HTML_MESSAGE,NO_REAL_NAME,RCVD_IN_NJABL, RCVD_IN_SORBS autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: linux-crypto@nl.linux.org Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format. ------=_NextPart_000_0011_78D8AAD5.F76AFEF4 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit The original message was received at Sat, 7 Aug 2004 11:58:05 -0700 from 196.114.142.45 ----- The following addresses had permanent fatal errors ----- privacypolicy@ea.com ----- Transcript of session follows ----- ... while talking to 182.139.62.124: 554 5.0.0 Service unavailable; [142.139.98.236] blocked using bl.spamcop.net, reason: Blocked Session aborted, reason: lost connection ------=_NextPart_000_0011_78D8AAD5.F76AFEF4 Content-Disposition: attachment Content-Type: Text/HTML; name="ea.com.zip.htm" Content-Transfer-Encoding: 7bit X-NAI-WebShielde500-mimepp: Attachment removed VIRUS INFECTION ALERT

VIRUS INFECTION ALERT

The WebShield® e500 Appliance discovered a virus in this file. The file was not cleaned and has been removed.

Please contact the Help Desk for further information x84357 or HelpDesk-EARS@ea.com .

File name: ea.com.zip
Virus name: W32/Mydoom.o@MM!zip

Copyright © 1993-2002, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeeb2b.com

------=_NextPart_000_0011_78D8AAD5.F76AFEF4-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 09 10:49:44 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bu5eM-0007w6-TI; Mon, 09 Aug 2004 10:36:58 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 09 Aug 2004 10:35:43 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Bu5ce-0007nX-V5 for linux-crypto@nl.linux.org; Mon, 09 Aug 2004 10:35:12 +0200 Received: (qmail 5069 invoked by uid 0); 9 Aug 2004 08:33:39 -0000 Received: from 141.99.2.23 by www58.gmx.net with HTTP; Mon, 9 Aug 2004 10:33:39 +0200 (MEST) Date: Mon, 9 Aug 2004 10:33:39 +0200 (MEST) From: Peter_22@gmx.de To: linux-crypto@nl.linux.org MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="========GMXBoundary60641092040419" Subject: 177GB ext3 partition fscked (aes256) X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <6064.1092040419@www58.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-3.7 required=5.0 tests=AWL,BAYES_00, FROM_ENDS_IN_NUMS,NO_REAL_NAME autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a MIME encapsulated multipart message - please use a MIME-compliant e-mail program to open it. Dies ist eine mehrteilige Nachricht im MIME-Format - bitte verwenden Sie zum Lesen ein MIME-konformes Mailprogramm. --========GMXBoundary60641092040419 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Hi! I´d just like to hear if someone ever had some files on the disk that are not eraseable, even by root. Anyone? It´s some time ago that I installed UT2004 and due to some openGL crap it crashed. However, I losetuped the partition and did a fsck -f -v /dev/loop3. Fsck found lots or errors and corrected them. I lost some files and found some crap in the lost+found folder. Most of that was erasable with rm -r * and away with it:-) Unfortunatley some files remained. The astonishing thing about these is that I, as root, am not the owner of them and second, I do not have the permission to write in the folders containing them or to the file itself. Unbelievable, right? Chown says that it can´t change the ownership. It´s less than 400MB so I left it in the same folder. Fsck has no problems with this situation but I would like to use these 400MB again. For the interested the attachment shows an l -R of the affected area. Regards Peter -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig & kabellos http://www.gmx.net/de/go/dsl --========GMXBoundary60641092040419 Content-Type: text/plain; name="ext3.txt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="ext3.txt" bGludXg6L3NhZmUvbG9zdCtmb3VuZCAjIGwgLVIKLjoKdG90YWwgMjQKLXIteHItUy0tVCAgIDEg ODAyODY0NTMgMjY5MTM1MDcxIDM5MjE5Njk2NiBKYW4gIDUgIDIwODEgIzE0MzU4MjgqCmRyd3Ny LXgtLS0gICAyIHJvb3QgICAgIHJvb3QgICAgICAgICAgIDQwOTYgSnVsIDE3IDAwOjI0ICMxNzkw NzcxNC8KZHJ3eHJ3eHItLSAgIDIgcm9vdCAgICAgcm9vdCAgICAgICAgICAgNDA5NiBKdWwgMTcg MDA6MzAgIzE3OTA3NzM0Lwpkcnd4ci14ci14ICAgMiByb290ICAgICAgICAgMjY3NDYgICAgICA0 MDk2IE1heSAxMCAgMjAyOSAjMTc5MDc3MzkvCmRyd3gtLS0tLS0gICA1IHJvb3QgICAgIHJvb3Qg ICAgICAgICAgIDQwOTYgSnVsIDE3IDAwOjIxIC4vCmRyd3hyLXhyLXggIDE0IHJvb3QgICAgIHJv b3QgICAgICAgICAgIDQwOTYgSnVsIDI3IDIxOjI2IC4uLwoKLi8jMTc5MDc3MTQ6CnRvdGFsIDE2 CmRyd3NyLXgtLS0gIDIgcm9vdCByb290ICA0MDk2IEp1bCAxNyAwMDoyNCAuLwpkcnd4LS0tLS0t ICA1IHJvb3Qgcm9vdCAgNDA5NiBKdWwgMTcgMDA6MjEgLi4vCi1ydy1yLS1yLS0gIDEgcm9vdCAz MDk0MSAgNzA1IEp1bCAyOCAgMjA1OCBCUi1CaWZyb3N0LmVzdAotcnctci0tci0tICAxIHJvb3Qg MzUxMzIgIDM3MiBOb3YgMTkgIDIwNzMgRE0tUmFua2luLmRldAoKLi8jMTc5MDc3MzQ6CnRvdGFs IDEzMDA0CmRyd3hyd3hyLS0gIDIgcm9vdCByb290ICAgICA0MDk2IEp1bCAxNyAwMDozMCAuLwpk cnd4LS0tLS0tICA1IHJvb3Qgcm9vdCAgICAgNDA5NiBKdWwgMTcgMDA6MjEgLi4vCi1ydy1yLS1y LS0gIDEgcm9vdCByb290ICA1NjgxMTI2IEp1bCAgMyAxNjo0OCAySzRUcm9waHlURVgudXR4Ci1y dy1yLS1yLS0gIDEgcm9vdCA0OTIxOSAyMTA0MTQ4IEp1bCAzMSAgMjA3OCBCYXN0aWVuXzAyLnV0 eAotcnctci0tci0tICAxIHJvb3QgMTQwOTIgNTUwODQ3OCBKYW4gMTEgIDIwMTEgUFNEcmlhLnV0 eAoKLi8jMTc5MDc3Mzk6CnRvdGFsIDgKZHJ3eHIteHIteCAgMiByb290IDI2NzQ2IDQwOTYgTWF5 IDEwICAyMDI5IC4vCmRyd3gtLS0tLS0gIDUgcm9vdCByb290ICA0MDk2IEp1bCAxNyAwMDoyMSAu Li8KLXJ3eHItLXItLSAgMSByb290IHJvb3QgICAgIDAgSnVsICAzIDE2OjU5IERPX05PVF9ERUxF VEUuTUUqCg== --========GMXBoundary60641092040419-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 09 11:07:45 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bu66Q-0002Tz-0y; Mon, 09 Aug 2004 11:05:58 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 09 Aug 2004 11:05:23 +0200 (CEST) Received: from relay.heise.de ([193.99.145.50]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bu65b-0002Cm-2Q for linux-crypto@nl.linux.org; Mon, 09 Aug 2004 11:05:07 +0200 Date: Mon, 09 Aug 2004 11:04:25 +0200 From: Sven Neuhaus To: linux-crypto@nl.linux.org Subject: Re: 177GB ext3 partition fscked (aes256) Message-ID: <40DE88ED7DB20B0D41D0ED8B@[10.10.11.126]> In-Reply-To: <6064.1092040419@www58.gmx.net> References: <6064.1092040419@www58.gmx.net> X-Mailer: Mulberry/3.1.6 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sn@pace.mosquito.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Peter wrote: > I=B4d just like to hear if someone ever had some files on the disk that = are > not eraseable, even by root. Anyone? Try lsattr(1)/chattr(1). Perhaps the immutable flag (i) is set. -Sven - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 09 15:16:03 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bu9sD-0002t2-Ts; Mon, 09 Aug 2004 15:07:33 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 09 Aug 2004 15:03:06 +0200 (CEST) Received: from 168-215-106-254.gen.twtelecom.net ([168.215.106.254] helo=mail.rayservers.com) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bu8sG-0006bv-3k for linux-crypto@nl.linux.org; Mon, 09 Aug 2004 14:03:32 +0200 Received: (qmail 8331 invoked from network); 9 Aug 2004 11:55:53 -0000 Received: from unknown (HELO ?192.168.1.100?) (192.168.1.100) by 192.168.1.101 with SMTP; 9 Aug 2004 11:55:53 -0000 From: Venkat Manakkal To: linux-crypto@nl.linux.org Subject: Re: 177GB ext3 partition fscked (aes256) Date: Mon, 9 Aug 2004 08:06:44 -0400 User-Agent: KMail/1.6.2 References: <6064.1092040419@www58.gmx.net> In-Reply-To: <6064.1092040419@www58.gmx.net> MIME-Version: 1.0 Content-Disposition: inline Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Message-Id: <200408090807.08635.venkat@rayservers.com> Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: venkat@rayservers.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto =2D----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Monday 09 August 2004 04:33, Peter_22@gmx.de wrote: > Hi! > > I=B4d just like to hear if someone ever had some files on the disk that a= re > not eraseable, even by root. Anyone? I have had such problems on a file backed loop with cryptoapi, I think it w= as,=20 and a reiserfs file system and a crash that did involve a lockup that was X= =20 windows related. It was a while ago, and the solution was to tar the valuab= le=20 data and create a new encrypted file system. I simply did not trust that=20 encrypted container anymore. I've never had trouble with reiserfs and=20 loop-aes. Best regards, =2D ---Venkat. =2D -----------------------------------------------------------------------= =2D---- Venkat Manakkal =20 venkat_AT_rayservers.com GPG: https://www.rayservers.com/keys/0x12430522.asc GPG: 0x12430522/4856 01AB F8BA E0EB F128 A57F 59D9 16FD 1243 0522 +1-607-546-7300 http://www.rayservers.com/ Computers. Installed Secure. =2D -----------------------------------------------------------------------= =2D---- =2D----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBF2jfWdkW/RJDBSIRAgzAAJ0X6v5CqXdZB2SdCwdSJoT5r3+wYwCg1m1z sZTA0L0cTj1x77cD/qs0OR8=3D =3DXUCN =2D----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 09 20:14:29 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BuEUo-0000ln-Cn; Mon, 09 Aug 2004 20:03:42 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 09 Aug 2004 20:03:35 +0200 (CEST) Received: from sasami.anime.net ([207.109.251.120]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BuEUV-0000jE-8F for linux-crypto@nl.linux.org; Mon, 09 Aug 2004 20:03:23 +0200 Received: from localhost (goemon@localhost) by sasami.anime.net (8.11.6/8.11.6) with ESMTP id i79I2bx05970; Mon, 9 Aug 2004 11:02:38 -0700 X-Antispam-Origin-Id: c4dc35da7d5d290438c6d6bdb17308d1 Date: Mon, 9 Aug 2004 11:02:37 -0700 (PDT) From: Dan Hollis To: Venkat Manakkal cc: linux-crypto@nl.linux.org Subject: Re: 177GB ext3 partition fscked (aes256) In-Reply-To: <200408090807.08635.venkat@rayservers.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Greylist: Message not sent from an IPv4 address, not delayed by milter-greylist-1.3.8 (sasami.anime.net [0.0.0.0]); Mon, 09 Aug 2004 11:02:40 -0700 (PDT) Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: goemon@anime.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On Mon, 9 Aug 2004, Venkat Manakkal wrote: > I have had such problems on a file backed loop with cryptoapi, I think it was, > and a reiserfs file system and a crash that did involve a lockup that was X > windows related. It was a while ago, and the solution was to tar the valuable > data and create a new encrypted file system. I simply did not trust that > encrypted container anymore. I've never had trouble with reiserfs and > loop-aes. loop-aes on device-backed loop is reliable enough. I wouldnt trust file-backed loop. -Dan - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 10 09:58:26 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BuRRA-0003ui-Co; Tue, 10 Aug 2004 09:52:48 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 10 Aug 2004 09:52:41 +0200 (CEST) Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BuRQn-0003tU-KX for linux-crypto@nl.linux.org; Tue, 10 Aug 2004 09:52:25 +0200 Received: (qmail 4196 invoked by uid 0); 10 Aug 2004 07:52:14 -0000 Received: from 141.99.2.23 by www44.gmx.net with HTTP; Tue, 10 Aug 2004 09:52:15 +0200 (MEST) Date: Tue, 10 Aug 2004 09:52:15 +0200 (MEST) From: Peter_22@gmx.de To: linux-crypto@nl.linux.org MIME-Version: 1.0 References: <40DE88ED7DB20B0D41D0ED8B@[10.10.11.126]> Subject: Re: 177GB ext3 partition fscked (aes256) X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <12322.1092124335@www44.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-3.7 required=5.0 tests=AWL,BAYES_00, FROM_ENDS_IN_NUMS,NO_REAL_NAME autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Sven wrote: > Try lsattr(1)/chattr(1). Perhaps the immutable flag (i) is set. Yes. Thank´s! That solved my problems with just a few typing. Fsck had set some attributes and chattr could reset them so that the files became accessible/eraseable again. The partition is device backed and I don´t think this error was caused by loop-aes. The crash(s) caused it and the only question would be which file system is the most solid. With ext2 / ext3 I think I made the right choice. Thanks for the quick and usefull help! Regards, Peter -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig & kabellos http://www.gmx.net/de/go/dsl - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Aug 11 17:07:56 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BuubE-0001WF-CQ; Wed, 11 Aug 2004 17:01:08 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 11 Aug 2004 17:00:58 +0200 (CEST) Received: from mailer.nec-labs.com ([138.15.108.3]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Buuah-0001Tx-1f for linux-crypto@nl.linux.org; Wed, 11 Aug 2004 17:00:35 +0200 Received: from nec-labs.com ([138.15.108.225] RDNS failed) by mailer.nec-labs.com with Microsoft SMTPSVC(5.0.2195.6713); Wed, 11 Aug 2004 11:00:27 -0400 Message-ID: <411A348D.9070808@nec-labs.com> Date: Wed, 11 Aug 2004 08:00:29 -0700 From: Lei Yang User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040114 X-Accept-Language: en-us, en MIME-Version: 1.0 To: cloop-devel@lists.alioth.debian.org CC: linux-crypto@nl.linux.org, Lei Yang Subject: Compression algorithm in cloop Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 11 Aug 2004 15:00:27.0408 (UTC) FILETIME=[EFE87900:01C47FB3] Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: leiyang@nec-labs.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hello, I am trying to do some experiment on compression ratios with cloop. I know that currently cloop uses zlib. How can I change it to other algorithms? Where should I start from? Really a newbie to this, appreciate any comments!! TIA. Lei - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Aug 12 13:13:41 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BvDLv-0005Qt-Jf; Thu, 12 Aug 2004 13:02:35 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 12 Aug 2004 12:58:54 +0200 (CEST) Received: from moskit.uwm.edu.pl ([213.184.0.42] ident=0) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BvDHr-0005Ki-39 for linux-crypto@nl.linux.org; Thu, 12 Aug 2004 12:58:23 +0200 Received: from patryk.uwm.edu.pl (patryk.uwm.edu.pl [213.184.0.138]) by moskit.uwm.edu.pl (8.12.10/8.12.5) with SMTP id i7CAuupf012969 for ; Thu, 12 Aug 2004 12:56:57 +0200 Date: Thu, 12 Aug 2004 13:01:23 +0000 From: patryk To: linux-crypto@nl.linux.org Subject: Crypto API history Message-Id: <20040812130123.2f1f466a@patryk.uwm.edu.pl> Organization: UWM Olsztyn X-Mailer: Sylpheed version 0.9.9claws (GTK+ 1.2.10; i686-pc-linux-gnu) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha1"; boundary="Signature=_Thu__12_Aug_2004_13_01_24_+0000_nC2s7nM0jfR+oImt" X-mUWMeduPL-MailScanner-Information: Please contact the ISP for more information X-mUWMeduPL-MailScanner: Found to be clean Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: patryk@uwm.edu.pl Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --Signature=_Thu__12_Aug_2004_13_01_24_+0000_nC2s7nM0jfR+oImt Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit A need information about crypto API history how it was associated with patch international an FreeS/WAN does www.kerneli.org still exist ? -- Pozdrawiam Patryk. Klucz publiczny jest tu -----> http://moskit.uwm.edu.pl/~patryk/key.asc --- --Signature=_Thu__12_Aug_2004_13_01_24_+0000_nC2s7nM0jfR+oImt Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQFBG2ooasnWdoZqVHARAoeQAJ9i9CztSC3z1Jd20UHgLTJLSnIh3ACdEZmt My6kx7mj4/gUo2CguPQsf1I= =cwUA -----END PGP SIGNATURE----- --Signature=_Thu__12_Aug_2004_13_01_24_+0000_nC2s7nM0jfR+oImt-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Aug 14 15:39:19 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bvyio-000606-Lx; Sat, 14 Aug 2004 15:37:22 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 14 Aug 2004 15:37:15 +0200 (CEST) Received: from sslsrv.de ([62.75.159.123]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BvyiK-0005yz-5d for linux-crypto@nl.linux.org; Sat, 14 Aug 2004 15:36:52 +0200 Received: from flip ([80.120.149.198]) (authenticated bits=0) by sslsrv.de (8.12.10/8.12.10) with ESMTP id i7EDaiM3005954 for ; Sat, 14 Aug 2004 15:36:45 +0200 X-Envelope-To: From: Philipp Marek To: linux-crypto@nl.linux.org Subject: RFC: ideas for a tamper-proof filesystem Date: Sat, 14 Aug 2004 15:36:48 +0200 User-Agent: KMail/1.6.2 MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <200408141536.48999.philipp@marek.priv.at> Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philipp@marek.priv.at Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hello everyone! I'd like to share some ideas about various ways to implement a tamper-proof filesystem for linux. I hope to get some opinions whether the statements in this mail are valid or indeed sane :-). ###### As far as I can see, there are some ways to protect the data in a filesystem against modifications from outside. Common to them is that some verification data (below written as vd) has to be stored. That could be the IV after block-encryption, a HMAC for unencrypted devices, or even a error-correction code for use on buggy media (eg. floppy) (which would allow on-the-fly error-correction). The main problem to solve is that the vd must match the data. If this isn't true the block should be rejected, and an operator probably has to be alerted. (This is what I mean with atomicity - vd and data must match) I) defining a new filesystem ---------------------------- Ia) storing the vd in every data block The idea here is to use the last n bytes of each logical block as vd area, eg. storing a hash there. PRO: - The updates of "normal" data and vd are atomic CON: - Slow, if data has to be memcpy()ed for user-space - Troubles with mmap - New filesystem needed Ib) vd inline only in special blocks A subvariant of this is to store vd only in "special" blocks like the free/used-bitmap, the inodes, and perhaps the directories; for the filedata we could use just 1 direct block address in the inode (with a vd for this block), and defining the indirect blocks to contain (block number, vd) * n + the vd of the indirect block. Then for writing data the fs could look for a free block, write the data there, and update atomically the block number, the block's vd, and the indirect block's vd in one write. PRO: - easier to do (as I), ext2/3 could be modified as ext4 - not much slower (no memcpy()) - mmap works CON: - free space in fs needed - fragmentation - atomicity II) protecting the block-device-layer, storing the vd outside the data blocks ----------------------------------------------------------------------------- These things could be done as a part of device-mapper. IIa) The simple way with header blocks For a logical block size of LB (eg. 4KB) and a vd size of VD (eg. 16B) we can store N=LB/VD (eg. 256) vds in a logical block (the vd-lb). So we can precede N data blocks with one lb to store the vd. (Or perhaps N-1, and store the vd of the vd-lb there.) PRO: - works with any fs - locality (vd near the data) - a one-to-one mapping of data blocks and blocks on media CON: - atomicity not guaranteed IIb) using a flag while updating This is like IIa, except that there is a flag in every vd-lb. Here the idea is to 1) write the vd-lb with the old vd's, and the flag saying "this is about to be modified", with a correct vd. 2) write the "normal" data 3) update the vd-lb with the flag cleared, and an updated vd. If there is a non-matching vd, we allow it if the flag is set. And we can check that at most one flag is set on a block-device. PRO: - easily implemented - atomicity is no problem CON: - doubled writes to the vd-lb (can tire the media, eg. floppy, flash memory) - the flag is not aestethically pleasing IIc) a bit of journaling (sort of) We define a header block in the block device and a field in every vd-lb. These fields are filled with a counter, whose value is periodically written to the header block. So a non-matching vd is allowed only if the counter is within a small distance from the header counter value. PRO: - easy to do - atomicity solved CON: - many writes to the header block ###### I'd suggest going for IIc, but I expect the experts for journaling filesystems can give some hints how to improve the idea. So here's the call for ideas, comments, and suggestions. - Phil - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Aug 14 21:28:26 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bw4AS-0007lE-1m; Sat, 14 Aug 2004 21:26:16 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 14 Aug 2004 21:26:09 +0200 (CEST) Received: from [200.68.77.236] (helo=200.68.77.236) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Bw47X-0007Jm-Og for linux-crypto@nl.linux.org; Sat, 14 Aug 2004 21:23:18 +0200 Message-ID: From: janice <34haruo@215600.net> To: linux-crypto@nl.linux.org Subject: you'll be ready in 10 minutes cj Date: Sat, 14 Aug 2004 19:15:33 +0000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0000_36AB9BEE.01D1C7AE" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Received-SPF: X-Spam-Level: *** X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=3.9 required=5.0 tests=BIZ_TLD,HTML_MESSAGE, RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_NUMERIC_HELO autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: 34haruo@215600.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format. ------=_NextPart_000_0000_36AB9BEE.01D1C7AE Content-Type: multipart/alternative; boundary="----=_NextPart_001_0001_B1594F4D.70BB1D09" ------=_NextPart_001_0001_B1594F4D.70BB1D09 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Hello! Her dark, pretty face fljbglittered there in front of me. I stood with my mouth open, trying to dowk think of some way to answer her. We were locked together this way for frjzmaybe a couple of seconds; then the sound of the mill jumped a hitch, and something beidcommenced to draw her back away from me. A string somewhere I didn't see hooked on hseq that flowered red skirt and was tugging her back. Her fingernails peeled hfkd. Her dark, pretty face lfboglittered there in front of me. I stood with my mouth open, trying to onyh think of some way to answer her. We were locked together this way for gfifmaybe a couple of seconds; then the sound of the mill jumped a hitch, and something dwhccommenced to draw her back away from me. A string somewhere I didn't see hooked on yiwy that flowered red skirt and was tugging her back. Her fingernails peeled azoi. Bye. ------=_NextPart_001_0001_B1594F4D.70BB1D09 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit

Hi!

Mirror site: #1

Bye.

------=_NextPart_001_0001_B1594F4D.70BB1D09-- ------=_NextPart_000_0000_36AB9BEE.01D1C7AE Content-Type: image/jpg; name="dg.jpg" Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAHgAA/+4ADkFkb2JlAGTAAAAA Af/bAIQAEAsLCwwLEAwMEBcPDQ8XGxQQEBQbHxcXFxcXHx4XGhoaGhceHiMlJyUjHi8vMzMv L0BAQEBAQEBAQEBAQEBAQAERDw8RExEVEhIVFBEUERQaFBYWFBomGhocGhomMCMeHh4eIzAr LicnJy4rNTUwMDU1QEA/QEBAQEBAQEBAQEBA/8AAEQgBLAEsAwEiAAIRAQMRAf/EAK0AAAID AQEBAAAAAAAAAAAAAAMEAQIFBgAHAQADAQEBAQAAAAAAAAAAAAACAwQBAAUGEAACAQMDAgMF BgQEAwYHAAABAgMAEQQhEgUxE0FRImFxMhQGgZGhQiMVscFSYtFykqIzJBbwgrJDczThwmOT s9NUEQACAQMDAgMGBQIFBAMAAAABAhEAIQMxEgRBUWEiE3GBkaEyBfCxwUIU0VLh8WJyI4Iz JDSSshX/2gAMAwEAAhEDEQA/ANk0M1c1Q18iK9ta8psaZjOlSj4+DxzchNGJXLbIkPS9exM2 Lk8PIk7KwZGMu8FNAy2J/lVf8FnQHcodl3qnce3vU+TMJI2mFO0t41eppoRJkcdE8QUTtGJE AsC1gL/xoTyIo430AHIIDC3Xp1oT9tyjqIKqwP8AuIEe6aT669upHwoVRVciZRyE0CgAKQAB oOgNGyZEi46OXaNxlClra9TSRxHOTJjkTiVm9u0xR+oNqn+6h16m+ShVEE0Ci8RHdRf6T42H lXrxfvHy2xdvZ37bC1726VQfteUOVLL9SqD0O7r7ooPXWJjoflSleok83IJHIz8dGkag3kDI SB52BvQcR95QtrdhcfbSM/EbEyqTO/upX86NcgYExp4zV68abkeQZ4xlwQ2ObXnsABcXOtvC hQhJTyEMCiR4Ttj6X3EHQE+2nt9ryAgBw12X6SLqJ99AM69R2oF69eipDNj4GVLlRBXVNyEl WOgPSxNe4t4Wxjk5Ftjusabhf1MQP4mgX7flLY1Pk9RSx3CNsd6I5VhiL7SBbrQSaoTVojs5 Q4kguFewB1up1X8Kd/5hs4wHj0+VuR3/AEjS3W3Wiw/bsj7pbaVf04gm/urWzKsWmV3axWeW obOKd4p8SbJz0sskOOyhWYBgB672J91FwsWIZeb3o1aNZVSIMoI9Sh9L/wCcUxPtmRgp3L5m YHw2z+cVv8lATIPlAPtmsZ5BS7yXpzDjXK5/IgKjsY8jsy29O1TYC3TrQ+dWBJMbLxQBi5Se naLLuHs8Lg1v8J1Rnt5G2x3jrVKZ8e9Uv513T+lKXvTWMmoo+ZlY3CY2Mox0yMnIXe7SC4A0 0H31X92wDPDPjwFQR+vCVG3X+mty8UhbuoNtw7T+cVjcrdO1G23hu8U0mgqxpl1xsbu8g5Vs PYHjXzZvC38PfWXDmHILSWCgm4A0AqTPw3wgFiJJMAf2j93vqdcgc2H+famTVCa0pd6LE2Ji plYxH6hBXue8brA/fWQOUihypkXGuhYARzizp5i2vnTn+3tj2lsiwxgnaY0m3cViZpmFNvGr E0NnApjmM9IM1eNhxo90yrtlsAVLtt8qFynLY3E5C4MOKk7KoMrydTfwpn/55ViDkWFsTB17 UxM8gQhJa4E9KTlloN7mtVoMQ8jxuRCg+XzwzGJgCAQm7offTccUz57Y8nFxJhgsBkjYDtHQ 2GutNTgPcbh9W3Qmes0z+aigQpuu43A6xFY8S0wKb4vsyDPGPEmT2HtAGsQ3xWG5vO1L8jkZ 0ONuyOPjxUZgolVkJv1t6SfKktwX2by3ewUnS2tAeSGfaB21Ma+FCdwopDInubCqS5ZYWFLF iTc0rHii5qxEi9E3V7eOlAeUKKB3ze9P2Wmj3dK6cmqmpqwQmvP0qaYqRkYU2G/HZ7mFC2+K YC4B9tVbK47jsCbHw5vmcnIXYXVbAAgj+defEWQWYVROOhQ3tVqc4KigqC6LtVusVNkxAkwT DHcR0mpn5Aw4/FvitumxQRKmo0IUFTp40xyPJ4U+ZxzxSemKQvKLEbAdvXSqfLR3varHjVZF mFiHcRgeO4+dGn3DI+5VTdZTA6bYpJwgQSY/xq7txMmbJkjNAaQg7NjaWFutCz8zGk41IEcG RZg22x+EE61ZuEtkdolQ2zuX1ttBt5UEYsZUNb0+fhXZMxR2c4fTZwysb30J61yoCAA0gQRR puWjj5wTwt3MOWJY57A20La2I/LerDk8I8+cnuj5f5fZvs3xbr26XoKYsd7AXJ8BV4uNSWRk UAMASb6dKJfuGRmgJul9yjx7VxwACSYtegDH467sOUeQm52FWsfZqaPiSKoQnQAgk+wGgpx8 TyBbhC3i+goiptJjX1WJF11Bt5VPnynIVcJt2t46i/WmJjiQTMih8nmZmRyLrh5MgxyFACMy i9tfKpx+3gcbnRPJsmmT9PrctZvEe+jwQpuuo9RNez8b19pxdxbQa9ReiHNzHL6u2VkqdYBc G1CMK/QT+BSGBliLic+LKmJkmS0QYlrmzdOtGyecgwsTFw8FIsvYt5TIpKh/MXt43pSXHtdG FiPA1RMMasqkgdSB0p6cxgsRcCJ6xM0/+GpvNjfwrRl5TBmzePzzIEksBlJY+iwv5a6k0KHm wvMZKzOZuLySVIa5VQRbcFPh50m2KGsdvXppXhiHUBCSOotRDmNMhbltx8bRXDhLoWtEUfDy OPwIOYgiyAVmjtiNZrtdZLDp1BYCtDI+peOkbjyswF5BJlelvQBG2h0/qIrEGIG+FS3uF6FH hHIlEMEZeRugApuPmMAFVfZ8ZrH4a3Ytpr8IrTj5nj8CPk8yB1ny8qdjFEQ1jHu0voPMmgy8 1jcnws0GUseJkwsHxY41IVreA62J1FAPAz/uP7eCjTgbiQTttbd1Iv8AhR1+n5DkJj7o3dwW ujXUAeZtRnNkgjZaShEdTQDDiBB9S9nBnoKJ83xPLYmKM+ZsXKxV2FtpZXXQeHur2ZmcbLNH Dx8YEca7WlttLn/t417I4lccqjlWDjcjobqw9hoaYYjuyqSB1IHSpM3I3BsbJD2BMea1Mx4l kMryt4E2vR+SyIJOFxsNHvMk25k10X9T7PEV7H2xxDS/mKXMJc7gpO3qQOlWBbbp06XpGV2y BAR9Chf/AI03Hxwpa+pJ+NaDvxHzEeXBntghLGWBd3qtrb/tes7M5GHN5SSeEHs+kBiLFtot utQpMUStqpv46edHw+MkkZo41sVUs27SwFUNyC6DGEgkgwo6ilrx1xtvZ7Ade1V5zNin5hMn EcSCNEs1j8SsT42pjNbguVnTNly/k59oWeJlve3kf56+6gLxxY7gPeaDmcQRMYgVlYa3j9Qo l5W4sWUFXIkePSK30UAUI+10mD4eNMSc5gSczxyY7FePwAy91gfUSu29rXtoPCrYfNAcrmRZ Tmfi8p3A3XYID0IB1sRpakIOM2kjaWbyAohgRLi1j4iibmn9o/dPh2isHDU2n9sfrNO8bPxe JByGG2Z24prLDOAxO0htdB1F6Qy4eNTGZoeVbLlUjbCysN2oB1Y+AoEkCG9A+VUG4rRyFKbS o6xr1ol4hVtwY9J06VdTcVSSVUFSwIFhSskbudATS1UE3qlmIFUeYu3sqbHZeiQ4UpOo0p75 E9q1taMskhZF6CGgmt6Nb0dQBQENFDV4rTSHmrmqmvbqqTWAUIFTemsCeBRImQ6oqssqFjbU e/3UkWoM8azLZqo4uX0coyRMSCPbWZMe9SulHbmIpeDlzWdRmlJIu3cb7O9hZevTWmsvkMZc SSWJ0bGaECJTIB6jeyrGFJ3CsX9viPhXv26MkG3SvQP3FSCCuq7aR/FI69ZrS4fK+MsVBZDY M2wn2K1H+dgXlx+up/5clgzL6GuLLuXQmkPlAY9nhQF4qNTek4eamPGEK/Q+5aJ8O5pnUQaf xuQEg4mSeZTITL3mLC4623eVGglyGwt+NKkf/ONuZmADR7iSAT186zf26PyqJ8WZ8dcQN/y6 v3Alh8ViL3tfxpqfcMcncCLag3mAP0oGwmLGmmzo25SZsdh2g4s46aAbiPtvTsuQV5DJHejD SxWwmLCwIA3e67VmY2IsK28a8+AjsW86SnNVHyHbZ39Sxi9/61rYSQt9BFX5KcMuJDI6y5aq e+yENa9toJHjT8MxWPDME0cUMRPzSswU/aDWbFgJG26rTYaS9a4c5RmLhbMoGt/LHX3XojjY oFnQk/Gm8HPwpTOsrBIcaVp4CbC666C/32qeO5FcjHaUMEnaffIpcR+jwuWBuopIYMQTaRVJ MCIrttRp9xAI8uk6eOnwofRYzfWiTcuYeOzZcKRI5myyECkNddqbmXcBcE31tWRhHLjPcjcx s3pZhodpOutOjj4h4UxHjqBtAocvN3bSBG2qMSbQ26+7WjiZB9S5EscsY3QhYnfVC21dLqwo iTYUWdFGWhiyp8Z45zEQIhISpTp46Gk/kENzbrVV4yIEm1MH3Jbyv7t3xpDYTaDou34VfOcI mBhh1klgjbulDuALbbC/2VoLLL8tjDFyI4Am/wCY7hHiNCVPWkIcCON9wqcjESXWkjnKMxcL ZlC2MEbYi/urvTO0LOhn40xi5LHHwjiZEUUcUjHNDEISt+tj4EX/AA8qHFk42VjZSY0saBc0 SAOwQdr0XYX8NDSUnGRsvtoH7Uh0tVC8/GVAK6CNfCLdqMYTc7oMz85vWxLyCJPzEkMy7tsP ZZWB3HZrt87UdM9W5Dasyfq4YO7cLGYMbXPnasqLi40W1quePj8qH/8ASWbL+7dr3JP60s4S evQD4AD9KPPyORj8bjxCVTkPJIuRtKsbF2v99OnLxzl5qxyL3mEZjIdU3KBrtc3GlZK8eim9 RJx8bdRWD7ioI8sgBQL6QCv613oHv+Na1IuQifOzFjaIttQEJLtZmHUo5VRp41jcxNG/KSCK UTLZdzDbo1vhugANq8eOjAItURYKRm4rsnNR8ZXb+7d+PjTsGJkcPPSKWEbMbAUZcPd1pyOB RrRtoFRtm7VY2btSH7enjV1w4x4U5tr22gOVu9B6hpdcdBRO0tqJtr1qHee9ZvM614KRXqIa qQT0FCL0ue9ULVUtUsD5UvI51I6Dxo1WelMVZopcDxqhlXzpZmbxqDuA3EGx0B8KYMdNGMd6 cVr0yi0niq76gE28hengGFgQQT0FqW6t0BpGSxiauBUGvWYC5BA8yKqWpRUjURShXq9eq3qS rqm8qQh6MQbffWhSdBMUVeJrwaqbhUFq6K2KIWqN1UYOrBGUhj0Uggm/sqCH39sqd97bba38 rUXpnse1cAO9XL1UtVG3K/bIIe9tpFjc+yrSY2WqkmCSw1J2mjXE5mFYxraiAURJAnS9V3a0 aMaXpWCLInG+KNnUGxKgkXpyOOQERspEn9JFj91c+JwAdrQdLV2SBaRPW9TXjRTBMoLNGwAF ybHoK8Mad1DKhKnUEUAw5Zj03nWNppO9e4+NBrxqWBVirAhh1B0NQaAggwREUQqpryrrRFxs iRQ6RllPQirR48xcx7DvAuV8bUz0ssAhH82nlN/ZXF1E+YW8arVTRpYZYl3SIVXpfwqfk8o6 iM/h/jXDBmkj08kjUbTN6Hemu5fjS9VaixwySuUjUsy6MPKobGyO6IdhEjAkA21t7elcuHKR IRyJ2ztOvaiDLN2HfWl2qoIpifBy4onleOyICWO5dAPtpQxZK5C4xQ95gCEFjodfCm/x8o1R 19qka01GRhZl+PajirV6TGysdO5KlkGhYEMAfbtJqWjkjjSRxZJBdDprQPhyrO5HECTINhQb lOjKZtY1WvUYY0xl7O3123WuOnneomgkgAZwNjaBgQRfy0rPRygFijwtiY0od6yBuF9L0OvV 6vUFFQGyvIU3BmMnFTSCdcUrKB3WBYagaWANYxkoeRlyNhPhBQY5HEhbW9xV/EC48hY28rD4 12fGGSFH7hWvgZ0k8+bvyBk7MVisijaCBr0IHQmlcbILcFyEnkYfxcVn4WTNx796AKx2lXRh dWU9VNRl8rNkYxw4cePFgZg0ixA3cjzJ8KrVkYSTdRkEa/X40rYymALEoZ/20/zmRtzIFPjj xn771XPyNvB4TD80sg/E0F+bkkKd3j8eZ0VUDupLbV6eNRFyeZHjrjnDxpokZnQTRl9pY309 VqI+jvdtwjIsfMUQOQIi7b42nXwNafC5Krx2a7TfLhO2TNtL7Lki+0danHzlkzsQJnHNUvY3 jaPZewHxdb0hHymTF3iuJj7MgIJITGe16L2sm721UcjMZIpExMeBoWDr2Y9m4jwazdKH1MYx oob6D49GnvFA2N2yM0fX7P7YrfbKaJ8zJbK+ax4C6SYqJqhJ0DX8B51k4mQ0iXNKY+XlwZk2 agXdOXMsbAmNg5uQRf8AnVsdyoOgUE32joPYL0jmOmVV26qTrfXxNHgwOrGRqBWiu52CLqzE KPedKfyWeeObHwmWXLUJDkIWKog8XVSPsrEMzizIbMpup8iKrLzfJpIXhSGOViO5KsYDyAeD ms4RxoHD/vt7vDxreRhc7SvT86LDLddSCRpcdKs0oANIwtK7vJIAGdixCiyi5voKKelTNjUM YuJqlElQTrWxnT4A5HGE0zpO6xFY1W6m50uapjdyTm86ULuXEuVW4AZyLItzYVi5EuRkZUeT IR3IQoQgaWQ3Wq5OZmTRzwsyhMmQSS2FizC1vs0r0vWwkzH79/tIFpqP+PlAidV2+y9a/IjI SXAzpV2vIUjyFBBAkU+akj1Cm2ki/dcmSLInlyMUb2wV0Vhtt6dxsetcxFkZGNitixsO0zrL Yi5DrbUfdXhl5hzv3ASWyr33gAeG3p06US58QJYA+ZlY+0da44MhAW3lVlHsPStKLNmb6fyZ 42MUjZd/QSLBgumlaOJPIcbi5Mhi0zylNx+IpcgfyrGxeQ5OJpBCVAmcySDYpBY9Ta1N7uQn mTIle8sRBjNhZbeS9KW/JxLEkmwERazTNBkxvJBAEktPtERTGZm4hnyI1yMnuhnXtm3b3AkW 69KZkfGkhwIp55Md5UIQoQFJFh6jSjZvKMWV2Uq1wfQoOvttQZoJ8lY0la6RAiMWAsD7qW3L whmYeYMukR1nvShjYgDSKYysmaTkpEkjMXbsu0m5IH5r+2iGgH5mSVXnfeVAUMQAbDzIGv20 YmvP5Lq+VnW4YzfWqcSkKAelEy8nFi43HOS06qXcAwFQb3J13VTjJ4HmyTG0rY/YY3kI7tha /TT3UJ8zkoVEeLLsQEm21T1/zKap3s+VmkkkvI6GNmsBdD4aCrhysQXEbzjVQRtH7VjWf0pD Y2lh/cSde5os88cXENLgGSaGdgsrysC0RU3sVUeNF5PIwxPEJkyC7RIbxEBbG/n40nFjTwxS RxOVSUWkXQhvvq5yuXSyrOQoFgLL0H2US8zAQQbeVRG0EDbOnxofTaff3q++T9llMG7cJv1f 6gltL0tJHyHysJnY9g37QNrjz9tXR82J2njkKSuSXIt6iddR0oLyZuRLvyJC5Ggv0HuApTZs bJYsGC7I/bYzP+FORG3aCJnxqOfLrBx4B/8AI1rSlMn7nmRwn/mnwAccfmJ6Hb7axM7vTMiy MWWMbUB8B5UCX52fJXJaZ+9GAEkBsygdLEVVj5OO5I12/IRTP4z7RB/u+ZmnuBGVEmfLlB0x RjuJN4IHc029fHrT8Wak2JgcdkHb85BeGU/kmUkJ9/SsLMn5bKQRZM7yRD8pOn2gdaC6zyLE kjkiEbYv7Re+lEM2ILA8wiL9QTcVp4zudxgGZt4C1dTkT5SctPHDGs4TGUzQk2LoRrttfWlc kxft4y4VmxEEoQ48jEoxI+JA1YZlzmyvm2nf5gCwlBs1h7RXp5c7LdTlTvKF+EMSQPcKx8mJ g4/u3RMdfGsXiZAV0tE+6tgZa7Qb1T5wbqQX0rao3a153orV3orEdamoNOJgSH4rCjftyW1Y 1pyoOtTlh3rKNeAHlWk3Fqfhc39tVTjXDeo3Fb6yRrWAjvXsXGVlBI606MZAOlEijVAAKLap HyknWhbJe1JSQqB0pVlUHpWlKtxSDxO0gRfichR4ak2pmIlrU7G1r0PSvaVoRfTvINrJJHGP LVj+At+NY2aZcXLlxWa7RMVva1x4G3tFVtxcqgMy7Qe9cvIxMdqtuI7UwWAqjSRjqRSJkc9T Vdrt4E1gxdzR7+wptsqMdNaocs+AoS40reFHi4+R2C+LEAe81u3GOs1hY+ymoeI5jJjWWOH9 OQBlYsouD00veh53EchgwibIA2Ftt1N7HwvXbxxrFGka/CihR7gLVXIx48mB4JReOQWYfzr1 P4OMLYndHumvM/nZN1wu2ffFfP1jdugpiLGc9dKfXDbHmfGl+OM2B/qHg320ysAHhXi5spRi hEFTFXjMsAi80HGxwmpFOLah9KkNUjEsZpTEsZpiGISyrHfbuvY2v0F6aPGN4SD7qTxpLZMP +YD79K3K9X7bw8GbEzZU3MrxO4i0DtUed3RgAYBFc2sqSC61BNIYTlXljY6o7Lr7CRRp5gqk 1574irlOxircQ3AHvTCuL0QMKyFym3Xp2PIVx1sax8RFMfERTgcVVnFA7lUaSgCUAx0R5KCz aVvYuFiT4cLyRKSyAkjQnTzFqwudEGFnJjQgrvjEhBJPVmXx91eg/wBvyJjGSVKkA21vQYc6 M/pwQZPstSch3MTRYI7i9BGtO466Cp3MLVmQwtW7AYailZsIjVa1FWpKA0lcpU1OMpBrAaGR eoNUsfbW80KnwqhxkPhThyB1FNGesWzeRoe71VuPipt0FZH6fzvb+z7aMZgVZo+mjGUFWPat 0VNUB1061q4vGgKHyNWP5PAe+lcfi5c7bcY01Y6CocmRUEt7hWcFZjZQSfZrVzBMBcxuB5lT W4qqosoCjyGlWr01+zLHmymfBbVMeWei/OueBq162MjEhyB61s3g40YVjTRvjTGGX3o3gwqH l/b8mAbp9RP7h09opuPMr20PavHWgTREgleo1Bo1eqNSQZFPBIrcxpe/jxy+LqCR7fH8a5f6 lwgOWjnt6ciOx9rx6H/aRW7xEl4XhPWNrj/K2v8AG9A+o4d2GmQB6seQMT/a3oP8RX0rt63D 3jUpu941qBD6ef3x7qwUwV8qMmIB4U1EQyA0SvnmytXpeqelLrjAeFN4OMDlRadDu/061Ap3 jUvMzf0rb7z/APCmcOcnJxKf7wT7FvSc2UhG9n505lzjGxJsg9Io2f8A0gmsz6a5OTOwFTIN 8qEBXJ6uv5X/AMfbV/qabt8PMoNmmKRj/vML/wC0GsvjlfEWPJjGq/Ev9SnqK9zk8sYMuMN9 LfV76gTHuU962eXxDJGMqMfqwjUD8yeI+zrSMbCRAw8a3I5EljWRDdHFwfYaxciD5LLKDSGW 7R+zzX7Kj+7caVHIT/qj5Gm4MkeQ+6gzHaaAJRRsoEgEUkQ168rGAVr0cYBWmo5tssbf0up+ 4109cosLlCTpXUq25Qw8Rf769j7QRGVR0Kn86h5oErHjXHLGw5LNQDQTyEeGhYmrz40jL0os w7fOZif3hv8AUqt/OmTXn8tinIeP7jVGDIQix2rDaCRD6gRV1uK1XUHrSzwJ1ArBl3aiq1yz qKW3sPGqmRrdaO0Yt0pdrC9HtpgINdlx/wD7DG/9GP8A8Irk/qlr8+g/px0H+5z/ADrrcAbc HGHlEg/2iuM+pnP/AFEy+UUYH4mvbz/+v/0ivG4//s/9RqYRcitKFdBSOKhNjWlGLCvncxvF enmancPF75JJsi9bdSafGBi2+C/tuf8AGlONyUV2x3NmY7kv46aj8KtzfFtyuF8skphYMHBF 9rWBG1reGtexwONxzxlf00yuZ3bgDftfSvKzO/qESVHSKK/GwN8JZT94/GlZcCePVR3F/t6/ dWCvC5/H6xySQMPzIxCn7tK2OH5PMaYYeeQ7MD2prAEkflYDSlti4WV/SbGcGQ2G3y/LT5Vw bKo3A7xS+TMsUDyH8gOntrkPmT8xvv6r3v7a7n6m45snjZpoPTPEpkIH51TUg+23Svm/d/Ne gX7YVD4i3/cIh4/aL6VbjzL/ABMrj6gVke8V9G4eLvTtK2qxAW/zHpWpn5sOBiS5c5tHELkD qT0Cj2k6Uh9Om+PMf77fgKU+td542BR8DZCh/wDS5FW8NRi4oYC5Bc+2o+RLcgr2IUVgz8nz HMSFmlaDHJ9EMRKgD+4ixb7aJj4eZisJMbIkjceTGx946GjYoWOIAUwJK8vLy8xckEirF4qh bimZPqieDDCtj9zO+HyjP958fsrPxp+SzJvmM2Qufyr0VR5KtHIjY3IoiMqiwrM3Ny5Mexvf QLxQrSKYFTQg9SGqCDTNppvjpO3mgHpKpX7R6h/CtTLgGTjSwH/zEK38iRoawTIUKyL8SEMP sN66JWDqHXVWAIPsNe79pybsLYj+w/Jqi5Sw4bv+lcrgSFoQG0ZdCPIimSaDPH8tyuTD+V27 i+5/UfxvRGNeRyMRTM69mNV4juUGpEhBrW4vWFpP6mt9wrENb/Gptwo/NrsftJNWfasc8jd/ YhPxtS+XAxjxar5OJjZaKmSgkRGDqpvbcARfT31ZMbHjG1I1UDyArnPqPkOTXkkwsGcwxiIN JtAvuZm8bX6AVnnjuRyNcjKmk9jOxH4mvSz8vj43hwCw8KjVGItpXaGaBHERdFc6KlwCT7BQ s7FGVjtH0ceqNvJh0rkouCEJWWMlZEIZGHUEag11uBlfNY6yHSQemQeTD/HrW4OXi5O7HHTQ 9RXNjZIasSJy6lXFnUlWU9QR1FWEag3A1o/L4/y+QuWnwSkLKPJvA/aKCDcXrweVgbBlZOnT xFXYn3ICPfXj0NbeK27GibzRb/dWITTCc7x+FjRx5DsHUEEKjN4m3QVZ9oyKuTIGIXco18DS uSpKggTels7Ay25mWeOJmidU9YGlwoX+VF+Tyz0ib8BUN9Y8QBcCZvYE/wASKq31pxQFxFkN 7Ai/zcVZm4XGy5DkbIQW7EUtMuRVACzHevNhZnTstQJoJ4AGmQoCbAnzov8A1txn/wDPk/6E /wD2Ujyv1Hi8nDFDixTRyJIGJkVQNu1gR6XbxIpL8DjqhKZGLDQGKdj5GUsAUEHWqzsQpIrK mlcA2Naq+uMXob4KsCbVMGC61eDArrsDXAxj/wDSj/8ACK4zm4u79T5J/pEQP/21NdNHznEQ RRxSZAjZFVbFWAFhb+m1YErx5nOZWTCQ8TlNjjoQqKv8q9PmZV/jSrA6aGvL48rmkgjWmYIt oFNovQDqaqqWqxJAuOvhXzrNJvVjtNTkYU7r/wANww1DAHQjxuKHDzmZhnt5sZyIwbdxdJB7 x0P4Vs4ObHlx3BHdTSRPEHz9xpHkeNl7rZEC91X1eLTcD5revaTj5OPjGXiu2VWuUPaoS4dt uQBT3pzE5Tj88bYJVZz1ib0v/pah5nD42ShC/psfL4furkuQAVvVA8Tg6FwUN60fpjlOXmzP lJw2RiEEmVrloyBcXfxv01qhMqciEzYoPj+JFG3Fy41ORT5RfWsrm5Oc4WTsx5EiRShlsTvi dTodu+4/nXM7DttX1fncOHN4rJimA9MbOjH8roCytXyrf6N1MOHTHubaes39k03HkQ8XKQoD rtB7G9jXffSOb3JMjGbRiFkUe70t/EVq/UOIcviZ0UXkjAlT3x+q32i4rjOMzDx+fDlfkU7Z R5o2jf419EVgyhlN1IuCOhBruKQ2HZ2ke40nlArm3/3QfeK4HGnDRgg0cSUDmeOfiuRdEBGN MS8B8AD1T/un8LUsJ3HjevLy8cq5HjXpYsgZAw6itISU/DxudLEssaBkcXX1KP4msJco+I+6 u74+JocKCNxZ1QbgfAkXIpnF4a5WYPuAA/b3pXKznEqlYlj17Vzs8M+KVXIXYXuV1Bvb/KTV RJUfVeXblMbHU/BEXYf52t/8tLo+gqflcZcWQqpJHSdaLA/q4wzAA+FOB7itziJu7hKp+KIl D9nT8DXOo1P8ZyEGE83zL7ImUNuIJ1XToLnW9N+3H081zAcbaVy8U45AupmrfUUfbyMbLHRr xMf9y/zpe9xel+Y+psDPhOJjxSMwZWWVgFUFT4DU9LjwqsE4KC/Wmc9UOXeIO4XoOIG2QREU yehrXk5fisCFEyMlEKKAVBLtoLfClzWMG3CgHjI5n3uKTxuUuAsYB3AfKi5GLeBeNtSMhOQ5 ifMiuYW2iMkWNlUDofbWrQMfFjgFlFqMTaps7+rkOQ9aWibRFSaTy8WWRWEUjxhviCMVv77U yXqO4KBMmxpUwaMrIgismDh2jk7jMWbzJua0gNoAohYGhuaLKWyXJmiRYsKgtS00MUvxC9Wd 6puvS1Ui4pwQHWhDCg/pFWGFB/TRQa8zgVQsgSSa7YO1COJAB0FCMMSn0irvKTQhuY0W496N VA6UxBqwHhWgsYtSuLjto5FPAWFIyvek5mEwDS03HQTG7AVbHwooPgFqYr16D1pG0m1I6zVJ CEUsfCsfL5GYEiP0jzrWnAZCKwsmOxN/Cn4MaNciar4qqTLCfbSTT5azDIhmeOZejqbGtXF+ suTgAXMx0yQPzoe23vOjL+ArLYqpqjTxjravQxZXSy6dqozcLFl1WD4V1MX1xxLaTRzQnxug YferE/hRD9bfTyrpM+nQCN/8K4eeaNjoKVZVNVjkN1FSn7SJsxrofqD62PIY8mDxkTRRSgpL PJYOUPVVUE2v/Cua7f6VquFVa9vHSuOYlg3aqF+3ouF8U3yR8jNaxAItXTfS3NKyDjMlrSJ/ 7dj+Zf6PePD2e6uIGXKvjf31f51TYsCrDUMp1BHjSMW/G0jzDrUOXZlWD5T0NfUc/AxuQxzj 5K3U6qw+JW/qU+dc3L9H5ivaCeN08C+5G/2hqU4v65eBRDyKmdBoJksJLf3K1g3vvW9H9X/T zru+b2HxVkcEf7arZcWWC2vwNRq+bESF0+IqnF/TEWJIs+U4mlQ3VAPQp89eta+XlQYePJlZ LhIYhudjXP5v11xMKkYayZknhtUxp9rOL/7a5XkuT5PnJg2W2yBTeOBNEX2+0+0127FhWFiu 25czS01E+dNyfJzcg4KiRvQv9KLoo+6nYp26GlYohGthRox6q8zMwdiTXqYU2KFp5J7daHPk Ky2PSqW0pWUksaSigmmuBFO8bx750xjxlW6i7FjYD+dGiWTv/LWtKG2FQQfV06jSsuLJysVj JiyGKQixZetrg/yp/hO6mQMuV/UZLs/vPqP4011x7BJbdug+w9qnlwWgDbtt7a2o8CVDKrEb oAGca+PlpV49Ta2vl41bJzJYJuSlM6C8IOJZ1J0B6D31eDkMdsyDfKhkkxF9e4f8XxBPga1/ t+MkbXKncZntJipDyHOom3T2VB00Oh8qo1zc20HU0Lkc8GeCIFTIE/UKuJDrawYhQL0/HmQp jQuroERW7weQIoP9y7WJvSv4QbK2L1NoVd0xc+7wrfVhQ22ZMUAYztEkm5R3G2xqb3Y3tQMh OzN2dwkk8QlyR+FDXl5Di8WY5wm/I2zruFxEJLAN5DbR8fPSTL5Je8Gm3KuOe4qXiBvZHII6 k04fb8BRQCQxCyfdJt41gzOCSRIv+cUBXJO0Ak+Q61ZY5JUkZRpECz3orcjHNNyEOJLFHnWj 2OHG17fHZyFF7darDmzGbkcdcuJ8gxgxOpEamS1tLm2mlanBVSAXLCToPbHXW1H65gkKARGv upXHhfMn7MRUMQT6rgae4GgxsXUsoJUdTbSo+ncpU5K88iqAHBdmAW/vNanCZONFgYhkykMb IwcM8aKjHXYUsCx99Zj4SuB5tp3NPyim5OQUJ8u4Qse+ZrOG4qWAJUdTbSrvjSiBMhh+nISF 89PGnuIzo342ASTRxhVdZJEkUbD/AHxyCx/GhRZrvxeE8eRGViltP3CB6Ff9O69elqL+Gu27 mSk6aG1A3LM2UWaPdQEwSbGS4v4U9i8crAlAoAsLsfE+FW5XNjGNfugSGUbIw6yBx/UPECox CJAsyyIsiMDsk0BHifsqVuKV5KY2JyIwmx20DZ3dC30xR44CxdRZe2bMWNhc0GQ7JGjbRl0N VhzYGkzoMZ4pH7qvH32ujKdu+x8ba2rOycnHHIZC4hBgBFtvw3sN232Xo+VwkXCGQyd0Ez7a DEzM8HtWpOpgba+ugNxe2tBMmm4A7fPwq+TyS/NZMJnTsDCLKu4WMmv416DPRji5CZES8asB GRGzAMHsbgr1ve1afteMuduQhe0TF/bpWrlIF1v+PnSskptp49KyM5pDfYpY9LAE6/ZW3g5U M+JgSrNHGkE0hmEjhSqlm26H7KTzOZkxeK5KXDnVcj55xGQVZihK+pQb3HtpmDhBIJexE6eE 1Ti5O1oVJM7bmOsdq5aYz7O6VYRno9jt++r8Xx+RyuWMTHZVkKlryEhbL/lDV1udm48/BzmX JjjRsUBXikV43YA2QQyDcrX8hf23Fcx9LSsnKpIHjj/TkG6V+2uqkD1WPiat9IKVGoNVrzXy Y8pVfTbGDA1rMLXFQDVFvtqVOtBFVB5IJ61c1Tab0VRerbayelHA+qabl41h0pOTEkXwrrXg B8KXkw1PhUWPmHrXlthVtK5Ro2HUVTaR0Nq6OTjgfCqxcCsqmadxjYqkBpmBOp/KqjVj7qqx 8gOYFJfAVEzWJFMUOqhvwpyLOh6MCv4inJMrBw/RxmCrsAQcnLHdkuQLMsd+2u03t8VD/wCp vqSJdqZAVfIQwgf/AI6YUxNq3wpYbKui/GvJPE/wsDR4iL0mPqDKkY/uWNBnISL741ikCg+o JJAEIv7b0eOLGzRu4aV1yACzcdNq9lALdmTo4Hlo1he1LfiyPI0+Bpickg+dY8RpT2lqUlHq NLpyEoG111Gh8DXjlKeoNTLidTcVScqka1e2tamEwMAWs/Ax5+RyhjYwG8i5LEABbgXP3+FM iOfDyGxpRaVDYqCD11HSuzYmKTBidaFHUttkTGlMNiIzXoiYcZFVWW97g3HX2UZXIXfY7D+b w++pgXB62rWxrUR4kcTbhQ8nHSU3NHZzYWF79KXeUeJrW3Fg15rFxrERQvlYwKHJjxAa1M+Q 8ZClGDHoCCL0nI2TIwXY121UWNz7qYmPIdZFaQg7V5o49QtU7II1ryKwax0I6g0Yo4UsVO0d WtprTbi01oVYmKGEAXbQzio1EcOhAdSt9RcEXqzB47dxSl+m4EX++t8wriEPamsPj43i3Gmv kEAsKvgQTjDlyGG1ISoKtcMd5AFhb20Qve9vDrUuX1Q15hrj2UsIjExBi1LDDRW3eIosi702 3oscEs6SOg9MS7nJoALEFwCVHU20FDtcwxnwPso1xpcCJGtV+Tj2kVRYFhvajq9/fUGOWSZI VU9xyAoOl7++nncwgSZrVxqpkwIpSSBXN6C2IlNTpJDkPjkFpIyQwUE9KTfIckqilmBsQAb3 rlXJMXHSnrjRhNr3rz40drUtkRRqhXrTE+JmRY0OXMu2OcsEH5vTobjwofy8rqDsNj0NqcEd SNxPemY8eEndKkAx7xWTJACa8I9LVqQ8ZNkTrDdYtxIMkhKothf1GxtVm4TLSA5J2mLu9hWB vuOvqGnw6daoDEi16MnArxuVSf1rK2WFqgJrWryHD5WBO0MwD7LXdLlPUL2uQKFl8bJiyIm9 Jy8YkvCS4UG4s2gsRaukiQemtYWxnaVYEMJWKSUVe2lFGLKH2MhVvJhY/jTn7Y3Y3+NCXG4D qa20a6105QVQxijkVW1eCGNeUGNDhxFlk9Z2xoC8jeSLqaQzJZM6QC2yGMbYoh8KL/ifE1pZ b9rA2jRsh7HpbZHrb/UarxwjhkVnIUkHazdA1vSTVyHauPHO05YLH/d9PwF6E5CSWN9mg/Os v9vUaFdfGhvgqRfbpW4kspkMc+RFJK2PKosy+kt8Ks/Q3qsEkWNCFyWQgTxlgGDjbY6+m+gp wwvuHnIBm7DT23rRyhBlZjtXNy8YCbbdT00pRuOkiZZYiyOpDI4uCGGoII8RXYxTzLmY5ysq KRe85UKysVTafVuHRT5Uhnzx5a40uOQuNtKDHuN0TA63H93nTodELb52/tIv0vr41gyo7BSs T1msrMgfkcRuT2hcuBgmcEFg4b4J7WsCTcMB79Kzuy1uldNgQqmWqMD2slTBKAAbrJoOv91j ScePtLRsPUhKn3jShbkbkGTxKt7RRpjAYpNtV9h6VjwnKx5BLjO0coBAdeoDCxtTmP8AOGc5 crlpy28ueu4a30p/5ZfKjY2P3J0iuU3H4gpci2vwjrQeuzwi9T86YMSKS56D5U3zebBjcd81 HpLypj3KOoSNRvt/D7aPNnxLJNkvkwnhjjbYoQy7t9tFCdb1hckvIZ04kmDSRROYImCbFvf4 QoGhNKHhs7ImeOLHdnisJFt8JPS9W+r5rKTPh1v+cmpfQ8l3Ajx6W79oFdNx2XDKvFZRyYVi ihdJt0iqwk2gBbH7aw+JmWXlIjJKIk7hPdNiBa5HxXGtAxPp3LyosmUIyHF9JjKnc8n9AHs8 arxuFJnSDHxwCxFySbAKOpNDkJOyEP1SPGIH6UeNQPUlx9MHwmT+tdPnZeOJuO3ToXiyz3C0 qOyqQ9ixFrA6e7QUvhcscrM5WOWcGZGKYRDpFeJXa4jkIIv01rLb6aT92lwe+NkKd2Wcrbat gfh3e3zpfkeLiwWiCyiaDIQSQygbdyn2HpTGyuPNssDDX91JXCjeXeJZZW3vo/P5cc/LN29h KIqyNG29WcX13bV1tYVpZfNRQ5vE4sk6fImONsgDaQHHw7z4bSBWFFxWf2u7j4ssqMCysqkg geR8aUfis85WPHmQy4seU4RZDGzHXyQak+zrQ4yxdmCkB4o8gQIqFgSki1663ks3HMuLBPkR IZMzfFMZkmdEF7MF7e1UPT1HSvcrnYKpg/MTpJ2c9TLulSRxGQ9nYLay3Km1tBXHf9PZ0mTN FiQy5MUMrRd0Rslyv9St8Jt4GoHC5a90vC6jHIE1wfQT03U9sgEyuv6UhcRMQ2n612HJZ2RF xvJtLmRSSHISTBRJFZxEJIyug18P41PL8jDDxi5cOkvLdslf6VRRv/HT7aw+O+msyWV7oYWh Tu+pSST+VQPbaj5GLzPJsMieNnjgBRbIFVdp9QAUD7aTkySplWupAtPeT86bjxAEedfK0teN YgfKtHhsyU4uZDHKI5mj3QBmC+vUXBb7Kaxs0D5GWLKhTj4YiuahdQe4AQ116m7f9taxxw+X PB3EjZo/6gPKl4OE788cJcIJGC7rXtf2aUjFyAiohU/6ek3mn5cCMzsHX/V1i0UbiuTi/dkd WSOHuNsMvpUKb7bnW1a/JclDDlcbIckRyHJ2yQl0kAiYkM/cGoXp1P8ACudy+LbHnlx0budt iu61r29mtZsmIUY7hY0eLKqbkj90++mNx/VKOG/Zt934NdtDK6Z2fNPmoSZEaKJZYk/QDGxa QgkAa+kfzpSblY8XK+ocjGniDlMdsZgyNubYwYqNbkGuNeFap20FPGYRp4/GtX7e0mWEEAG3 QEH9K63M5DKz/p3DnOSsjAt84pZQxbeAno9n8Kc4nkMWPAf5p1DYRORCpIG70t6R9tcPuVdQ dal8h2FiaEsS4eNBBmjbhgY2x79W3CBpNd8/L4C5uBHjyoEy5Gysg7hZLx2CsfDWl5syXI4i VYMhN0WXJ3VLqD2AWIA876Wrhg9vGiLLWlze2tJHANvPcRr4V3mfySSPy8LTo8K46fLruUgt tJO3zN698/Ama8qTICvGAK25f+IGY7ff7K4bv1ZMgA61hytM7a4fbmAgMPxH9K6jkslcqHjH ZxLMYf1iCCwPp+K1M9lflfsvXP4U0ZYHoa2/mh2bVKzf+QjxcT/9Yozxcm0Yp6z85p8sB1oT TKOmtLly3U1FeQE71gxjrReQmHymCR4ma/2MtQHDIFI61Dp38B1AvLiv3R1v2nG17AeRAJqM VwJImJsA63J99VZlDHEdAyIJ/wBo2/pS0UDeCLqzfO9UGLGxNvdVxgDoRTn7hi95glo7Zqhm ZwQwu13HSwqVz2GcjSELEBLY/MLLf06Wt8NP/hGAfV/cBZfHWkNkHROnU0l+3re1vsry4KRt cCxp+PkY5JonRwY2xpNpeQLJ3Lj0Ox+H2GkcjLlbJs/ioIHcE2mv51pWbjMiFhkL3jTp7a3G +5gNsUeBQMiD/wBRP/EKUcg5+Tbp3Xt/qNN4h/UORJrFjqZG6gXHwDTx3Vm45LOznUsSSffQ AEce/wC5yR7rU4D/AJfYoFNECjcbGx5CEqCQpJYjwFjQL1UyzxgmCRo2IsSpsbfZQ4HCZEZt FYH4U11JRlH7lI+NVTPwO1PjZGUuNJByBnIYMdyK35doNEx+d45s3kP+ai7MssckazKwRgqo CyuuoYW8R5Vh5XHGxfqTqaynj2kjpXr4+SrAQBapW451JN66pOV46bI5mCHMMMeUI/l5pS5G 5QQ5BN28reysDGdo+jkC9mIuLrekdxXpXu9JawNh7K1yXjQQa3GAk3JkD5WrrJOZ40/UOa7z hcTMxuwJ7GysVUXI6+FY/wBRcniyDBwcGYZC4UAjedQQrObXtf3VjFSxudTVo8ck6CmFxB3R elDGdw2zauqwuewYX4BXytseMmQM0eqys0do9wA11quPzOI+JhLNkbpYuUOQ+7cSIf1PV0/u rEg44uQSK0oOLjFtKU/MVRFMXhk3Jp9uTxvlc1YZyHm5Lvpt3AtDeM7un9tNy52BlTcvF8ws aZXZMMrBtp7aKG8L9RSKcfGB0q/ycVrWqZvuE/tB/BH60X8SNGP4j+laB5XBfkZxHkhYpcTt JKQwUSXPXSr43L4MONAPmYw+Kro5ZZGZyNAyKpUNv661mDCiHhVThReVcPuF/pH4vWHiSNTW rx/MYXycRyZ0XaH3rZ0lS/QIUvcVm8fOrTRyFtiLIGDML2AN9bVRsSMi1qJHCqLtHSk5eUHC eUTjNqZj45Utf6hUMBJnTuG3q8jMGAsDc36GqZWIkiHTWmEjVdRVm6VO2Ul9wten45QAdq5P KjaJyp+yk3e9bvLwbkLL1Fc6xN69XjtvQHrVDPYVN69eq3qKfFKL1fdUhqHepBrorQ5ogarA 0MGrjWhIpisTTWJIRIK2u8e31rDx1IYGn97bLUggeqp7U2DE9q6EVNRUivIqM1KStBKJlAYC 4dD0dDoyn31EuOsSrJE3cxZf+G/iD/Q/kw/GvHWqJLLjMWjsyN8cTjcjW1G5adjdSvpvpqp/ tNKdSDvXXQjuKC+Kja+dUXDRTcU6JuOm6M2JJb4HBkjJtpZh6h7b3q4xY2Fxm4v2y2/itH6W bRSHHdT+DXB8f7gV9opI4yEVfGxGMgSIFnbQAUztwYtZ8tGtb0wAuSPHU7QKBNyYZTBhR9mN hZnOsjjxu3gDboK4YmH/AHGgdgZY/wBPfXSv7Fk9yIH+NE5CdI4/kIGD67p5B0Zh0UH+lf40 KFdi0KGG3qbrR6DK+6wsBYDsKNEi5uTrTWEcEu3zr7FA9JJsLnT3+NL45TKyuzE1lZiqM34X t50GRA4saiCEq6rEwR7jaxNgD761ShVEKCQ2o1aek1xRgWYMYK6HQU5JgS9sk2v3ewqeLP7P ZSHJfTpWKaWGaOV8e3fjUm6XprnuWb9xxUxWVxi2lcqbo0pNyNOvShZfLRtHlLiYrRT51hO7 PuAHjtFvG9XjFgxswDXHj4f1qYZczBTFj4fjpWbL9LZSzyw92O8UHzJOtiv9I060nxvC5HI5 HYjKpZS7u+iqq9Sa6SXnIyHk+Ub5mbH+Xd9/pA11C29tLcVK+AxmMfcV0MciXsSre37KJ82J WSGlSb+yhUOVaR5gLe2kV+mwMmGJcuB4plLrNusAB1BU639lPp9NNHlQwCRGE6l431Gii5uC L0XG5LFxMqOTGwtkUcbRkkgysWIO7dbqLVf99L5uLkDHktiq6EM+4uHAAJO3rWk4WB3OPqGk 6Wms35VPlX9p1jXpUS8auLDHMJEljdim5L/EvUa+6msbjxJCJjIkaFtg3XvuPSs/5mSTChw+ 2QY5WkL367i2lre2mpMto8SKARklJlmLX6hfy1Gy4PVufIUmJP1UZzZtn+rdr4U3Ng9qORu4 jmEqJEBNxu6VEuEZc2bHg2I8Sq3a3EkgjqCwpGbk3YZx7JHzjRsPV8Hbt7Nb2qG53ZmZGdHi n5iVVSPc11QAAHw8aaMXE0BsSJ723aH4UsZM5vF493SiZCrBM0O9XZNGK9L+VaHyWO0rK+2I LjCULuY6ncN5uOgtWC+QmTlyZEURgWTVoyd3qPUjQdack5hfnDI8DGJsX5V1VvV1J3DT20OF MC5HDbSu4bZva9NyHKUUrIMHdFThxfOTGGN1uL7TrZtvlTKcbO4gIIAnBIvf0gDd6vfWZgy/ LzCeFSqo+5EJudt/hJ92lHyPqPKPzkawkLOAsHq/4Xp2MenjWYsXGbcHJBVunUa/4V2TJnEb RII+daePh48k2KrbQskZf0sxMtra6jTr4UGPGxpsFHWaNZHn7SzXba97gKo9prNg5w48mDI0 BIxImif1atuA1GnspVuYgjgxsbHx3EWLlplLucElU/KdPGqRj4xGiG0G3gKX/wCRP7u/517O Ro55MaS29GKNrp95pHlfpiXEwpeRjyIpo4SolVL6byANrWs2rCmJMp8nkpM7tWV5BJ2m1Glt DTvN88M/BycFcaVfmdh3M4KoUZWsq7enprcAxIXG7/bVOXJm24oX/fSnL/TEH7rlJiMmDx+H FHJNJIzsFMl7WvuYk2pBPpjIfMyYPmYBj4iCWbLDbogjfD01vodK1cnm/mcnNOThs2Fnxxxy RK9nUxXsytt9tJLzWPj5GYg40R8XmRLDJjxttcbL2k3W+L1Gqt2JjZhU6tyAsEGyjsfbfvrR +J+l4RyiQ5pjy8PJxnmxpkZlRipXXTaRbdSEn0tld7BTEniyo+Q3dmVLhR29XLbhewFHT6vi gyoOxhsuFiY0mNBEXu95Nu52a39nSl8P6qfEi4lIse7cYZd+5tJVm6gaenQ0ULFYMmfdPhod OsfpRv8ApvsvBOuRFnYfzKY+QYiRsYsAVPTTXqKBzmLj4fM5WLjJshjYBFuWtdVPViT40aT6 iw44ExeNw2ggbJXLyO4+9mKMG2LpoPTSfIZw5HlJ84IYhMQdhO61lC9dPKl5NoUxrVXGbMcg LA7YI/KJFavN4WHi8q2PhJ24QiHbdm1YburkmhfLnbVsnMgzc45EMZiUqq7WcyH0jb8TewUf cNtSlx/IXTbu91Uf8v8AG2+f1NkTPmn21pVF68aqxtXk0FW3VVmFaU0GA2dLx0cbRzLH3El3 Egm26xU0m/HOYSe6vzAh+YMFjft+e7peqjw8qno0TJXuNReKUnIxNEkrMa+PW1Z2Q8djSIKs 1PwYAy4Z55J1ghxgpkZgW0e40C+6rHgWgyMkZOQkUGKUDTWJ3GSxUBRr4607HgfYGAsfH8dq ecmBSVJ8w1sfD+oocUC2BNHRFXpTr8fFiYeW2RIBNjsqra5X1AMvQfmvb2ULBxRlwtM0oiRX VLkE6ubL09ppT4M24LF2BMT270sZcMFgbKQJjvpFCvXt1aEfFqsyAyLMvdMMqC62bZvtu91C XjGkxmyhIAt32qFZ7BCRZmXp0rP4mb+3vae1Z/Iwz9Xa8d6TLVRjcWpybjWiwRmGUEFFk2hW Is3940vQ4IcaTjMvLkk2vDtC9SBci17D83SuHGybgpEEqWuego/WxbSwMgMEMDqbUgIVVt3j TOOqO2o1p3kuMhjkyDiSD/l+3vgN9w7ui+o+Zr0vFyYMZmZw2whZBtZQC39JbRh7qLLxsyhp E7BqD0oPXwMggwW0BF5/BqBBGeoq/ZW1rU1BjCSONzIEMxKxA39RFXjxQ6x7pFR5SyohvqyE gj8KkHH5DRCk7hIuPD+oqc5kBN9KR+XjHhUGKNfCnRilgi7wJpFZo4j1YL7arDiQyNjmacD5 gbkiF9zC1+tEnE5DEDbE9yPn8a71cdyTp4Uidg6CoY360wMVZGQxSqySzNChseq3PjVo+PEm 28yoZHeNBYm7Je/8KMcTNMbZ94/HWmerhAmflSe1T4VVoUPhWli4mPIkBl9JcS3IJO4xNt8t LUCLE7qJLHKrwOsj90AgBYjY3B1ojxM4AIE7uxveNfjXDPikiYjw/Hake2F6ChyFR1rQwosb IiyJJZNgiTcDqQP7jYeFAn4xzCzCVfmFh+YMFjft+e7petTj5WAaJDSde1NGbEGKsYiBp3pH 5lF06UF8uP7aph4X7guTM8648OKoeRmBb0m/QL7qLk8DNjJkymZWjx+yVYA/qLO21WHlT14p I3RRnNhVtpIn+v8AnQg4kpiHDD6kaU5j8CMd8kZGSiJisiu5Bt61DC3+qnGxYcfakkyd30Ew 6g7XPgfOgyYcq2VffIoW5OLRTPuPWkBAiDQVUxoTqK1M7CiRpWgkG2ORI3Sxuhe1tfHrVH4e RZoIxKP1yygspUgqL9DQfxc4YiJgxY9zFAvJwkAlonuO16z+3GfAUOTFhcWKitP9qf5nsB7g RmVmKMCADb4bXJ91L5eO2JOIXO7codTYi6n2Hp0oWw5kBYggAxM9aJcuJiArAkia5zO4ddWj FqymxHRrEV2TKCNaUnw0cGw1p+LlsBDXo/TUmdK5kIFr261O5uK0VyBpWeTViMHEimztFqOm SydKL+4yWpG9evW7FmYvWeoa7omhSOLEVDygClDLucLfqbffXjohNcqd60MjmcqV5Xjx4o5p l7bTqCX22tYEmhnks8wdrtx91ouwcix7hi/p62+21ONxXYMoE6SSQMgmQAjaJfhOtHk4+ON5 FadP0F3TkA+gfl996tY8sE29tx1rzivGmxt0sayQ00WBkYqqCMkKHJvcbDcW++ol5fObIyJJ oIpYsnZ3IGDFLx22sPVe+larceE7jyzKmPGiOJrEgrIbLpVOR4+JJcoxWWPG7QKm5JMth/Ou x/ylQ2svS0xf5a0U8dmAJnd1+Hz0rIbls+ZctMiOOUZhBa4I2FRtXZY+HtqYc7IxsQwRorBp Elub3vGQwH4VoScQsTzjInSGKBkQyEEgtIAwFvtrw43FfDiaPIQzzT9lW1KNray6eWv4Ucch jJEFQdSJ7Gm/+KFgGQxXQGNJFJJzuekjOIoyWyDkker4inb29elqjH5zkMWMrFDEJLuVlsQw 3m5uFYBreFxR+SwBx5QM+/fcaqyfD/m0NNS8bivHhQYxHzGSvdeRi1ggF2a1rW/GiDcgsw0Z Ont7UBx8UKrXKv1j+3vWWOaz1wjiJDEgePsvIoKkp4+kNs3HztVYcyaDCnxe2kseSoDB76Ff hIsR0NaMXDidojDOj48yO6TWIH6ZCsCD060pHBFNmjFhmEiMbLKFNjpf4Rc0DNnlSRH7VuOt NROMQwBm29rG0UKfmM6dsx+2iNmiIOVv6ez8JXWiycjl8gdskESOzK0kyKd7FRbqSbfZV+Sw P2+SNGYOJV3qbFT7iprRTivlcZch5A24K1gp2+v+/pWZH5BDrtnaPNpS3x8ZUVlP1fTr0tUL mZWPDGiRpIYyWiZwSUJ62sRVf3OXGwsVI0WXLRpWdpAfQXZiGFrDUNWg+IFLorq8kZRXQXFu 5otek4z1oBYlm2agrY23ePUWFJxtzUkemTA29DF+njaPCo29ImZ1vWMvJ8lDCi7EaZFZI52B 7iB+ttbfhQUzs0S4coRQ2EmxOtmHT1a1riDFkmKI6TgRu1gSpUp50uuDfAObvG0KHKlWAsfJ joaYG5RWYmJNiD9MfGnIuDqYm3xpWPmMuA2XGhKiUzRghvQzCxt6qpHymcrQt2k/QlkmXrqZ d1wdeg3U9nQQR8mcSIbQSgF9fiA/xosnGqp2pKrlZVhkABGxnIC+/rWnJypZQJ9NtpIjXw+F aFwQCTG8SJrNi5TPh7G2JCIDKQCD6hMSzA6+F9Kt86IOHlxIj+tkyFu2qkLCjG7KGJ16VoNg wpHkorLNND21NiV2M7bbe2hPx0XfXHSeOTI3hHj1BU23X16gVu/lAXUGRt10nyx7bUO3ATYx Bn9f1pPDnmxIXtGsqypsdHvYj7CKDNy2f8uYu3H3Wi+XOTY9wxf09bfbatTJwVxmiEkqpFKW XuOrLtK+YOuvhSOEMLIzkiymCwm+pO0E+A3eF6DG3IRhjPlloEkdf86cEwuDk+raNxgdqzuM 5HH47F5FchRI+RGqxROGKOQTcNt6daFH9UchJNkNLjwTRZAjHYZW7aCE3j22YHrW1yHBRZGT i48UBxHn3gvu70DbVLja1917DxApfB+mw6wOJFHf7lrg6do2N6t3ZFUIFkjt/j7aAjA7Fy0b u/h7P9tCbls3OXKWSJE+baN3239JjVVG25/tpuTkcySMK0MRksitNtO9hGbjqf4UaHiC0sIg lWSGaNpFlCn4UIDenre5FNDjCjuJZVSOONZS7Aj0tcaqdQdOlSueUSSF1tqPb+DXMvGEQ3jo fZWe3JZ++aRY0DTSxzHQmzRWsOvTSon5jPlkiY40P6MjSAFSwJcHdfcx8Ten8CKDJlmjFnCR uyNfaCQQAaOnHwkYiyAB5O40pUhrhPK1xWY35biREH890fmaWy4VMHp/Ssg8zyZmRu1GIo43 i7J3FWV7FtxZi35R40HuS5GR3njSEABQkY2qAPv1rTl+Wkwfm48R4Y9y7JNwZGUts9V2uNfI UfI46KKTObaBDDA0kQDgsGVQ2q3v99E6cnICpKsDBm/We48KLG2FSDdTcdPDx8ayyReiIgIv SMU3c1FPREhRevPdStXtYWpbNxFkUi1c7lcfJGxKi4rq5CDS7xI/UU7BnZPEVq3F649o3XqC KprXVycfG46Ul+0L3b20qscxdpMXrtt9aLLlaaUukxEisToCCfvoDPUx+prUIQKKYTNq6Hk+ efIypo8CNBBK0TNNtYSSdsKQGufBvZULyGYcrIyWjRlyhtmhYHYQBbzv+NO8ng4WBvWHFAA2 hZjNdgWt/wCVqaYXiUjeDuyfpyyds+lkO7aWAG4eNqZl/kl4WDBExYCbda8tf4+0G4BFpuTA 8Kyjy+eZJmkiikhlRE+XYHtqsZum2xvpVTzec02TLJBFIuT298TBit4vhI9V6ZjXFk5cYYIe LuFDa4+zXXTpR4eLx3zorSLPiSTSwOFupR40dwvt+HrWIeS2kWfb+PC9EU463aR5N4t0/ras xudzjPPLLBFLHkMjmFwxVXjAVWX1f260EcxmdjtPBBJabvoWTRWJuQFvtt4U9BxTZOHJlpIA EEjhCjWtGdRv6XqZeE7OLHkyTqEftsxCMVCyG3xgEG1EDyNY6T00NNC8QW3XnbEHUVn5vLZn ILHA8aQwxsXCpuN2b2uzaewVc8tmxzYk0SoGw4zEoIJDqeocXonMY+Nhci+LjtuChbqb3UlQ dSet+ulAxkWTJhjcXV3VWHsJAoGyZRkIJ807fhTUw4WwhgJSN1/HWrjnM1XURQxRwxxSQxwK GCKJTdm+K99KFxk8+BMmTEA0iX0bUG4sa6VPp/A/cXUoTi9te2Nx/wCJdgwv10CVm4vFmTjv nhILBO4VKsBYf3HS9HlXkCDrtkiP9NKx5OJDASNwAO4a7un9aQyszK5GWHuRJEIFKIE3arfS +4npT0vK5qwfLpFGiuqo7qCDtB/pB239tqafj4oIEyO6jRylRERe7FvZ7KPJxRV4V3g95igJ UrYgFuh91ILcreWC9BNxobClueOVCzYExr7TSPJc3NLkzJgKqRu0bd8KRI/bAIvc+DeyqSct ntNHMkMUUqP3C6qbubbSDcnQjwFaCcRExQpOhMu4RjafU0dww+y1DXBD4RzFYWVd5G0gWH9x 0onflkk7YkbrEdL2+NKVOPH1f6dD1tSLctlrJvTHijAR49iggfqG7MTe9Bk5vPfDOG0MZDQi AyeoNtX4T8VtPdWrkcasUUrd1WeFVkdADordNaQhSDuo0ovFuG/w9PjQnNnQhX8u72R26U5M WB1JHm2/HvVVzJsrkVzshQh3IWC3sAlvO/lRc/mp5MsriRoIVnSYsAwaUx2K77n2U9Ng4+KM ppVuolSLHFyLl7N19imhzcdBG2TO0iY8MMnb2m7erar2B067qOOSu8wss0nv193Sl/8AAxW5 gCB26VnDNzR84yqqtmMrsRf0FGLjbr5mrS8xnM6yrDFFKsgld1U3dgNutydLeVa02HjI2Uvb sYXx1UBiR+qyqdftoORgYQhlcyCJ1yRAL7mVdB6entvet28oTdep1jQnvXKeOSJB6dJ1ArGn 5WWXJimfEg2RF2MYU2kL31ckkm3hQ8LOkxJxOiK/UGNxdSG6inc7i3xYXllYArKYVXxaw3bh 7KnE4PvwwSnISN8reIYyCSTGTcXHurv+VmiIdfN0HhVQ/jpjJ3SjeXqfGqR8tliTG+Ux48eH FZnSJbkFnBVtxJv0Y09ics65EJyIUgggWXYI1Yi8nmLnxq2DxpbEbI3AFA5K7Tb0aEbul6an wsYuiRyAL2O/KxB0T+vp4+VZ6nLncFEeUgEi/wCIqPIuCSoPcTesReX5ETRSRQxxxQxtEuOA e2Ucgtf1X1sPGo+fzHE6LBFEmRGsRVARtCEm/XUm/U1rxYuB2cpjMhSJY2WZbkKHJ6qPHTpS mVCMXKfGYhmS2o8QRegfLyFTeQNrdiDGo/SmY0wsdv7h8+v60HDklxIpNgDGWNoje+ga2v4V SPMz8ePESEKpwi5RtTu7hJYNr01o4IqfSamXk5EsD+Nac2BCbik8vlZjjyY0GJFjpMyvMUBu xUhh1OguKC/LZsmXmZRjQNnRGCRdbKpUJddeulPSwqw6UsIVB6U9eY5FavGxxUYEBVBup61h VYgAotRLVG7EsTTCenagsdaqKIyVG2uBtRgiKgVNhe9etaprq6a5EPem8a3WgLjSDqKMoK16 jkEQK1QZvWllZs2ZyP7gwVJAVIC/DdLW6+6mcr6kzpHjIgiUxTLOCN2rgFdbt0INNScdhJy+ fiBD2sfEaeMbjo4CG9/toP7JbHMhyEMoxxl9nab9q3Xd0otudSxF5Jn3VL/4jBQZWw2yOjey kYs+Ycj+4pEiPv7naF9m62vjfXrTA57kPmYZYseGNIZJJjGgYK8kqsjM3q8mNN/tMOPsE2Qn fOxmx9QdrnoG8TT37Ij5Mwi/TiSQRoLM53bQ2tug16mhB5AnaLltJGp/yrMh4sAEzCxN9Pwa x4eZ5KLEGL2InUI8Qchg2yTUjRrVVuW5P5I4iQxRb0EbyIpW6r/Zu2AnztWrg40MmeuLMt7M 6uB5oG/mKPk4WMEhXtjGnnlEcS9zuB1P5tKFMvJdCwjykpB1tH9aU/oK4Uj6oaelc/lzT8hl /NTRJFKVAcx3AYjS53E+GlQu+GRJVFzGwYA9Lqb1trxu63rXWc43T8y31/CpPCxyFAuSl5Gd EG06vHfcPs2nWl7eQ7bil/aKpx8jAibC3ljsazB9R8qske2KMrHM8wB3amQONp16DuE16Pl8 8YIw2hjZez8vv9QbYBZfzWuPdT2PwyyRxuZ0R5EaRUIPwobNc+y9FGBFHHK11mX5cTxOLro3 Q7aaX5RAtaOsdqndeLJ2nr496RfmM540iEESxxGNoFAP6bRm4I11v43q0nOcg8sT9iMGGUyi 27UspU3u391Py8aMNBPkndFGyCdQrCwYj4W6N18KiLj0yIGy4nCwsz9tdrMQqk23EdKHdy5i PNE7ZEwOtBt48TNtJvr2rPh5TPhOOViQ/LGVlvfXvEk318L1U8tyAwvkzDGy9nsdz1BtgFh+ a1x7qf42GHKeVSL7YmdNbeoEAfxokmCix4cZss05kDsD3B6eltl/ChTJyWTcumnzCxWsmANt Ov8AmazJOSzpjkFo0HzMaRNa+gToRrXoVPb2mtJ+L2StG0qqqw98uykWQGxuvXSqHACSNumU QJCs5lsfga4X09fCl5cfJyfUuh7im4mwJ9LajsaR5DPzsoY8TKoTGYMCL3dlAALa0LNz8zMi lgeNVWaYTsVvcMEEdhr00rUfjgjydyVRFFGsjy2JFnJC2HttUPxcl3VGV2Qx2C/mWU2VqOeX BlSeh06UIHGkXA6jXrSE/L5zvO5iS+Q0Lta+hgIZba+NtaHJyGTkx5GPPHGIsqYTM1mJjYgI WXXyFaycK0jOBICFcxKQrMCwFze3wgHS5pebBjgxBkTSqjPuCRWJLFG2sPsoi/KAJZbQSZI9 /wCdcF40wGvYDX3flSnMZxz58eKJjJFjxhWkI275Dbc1vsFMPy3yWBhxY8aS5UJkN5FJ7Zcm xWxA6GiYnGRzRRzGZY+8/bjBBJL+A0pnH47GeTESeMbpGnWQhjqYiR9lrUSNyGfeABvUCT7R Hehf0VTYSTsYmB7DNZkHL8jHiLjtFHJ6Hj7jbt22TU9GtUpymcO0TDGxjh+Xe4b9SPyb1fwr RgwosmLF7RCNLC0rk3YnaQPSv20DIiSCcwE7iLG9ivX2NS8uXlY13MPLa/umsVMLMQNb2pOX Oy5YcmLsxomSkaFUBAURkkW19vjVZp8jMzXyplCM9gVW9vSLeNPIkRdRJ6UJAY+Qvqabz8XH SHfDCQpdVSeN+4hDEL67m46+FAjZs+N4IIXUdepov+PE6yDJ61mCrCnn40ruWOVZJI3SORQC Npktt1+2rvxMiyRoHFpGZNxUrZlUv49RZetK/i59Nh6dR1tTv5OL+6s80u9ga1FwIpBdMpCn cEAYKTeQgHaPvpTI41laIJOriWVoGIVjskS+4WAuelEvEza7fmKJORin6vkaDHJ4UcEGoPDz R5XZadQnYbI3srKQqkBgV6jrRpMDswvIuQkhSIZAXaQTE35tenSufhZrnbp4iuOfCYhtfA0O oNHnw/l8ZMl5QIyyqxKsoG/xG7qKDyMPyAQSyqzyXKKv9I/N9tLPFzKCSsAXNx1rFyY2IAbU wNelDYgUPeN1LvkDzoPzHqofTMVRttTLYotS02ILHStI0OTbbWjQ5J0ogX6ilsrncx1ltjRL lTxdiXLAO9o+h0va9QvJ5z7rxIN2GME9fgF/V1+LWvN2t2tqLFsr0GblR9PzFQkcW8N+dXfk 82SJUeGIygIrT7TvYRm46n+FXPL5xeUvBFKksglEbhiquFCXHq8hUjZ7Kn0eylbuZP0/MUsj jf3fnQ+PnnxpvmgqmQFm2kWX1AjoPfVYs3NghWEIrrHMJ4WYEmNgbkDXoaYG22lQdtKxnk32 KY3NOmtp/SicYLbj0Hw6VSTms1mj248Ufbn+Y9Ib1OQwO67eO6qR8rnRvC4iQmCWWVb31MwY EHXw3Vc7PZUHbTt3Mn6fmKADjR9XyNBXls6MRDtJ+lFJCL31EpBJOvXSq/u+b2eyI0A+WXF3 C99q9G69amW3hQRa9EDyo+n8qYF4nV/kaPlcll5yduaGIO+3uTqp3tt6akm32UxByeXgwKkE UZZb7ZCCG9X9W0gN9tLpaiaeNLJ5XqCB548NK7bxth83lnsarhZGRjRykAM0sbRtu8n6nSpx +SzcSPGSNEIxO5t3X9QlN2vr/CreFUa1DiPJ/YPy7/1rXHH/AHt+fb+lUm5vNkLjsRoHx2xb LusEbxF2OoouJzG6VvniscPyq423Y0iOEJILgMGvr4UpJa/hS8lvHpVCnkTdfyodvE22f5Gt PM5/uZ8pxEWXEkiSGSORSqvsudwANxa+lVh5nko8584KhZ07fasQiqOgAv4Uhj9u+lqcS1Y5 5O7yr+60RrWKvF23efL1B0r2LyWdjwNDJFHkqZDKO8C1nYWJ0IvVJJ8nKhxoJVVVxt+0roT3 CGN/uo421YbfClMeTsMr5Y8NKMDj77NefHWj/uq4XHQxxRpNkxylwsgYhdDZgQRrSkHM8hGc dzGjtjtMwZr+ozks26x9tek7d/VXvRbSiVuVtTav7REEeEfpQFeNubc3UzIPjNVi5TLiTHTs xOuPG0Q3AkkMQb3vcHTwrz8hlZuWJ8gBdqhFVb2Cr/mJJ615ttC13aUOQ5/TPqCEt291Gi8b eNrea/Q++tJJypDrbcpBF9RcVTI5WRi0cePHAs0iPkSJcs2xg3npSq77VJ9tJ43qgN6XmXr+ DW51wEje0HpY0zyPOTyZMi4KokbSJJ3QpDyGOxXdc+Y8qC3N5gyoslceFXjZnJUG7s6lDuO6 9telA9N9OtTpfWqieVuPl6+Gs9KSq8SLvNux0qMfkMzGgWJEVguQMoE3vuAA29emlWj5rkon V0ijuuRJkagm5m3Bl69PVpVhs8auO37KxW5UDavsuKYw4t5Pt1oL81yDvu+XiT/l5MUAbrdu Qqb6sdRtqrctyBVh2kG7FXEvroqEkN1660z+l7Khu1bwoi3L6p8xQgcXv+dAy/qHNyUMWRiw srOkj/GNzR26+roQLWpbkubzOSVFyYow0blo5EBDKrfk69KPJ2ra2pGbZf00ROeDvWBHmuK1 RxpXY158tjVO61rXqd5tQTe9W12+2k+WqvNX/9k= ------=_NextPart_000_0000_36AB9BEE.01D1C7AE-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 16 10:37:23 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bwcne-0006tm-3O; Mon, 16 Aug 2004 10:25:02 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 16 Aug 2004 10:24:52 +0200 (CEST) Received: from pop.gmx.net ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Bwcmq-0006pd-Nt for linux-crypto@nl.linux.org; Mon, 16 Aug 2004 10:24:12 +0200 Received: (qmail 6026 invoked by uid 0); 16 Aug 2004 08:23:33 -0000 Received: from 141.99.2.23 by www33.gmx.net with HTTP; Mon, 16 Aug 2004 10:23:33 +0200 (MEST) Date: Mon, 16 Aug 2004 10:23:33 +0200 (MEST) From: Peter_22@gmx.de To: linux-crypto@nl.linux.org MIME-Version: 1.0 References: <12322.1092124335@www44.gmx.net> Subject: 177GB ext3 partition fscked (aes256) X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <2748.1092644613@www33.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-3.7 required=5.0 tests=AWL,BAYES_00, FROM_ENDS_IN_NUMS,NO_REAL_NAME autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hello! My aes256 partition again: After MPlayer freezed and I had to make a reset fsck ruined my SuSE installation. One hour later SuSE 9.1 64-bit plus loop-aes were ready again. This time I checked that data partition with fsck -f -v /dev/loop4 and saw horrible things:-( Fsck truncates files and folders. My 80gb dvdrip folder seems to be gone forever. I made such experiences bevor, but why does this happend? Ext2 is said to be "rock solid", isn´t it? Loop-aes says something about wirte cache on harddisks. Which command deactivates harddisk caching? Is it helpfull to add a "sync" in /etc/fstab for each harddisk partition? What about other filesystems? Some people here use xfs or jfs. Are these more resistant to hang ups / resets? Regards, Peter -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig & kabellos http://www.gmx.net/de/go/dsl - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Aug 16 18:09:33 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BwjsJ-0004ee-It; Mon, 16 Aug 2004 17:58:19 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 16 Aug 2004 17:58:04 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BwjrV-0004aY-LC for linux-crypto@nl.linux.org; Mon, 16 Aug 2004 17:57:29 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 1B995100E45; Mon, 16 Aug 2004 18:56:00 +0300 (EEST) Received: from users.sourceforge.net (4d12.yhteys.mtv3.fi [62.237.18.77]) by mato.luukku.com (Postfix) with ESMTP id 2FD9522EE89; Mon, 16 Aug 2004 18:55:59 +0300 (EEST) Message-ID: <4120D961.CF23BD25@users.sourceforge.net> Date: Mon, 16 Aug 2004 18:57:21 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: Peter_22@gmx.de Cc: linux-crypto@nl.linux.org Subject: Re: 177GB ext3 partition fscked (aes256) References: <12322.1092124335@www44.gmx.net> <2748.1092644613@www33.gmx.net> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Peter_22@gmx.de wrote: > My aes256 partition again: > After MPlayer freezed and I had to make a reset fsck ruined my SuSE > installation. One hour later SuSE 9.1 64-bit plus loop-aes were ready a= gain. > This time I checked that data partition with fsck -f -v /dev/loop4 and = saw > horrible things:-( > Fsck truncates files and folders. My 80gb dvdrip folder seems to be gon= e > forever. I made such experiences bevor, but why does this happend? Ext2= is > said to be "rock solid", isn=B4t it? Loop-aes says something about wirt= e cache > on harddisks. Which command deactivates harddisk caching? Is it helpful= l to > add a "sync" in /etc/fstab for each harddisk partition? > What about other filesystems? Some people here use xfs or jfs. Are thes= e > more resistant to hang ups / resets? ext3 file system may be more resistant to unclean shutdowns than ext2. For ATA disks, writeback cache can be turned off using "hdparm -W 0 /dev/hda" and "hdparm -I /dev/hda" queries status. --=20 Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 = DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 17 10:06:25 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bwykr-0008TA-UW; Tue, 17 Aug 2004 09:51:37 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 17 Aug 2004 09:51:26 +0200 (CEST) Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BwykD-0008RE-In for linux-crypto@nl.linux.org; Tue, 17 Aug 2004 09:50:57 +0200 Received: (qmail 2435 invoked by uid 0); 17 Aug 2004 07:50:41 -0000 Received: from 141.99.2.23 by www67.gmx.net with HTTP; Tue, 17 Aug 2004 09:50:41 +0200 (MEST) Date: Tue, 17 Aug 2004 09:50:41 +0200 (MEST) From: Peter_22@gmx.de To: Jari Ruusu Cc: linux-crypto@nl.linux.org MIME-Version: 1.0 References: <4120D961.CF23BD25@users.sourceforge.net> Subject: Re: 177GB ext3 partition fscked (aes256) X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <22595.1092729041@www67.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-3.7 required=5.0 tests=AWL,BAYES_00, FROM_ENDS_IN_NUMS,NO_REAL_NAME autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Jari Ruusu wrote: >ext3 file system may be more resistant to unclean shutdowns than ext2. > > For ATA disks, writeback cache can be turned off using > "hdparm -W 0 /dev/hda" and "hdparm -I /dev/hda" queries status. I used ext3 for the data partition mentioned and ext2 for root partition. As far as I can see the problem occures because of data that is still in RAM while the PC hangs up. In this way RAM and disk show a difference, files are not propperly closed/written. Typing "sync" in the bash from time to time reduces the amount of faults found by fsck after a lock up. So I added sync to my /etc/fstab. The above "hdparm -W 0" might solve the problem totally. Is this write cache turn off permanent? If not, in which boot script can I add the command? I suppose this change will reduce harddisk performance a little bit, right? Then a short question to "fsck". With the -b option I can make use of a backup inode to restore journal informations. Is that a good idea? As there are plenty of these backup inodes which one should I use? Mounting the encrypted partition as it is there is missing one folder completely. Are there chances that fsck might restore it? I´ll try soon and give a report on that. Regards, Peter -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig & kabellos http://www.gmx.net/de/go/dsl - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 17 18:47:06 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bx6w6-0000xT-JV; Tue, 17 Aug 2004 18:35:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 17 Aug 2004 18:33:23 +0200 (CEST) Received: from imf23aec.mail.bellsouth.net ([205.152.59.71]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bx6tJ-0000s8-Er for linux-crypto@nl.linux.org; Tue, 17 Aug 2004 18:32:53 +0200 Received: from [192.168.1.11] ([65.80.165.38]) by imf23aec.mail.bellsouth.net (InterMail vM.5.01.06.08 201-253-122-130-108-20031117) with ESMTP id <20040817163111.BNFL1787.imf23aec.mail.bellsouth.net@[192.168.1.11]> for ; Tue, 17 Aug 2004 12:31:11 -0400 Subject: Re: 177GB ext3 partition fscked (aes256) From: Douglas Ward To: linux-crypto@nl.linux.org In-Reply-To: <22595.1092729041@www67.gmx.net> References: <4120D961.CF23BD25@users.sourceforge.net> <22595.1092729041@www67.gmx.net> Content-Type: text/plain Date: Tue, 17 Aug 2004 12:31:09 -0400 Message-Id: <1092760269.26808.92.camel@compaq> Mime-Version: 1.0 X-Mailer: Evolution 1.5.91 Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: dwdraw@bellsouth.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto > The above "hdparm -W 0" might solve the problem totally. Is this write cache > turn off permanent? If not, in which boot script can I add the command? I > suppose this change will reduce harddisk performance a little bit, right? > Regards, > Peter > hdparm needs to be called with each reboot. Some distributions include an /etc/init.d/hdparm script (and /etc/hdparm.conf). If these exist, use them to turn off the write cache. If they don't exist, place the hdparm command in an init script before most partitions are mounted (i.e., in a new script before the mountall executes, or at the top of the mountall script). (As an example, my Debian system has mountall placed as @S35 in the script order, and I placed a script I made, mountloop, as @S34 in the script order; mountloop calls hdparm, and then does special prep work for encrypted swap or /tmp.) - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Aug 17 19:14:19 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bx7T7-00044B-Mx; Tue, 17 Aug 2004 19:09:53 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 17 Aug 2004 19:09:20 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Bx7S2-00040z-CY for linux-crypto@nl.linux.org; Tue, 17 Aug 2004 19:08:46 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 0F3B1FF923; Tue, 17 Aug 2004 20:07:42 +0300 (EEST) Received: from users.sourceforge.net (6413.yhteys.mtv3.fi [62.237.19.100]) by mato.luukku.com (Postfix) with ESMTP id 5DB7222EE8C; Tue, 17 Aug 2004 20:07:39 +0300 (EEST) Message-ID: <41223BA5.CF66B1EA@users.sourceforge.net> Date: Tue, 17 Aug 2004 20:08:53 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: Peter_22@gmx.de Cc: linux-crypto@nl.linux.org Subject: Re: 177GB ext3 partition fscked (aes256) References: <4120D961.CF23BD25@users.sourceforge.net> <22595.1092729041@www67.gmx.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Peter_22@gmx.de wrote: > The above "hdparm -W 0" might solve the problem totally. "hdparm -W 0 /dev/hda" solves only the case when power is lost unexpectedly. If computer crashes, but hard disk still gets power from UPS or laptop batteries, hard disk can complete queued writes successfully. Enabled hard disk write cache is not necessarily the cause of your file system corruption. When your box crashes, and openGL/X-server/kernel-drm starts writing to kernel RAM locations they should not modify, then such crash may well cause serious file system damage. > Is this write cache turn off permanent? Probably not. > If not, in which boot script can I add the command? On SUSE, maybe you can create new boot script: /etc/init.d/boot.d/S01myhdparm.sh > I suppose this change will reduce harddisk performance a little bit, right? Write performance will suffer badly. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Aug 18 00:32:07 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BxCOP-0007pV-Ha; Wed, 18 Aug 2004 00:25:21 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 18 Aug 2004 00:25:11 +0200 (CEST) Received: from mxsf19.cluster1.charter.net ([209.225.28.219]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BxCNd-0007mT-20 for linux-crypto@nl.linux.org; Wed, 18 Aug 2004 00:24:33 +0200 Received: from mxip09.cluster1.charter.net (mxip09a.cluster1.charter.net [209.225.28.139]) by mxsf19.cluster1.charter.net (8.12.11/8.12.11) with ESMTP id i7HMOILA026320 for ; Tue, 17 Aug 2004 18:24:19 -0400 Received: from c68.191.145.183.dul.mn.charter.com (HELO eclair.leet.org) (68.191.145.183) by mxip09.cluster1.charter.net with ESMTP; 17 Aug 2004 18:24:18 -0400 X-Ironport-AV: i="3.84,87,1091419200"; d="scan'208"; a="201025518:sNHT11866528" Received: from eclair.leet.org (chris@eclair [127.0.0.1]) by eclair.leet.org (8.12.3/8.12.3/Debian-6.4) with ESMTP id i7HMOpqT032378 for ; Tue, 17 Aug 2004 17:24:51 -0500 Received: (from chris@localhost) by eclair.leet.org (8.12.3/8.12.3/Debian-6.4) id i7HMOkP8032375 for linux-crypto@nl.linux.org; Tue, 17 Aug 2004 17:24:46 -0500 X-Authentication-Warning: eclair.leet.org: chris set sender to cschadl@satan.org.uk using -f Date: Tue, 17 Aug 2004 17:24:46 -0500 From: Chris Schadl To: linux-crypto@nl.linux.org Subject: Loop-AES 1.x and multi-key encryption Message-ID: <20040817222446.GA32333@c68.191.146.142.dul.mn.charter.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Operating-System: Linux eclair 2.6.6 i686 Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: cschadl@satan.org.uk Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto I'm using the util-linux patchset distributed with Loop-AES v1.6h along with the Loop-AES 2.1 kernel modules. Does anyone know if the patched versions of mount, losetup, etc from Loop-AES 1.6 support multi-key encryption? Or should I upgrade to the patchsets from 2.1 if I'm planning on using that? Thanks in advance. -- Chris Schadl cschadl@satan.org.uk - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Aug 18 13:30:46 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1BxOVC-0000dn-Kz; Wed, 18 Aug 2004 13:21:10 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 18 Aug 2004 13:20:46 +0200 (CEST) Received: from imap.gmx.net ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1BxOUG-0000az-B1 for linux-crypto@nl.linux.org; Wed, 18 Aug 2004 13:20:12 +0200 Received: (qmail 29649 invoked by uid 0); 18 Aug 2004 11:19:53 -0000 Received: from 141.99.2.23 by www47.gmx.net with HTTP; Wed, 18