From linux-crypto-bounce@nl.linux.org Fri Oct 01 21:09:31 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CDSmE-0004Pr-Ot; Fri, 01 Oct 2004 21:09:10 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 01 Oct 2004 20:58:34 +0200 (CEST) Received: from [67.43.4.157] (helo=host.ufohosting.co.uk) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CDSbq-0004PP-UV for linux-crypto@nl.linux.org; Fri, 01 Oct 2004 20:58:27 +0200 Received: from nobody by host.ufohosting.co.uk with local (Exim 4.42) id 1CDSbo-0006nt-Un for linux-crypto@nl.linux.org; Fri, 01 Oct 2004 19:58:24 +0100 To: linux-crypto@nl.linux.org Subject: reality cam From: "toecutter@toecuttersden.com" Message-ID: <200410011824.fd9866926571@67.43.4.157> X-Priority: 3 X-Mailer: vBulletin Mail via PHP Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Date: Fri, 01 Oct 2004 19:58:24 +0100 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - host.ufohosting.co.uk X-AntiAbuse: Original Domain - nl.linux.org X-AntiAbuse: Originator/Caller UID/GID - [99 32004] / [47 12] X-AntiAbuse: Sender Address Domain - toecuttersden.com X-Source: X-Source-Args: X-Source-Dir: Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,NORMAL_HTTP_TO_IP autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: toecutter@toecuttersden.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto http://67.43.4.157/showthread.php?t=97189 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Oct 01 21:26:51 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CDT3E-0008FO-QI; Fri, 01 Oct 2004 21:26:44 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 01 Oct 2004 21:26:08 +0200 (CEST) Received: from sasami.anime.net ([207.109.251.120]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CDT2Y-0008Ei-E7 for linux-crypto@nl.linux.org; Fri, 01 Oct 2004 21:26:02 +0200 Received: from localhost (goemon@localhost) by sasami.anime.net (8.11.6/8.11.6) with ESMTP id i91JPwM28578 for ; Fri, 1 Oct 2004 12:25:58 -0700 X-Antispam-Origin-Id: c4dc35da7d5d290438c6d6bdb17308d1 Date: Fri, 1 Oct 2004 12:25:58 -0700 (PDT) From: Dan Hollis To: linux-crypto@nl.linux.org Subject: Re: reality cam In-Reply-To: <200410011824.fd9866926571@67.43.4.157> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Greylist: Message not sent from an IPv4 address, not delayed by milter-greylist-1.3.8 (sasami.anime.net [0.0.0.0]); Fri, 01 Oct 2004 12:25:58 -0700 (PDT) Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: goemon@anime.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On Fri, 1 Oct 2004, toecutter@toecuttersden.com wrote: > [... spam ...] needless to say, toecuttersden.com are well known spammers and should be blocked _everywhere_. -Dan - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 04 21:29:30 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CEYWQ-00011U-UF; Mon, 04 Oct 2004 21:29:22 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Oct 2004 21:27:22 +0200 (CEST) Received: from pop.gmx.net ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CEYUI-00010X-B9 for linux-crypto@mail.nl.linux.org; Mon, 04 Oct 2004 21:27:10 +0200 Received: (qmail 17885 invoked by uid 65534); 4 Oct 2004 19:26:59 -0000 Received: from fulcrum.ghb.fh-furtwangen.de (EHLO [141.28.228.124]) (141.28.228.124) by mail.gmx.net (mp021) with SMTP; 04 Oct 2004 21:26:59 +0200 X-Authenticated: #20090072 Message-ID: <4161A3CC.90606@gmx.de> Date: Mon, 04 Oct 2004 21:26:04 +0200 From: Jens Stein User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-AT; rv:1.7) Gecko/20040514 X-Accept-Language: de, en-us, en MIME-Version: 1.0 To: linux-crypto@mail.nl.linux.org Subject: Failure compiling loop.ko with loop-aes Makefile Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: KMorning@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi ! I am new to loop-aes and an advanced linux user - guess what that means. I am using Mandrake Linux v10.0 Official with a new customly compiled kernel Ver. 2.6.8. Block Device "Loop" is deactivated in .config. I downloaded a) util-linux-2.12a b) aes-loop-2.0g I chose old Package Versions, because the version of the util-linux package matches the util-linux patch shipped with aes-loop-2.0g (util-linux-2.12a.diff) correctly. Compiling (a) works fine, but doing "make" in the base dir of (b) fails. Work Dir (pwd): loop-aes-2.12a Command a) make Ouput: --- cd /lib/modules/2.6.8/build && make SUBDIRS=/root/download/loop-AES-v2.0g modules Q='@cd /root/download/loop-AES-v2.0g && if [ "$@" = "/root/download/loop-AES-v2.0g" ]; then make modules; fi; # ' make[1]: Entering directory `/usr/src/linux-2.6.8' Building modules, stage 2. make[1]: Leaving directory `/usr/src/linux-2.6.8' --- Command b) make LINUX_SOURCE=/usr/linux-2.6.8 same as with make LINUX_SOURCE=/usr/linux-2.6.8 KBUILD_OUTPUT=/lib/modules/2.6.8 Output: --- cd /usr/src/linux-2.6.8 && make SUBDIRS=/root/download/loop-AES-v2.0g modules Q='@cd /root/download/loop-AES-v2.0g && if [ "$@" = "/root/download/loop-AES-v2.0g" ]; then make modules; fi; # ' /usr/src/linux-2.6.8/Makefile:415: .config: No such file or directory make[1]: Entering directory `/usr/src/linux-2.6.8' Building modules, stage 2. make[1]: Leaving directory `/usr/src/linux-2.6.8' --- "make tests" fails. I cannot find a compiled "loop.ko" (loop.o) in /lib/modules/2.6.8/kernel/drivers/block I tried "find /lib/modules/2.6.8/ -name 'loop*'", but got not positive result. I have successfully used cryptoloop in single-key mode before. My goal is to use aes-loop in multi-key loop as comfortably and verbosly described in the README file of aes-loop. I would be pleased if someone could give me a hint how to fix the Makefile appropriately, however I consider it to be valid and complete or instruct me what parameters to pass to make to compile aes-loop successfully. Cheers Jens Stein - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 05 19:01:50 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CEsgq-0006ia-Bo; Tue, 05 Oct 2004 19:01:28 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 05 Oct 2004 18:54:33 +0200 (CEST) Received: from mato.luukku.com ([193.209.83.251]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CEsa2-0006hx-6L for linux-crypto@mail.nl.linux.org; Tue, 05 Oct 2004 18:54:26 +0200 Received: from localhost (mta3-o.i.luukku.com [10.0.1.132]) by mta3-o.i.luukku.com (Postfix) with ESMTP id 2C03BFF875; Tue, 5 Oct 2004 19:54:15 +0300 (EEST) Received: from users.sourceforge.net (4d12.yhteys.mtv3.fi [62.237.18.77]) by mato.luukku.com (Postfix) with ESMTP id 7FB9322EE8C; Tue, 5 Oct 2004 19:54:14 +0300 (EEST) Message-ID: <4162D1B9.7B5820F1@users.sourceforge.net> Date: Tue, 05 Oct 2004 19:54:17 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: Jens Stein Cc: linux-crypto@mail.nl.linux.org Subject: Re: Failure compiling loop.ko with loop-aes Makefile References: <4161A3CC.90606@gmx.de> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Jens Stein wrote: > I downloaded > a) util-linux-2.12a > b) aes-loop-2.0g > > I chose old Package Versions, because the version of the util-linux > package matches the util-linux patch shipped with aes-loop-2.0g > (util-linux-2.12a.diff) correctly. You can use losetup/mount/swapon from util-linux-2.12a with loop.ko from latest loop-AES-v2.2b package. > Compiling (a) works fine, but doing "make" in the base dir of (b) fails. This Makefile incompatibility should be fixed in loop-AES-v2.2b -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Oct 09 21:06:16 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGMXd-0004hT-FJ; Sat, 09 Oct 2004 21:06:05 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 09 Oct 2004 21:03:11 +0200 (CEST) Received: from web51807.mail.yahoo.com ([206.190.38.238]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CGMUF-0004ar-JW for linux-crypto@nl.linux.org; Sat, 09 Oct 2004 21:02:35 +0200 Message-ID: <20041009190008.42792.qmail@web51807.mail.yahoo.com> Received: from [82.64.209.217] by web51807.mail.yahoo.com via HTTP; Sat, 09 Oct 2004 21:00:08 CEST Date: Sat, 9 Oct 2004 21:00:08 +0200 (CEST) From: zorro Subject: burn 4.2G encrypted ext2fs -->(DVD) ? To: linux-crypto@nl.linux.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sockoban@yahoo.fr Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto hello any idea how to burn 4.2G encrypted ext2fs image on DVD ? like "cdrecord dev=0,0,0 -v -data image.ext2" with 700M cdrom. i have cdrtools-2.00 & dvd+rw-tools-5.19 is not possible with growisofs ? or other ? thanx :) Vous manquez d’espace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour dialoguer instantanément avec vos amis. A télécharger gratuitement sur http://fr.messenger.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Oct 09 22:18:00 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGNf4-0002wy-17; Sat, 09 Oct 2004 22:17:50 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 09 Oct 2004 22:13:01 +0200 (CEST) Received: from pdbn-d9bb9e94.pool.mediaways.net ([217.187.158.148] helo=citd.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGNZs-0002pu-M8 for linux-crypto@nl.linux.org; Sat, 09 Oct 2004 22:12:28 +0200 Received: from korben.citd.de (localhost [127.0.0.1]) by citd.de (8.12.3/8.12.2/SuSE Linux 0.6) with ESMTP id i99KAO5p032565; Sat, 9 Oct 2004 22:10:24 +0200 Received: (from ms@localhost) by korben.citd.de (8.12.3/8.12.3/Submit) id i99KAODu032564; Sat, 9 Oct 2004 22:10:24 +0200 Date: Sat, 9 Oct 2004 22:10:23 +0200 From: Matthias Schniedermeyer To: zorro Cc: linux-crypto@nl.linux.org Subject: Re: burn 4.2G encrypted ext2fs -->(DVD) ? Message-ID: <20041009201023.GB32391@citd.de> References: <20041009190008.42792.qmail@web51807.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041009190008.42792.qmail@web51807.mail.yahoo.com> User-Agent: Mutt/1.3.27i Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ms@citd.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On 09.10.2004 21:00, zorro wrote: > hello > any idea how to burn 4.2G encrypted ext2fs image on > DVD ? like > "cdrecord dev=0,0,0 -v -data image.ext2" with 700M > cdrom. > i have cdrtools-2.00 & dvd+rw-tools-5.19 Just as you said. Only that you need the (binary) ProDVD-Version of cdrecord. ftp.berlios.de/pub/cdrecord/ProDVD Bis denn -- Real Programmers consider "what you see is what you get" to be just as bad a concept in Text Editors as it is in women. No, the Real Programmer wants a "you asked for it, you got it" text editor -- complicated, cryptic, powerful, unforgiving, dangerous. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 10 03:58:16 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGSwB-0002eo-6T; Sun, 10 Oct 2004 03:55:51 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 10 Oct 2004 03:48:58 +0200 (CEST) Received: from web51803.mail.yahoo.com ([206.190.38.234]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CGSoq-0002Wp-CC for linux-crypto@nl.linux.org; Sun, 10 Oct 2004 03:48:16 +0200 Message-ID: <20041010014551.95574.qmail@web51803.mail.yahoo.com> Received: from [82.64.209.217] by web51803.mail.yahoo.com via HTTP; Sun, 10 Oct 2004 03:45:51 CEST Date: Sun, 10 Oct 2004 03:45:51 +0200 (CEST) From: zorro Subject: Re: burn 4.2G encrypted ext2fs -->(DVD) ? To: linux-crypto@nl.linux.org In-Reply-To: <20041009201023.GB32391@citd.de> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sockoban@yahoo.fr Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto root@zorro:/home/zorro# cdrecord-prodvd-2.01b31-i686-pc-linux-gnu -dao dev=0,0,0 -V /home/image.ext2 Cdrecord-ProDVD-Clone 2.01b31 (i686-pc-linux-gnu) Copyright (C) 1995-2004 Jörg Schilling Unlocked features: Limited features: scsidev: '0,0,0' scsibus: 0 target: 0 lun: 0 Linux sg driver version: 3.1.25 Using libscg version 'schily-0.8'. dvdrecord: Warning: controller returns wrong size for CD capabilities page. Device type : Removable CD-ROM Version : 0 Response Format: 1 Vendor_info : 'ATAPI ' Identifikation : 'DVD DUAL 4XMax ' Revision : '2.50' Device seems to be: Generic mmc2 DVD-R/DVD-RW. dvdrecord: Warning: controller returns wrong size for CD capabilities page. dvdrecord: Warning: controller returns wrong size for CD capabilities page. dvdrecord: Warning: controller returns wrong size for CD capabilities page. dvdrecord: This version of cdrecord limits DVD-R/DVD-RW support to -dummy or 1 GB real. dvdrecord: If you need full DVD-R/DVD-RW support, ask the Author for cdrecord-ProDVD. dvdrecord: Free test versions and free keys for personal use are at ftp://ftp.berlios.de/pub/cdrecord/ProDVD/ dvdrecord: Warning: controller returns wrong size for CD capabilities page. Using generic SCSI-3/mmc-3 DVD+R driver (mmc_dvdplusr). Driver flags : DVD MMC-3 SWABAUDIO BURNFREE Supported modes: PACKET SAO WARNING: Phys disk size 2295104 differs from rzone size 2201600! Prerecorded disk? WARNING: Phys start: 196608 Phys end 2491711 dvdrecord: Disk image size too large (max. 1 GB in demo mode) not work ): Vous manquez d’espace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour dialoguer instantanément avec vos amis. A télécharger gratuitement sur http://fr.messenger.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 10 10:54:58 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGZTA-0000m4-UX; Sun, 10 Oct 2004 10:54:20 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 10 Oct 2004 10:39:25 +0200 (CEST) Received: from blfd-d9bb97c9.pool.mediaways.net ([217.187.151.201] helo=citd.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGZED-0000cq-D7 for linux-crypto@nl.linux.org; Sun, 10 Oct 2004 10:38:53 +0200 Received: from korben.citd.de (localhost [127.0.0.1]) by citd.de (8.12.3/8.12.2/SuSE Linux 0.6) with ESMTP id i9A8Ze5p003522; Sun, 10 Oct 2004 10:35:40 +0200 Received: (from ms@localhost) by korben.citd.de (8.12.3/8.12.3/Submit) id i9A8ZehD003521; Sun, 10 Oct 2004 10:35:40 +0200 Date: Sun, 10 Oct 2004 10:35:40 +0200 From: Matthias Schniedermeyer To: zorro Cc: linux-crypto@nl.linux.org Subject: Re: burn 4.2G encrypted ext2fs -->(DVD) ? Message-ID: <20041010083540.GA3499@citd.de> References: <20041009201023.GB32391@citd.de> <20041010014551.95574.qmail@web51803.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041010014551.95574.qmail@web51803.mail.yahoo.com> User-Agent: Mutt/1.3.27i Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ms@citd.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On 10.10.2004 03:45, zorro wrote: > > root@zorro:/home/zorro# > > not work ): You haven't read the readme. Bis denn -- Real Programmers consider "what you see is what you get" to be just as bad a concept in Text Editors as it is in women. No, the Real Programmer wants a "you asked for it, you got it" text editor -- complicated, cryptic, powerful, unforgiving, dangerous. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 10 11:01:51 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGZaK-0001lG-Tm; Sun, 10 Oct 2004 11:01:44 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 10 Oct 2004 11:01:30 +0200 (CEST) Received: from gw02.mail.saunalahti.fi ([195.197.172.116]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGZZy-0001kw-O0 for linux-crypto@nl.linux.org; Sun, 10 Oct 2004 11:01:22 +0200 Received: from retiisi.dyndns.org (MYCXCIV.dsl.saunalahti.fi [62.142.133.194]) by gw02.mail.saunalahti.fi (Postfix) with ESMTP id A64582706F; Sun, 10 Oct 2004 12:01:19 +0300 (EEST) Received: from [192.168.1.1] (masiina.localdomain [192.168.1.1]) by retiisi.dyndns.org (Postfix) with ESMTP id 088502F37; Sun, 10 Oct 2004 12:01:19 +0300 (EEST) Message-ID: <4168FA5E.6080101@saunalahti.fi> Date: Sun, 10 Oct 2004 12:01:18 +0300 From: Sakari Ailus User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.2) Gecko/20040803 X-Accept-Language: fi, en-gb, en, sv, fr MIME-Version: 1.0 To: zorro Cc: linux-crypto@nl.linux.org Subject: Re: burn 4.2G encrypted ext2fs -->(DVD) ? References: <20041010014551.95574.qmail@web51803.mail.yahoo.com> In-Reply-To: <20041010014551.95574.qmail@web51803.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sakari.ailus@saunalahti.fi Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto zorro wrote: > dvdrecord: Disk image size too large (max. 1 GB in > demo mode) (I guess there would have been more appropriate lists/newsgroups for this question...) You had dvd+rw-tools installed, hadn't you? Its man page says: --- To use growisofs to write a pre-mastered ISO-image to a DVD: growisofs -dvd-compat -Z /dev/dvd=image.iso --- It says "ISO-image" but I'd wonder if it would get upset about any other data. -- Sakari Ailus sakari.ailus@saunalahti.fi - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 10 14:30:35 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGcq1-0001eA-JM; Sun, 10 Oct 2004 14:30:09 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 10 Oct 2004 14:29:06 +0200 (CEST) Received: from web51801.mail.yahoo.com ([206.190.38.232]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CGcoq-0001dP-0W for linux-crypto@nl.linux.org; Sun, 10 Oct 2004 14:28:56 +0200 Message-ID: <20041010122844.51229.qmail@web51801.mail.yahoo.com> Received: from [82.64.209.217] by web51801.mail.yahoo.com via HTTP; Sun, 10 Oct 2004 14:28:44 CEST Date: Sun, 10 Oct 2004 14:28:44 +0200 (CEST) From: zorro Subject: Re: burn 4.2G encrypted ext2fs -->(DVD) ? To: linux-crypto@nl.linux.org In-Reply-To: <4168FA5E.6080101@saunalahti.fi> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sockoban@yahoo.fr Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --- Sakari Ailus a écrit : > zorro wrote: > > dvdrecord: Disk image size too large (max. 1 GB in > > demo mode) > > (I guess there would have been more appropriate > lists/newsgroups for > this question...) You had dvd+rw-tools installed, > hadn't you? Its man > page says: > > --- > To use growisofs to write a pre-mastered > ISO-image to a > DVD: > > growisofs -dvd-compat -Z > /dev/dvd=image.iso > --- > > It says "ISO-image" but I'd wonder if it would get > upset about any other > data. > > -- > Sakari Ailus > sakari.ailus@saunalahti.fi > > - > Linux-crypto: cryptography in and on the Linux > system > Archive: > http://mail.nl.linux.org/linux-crypto/ > yeah..! work fine :) thanx Sakari you are angel ! and FUCK prodvd.. !!! Vous manquez d’espace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour dialoguer instantanément avec vos amis. A télécharger gratuitement sur http://fr.messenger.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 10 22:03:57 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGjpT-0000o6-Lw; Sun, 10 Oct 2004 21:58:03 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 10 Oct 2004 21:53:38 +0200 (CEST) Received: from exchange.cableone.net ([24.116.1.68] helo=cherryhills.corp.cableone.net) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGjkz-0000kk-63 for linux-crypto@nl.linux.org; Sun, 10 Oct 2004 21:53:25 +0200 Received: from badlands.corp.cableone.net ([172.30.1.23]) by cherryhills.corp.cableone.net with Microsoft SMTPSVC(6.0.3790.80); Sun, 10 Oct 2004 12:51:46 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C4AF02.92E74FF3" Subject: Determining algorithm used Date: Sun, 10 Oct 2004 12:52:29 -0700 Message-ID: <6ED785589EF5F94A8B3A9876E18836CA0101F43D@badlands.corp.cableone.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Determining algorithm used Thread-Index: AcSvAqzNEPg9p44iT3GTrpJk/dfaug== From: "Pfingstmann, Jason" To: X-OriginalArrivalTime: 10 Oct 2004 19:51:46.0369 (UTC) FILETIME=[92F74310:01C4AF02] Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,HTML_MESSAGE autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Jason.Pfingstmann@cableone.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format. ------_=_NextPart_001_01C4AF02.92E74FF3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I have an old encrypted file with a .cpt extension. I created this file using an old version of SuSE if memory serves. I am trying to figure out how to figure out what utility/algorithm was used to create this file so I can take some stabs at decrypting it. The file in question was a tar.gz file that was encrypted using some console based encryption program (with a command like "encrypt filename.ext" which produces "filename.ext.cpt"), which may help determine this. Is there maybe a utility that would allow me to put in a password and have it try to decrypt using all known algorithms and perhaps show the first few lines from the decrypted file (so I can determine if one looks like a gz file - although I haven't looked to see if it would have a recognizable header)? =20 I'm just trying to figure out how to proceed at this point, of if I can forget getting the data contained in this file back. =20 -Jason Pfingstmann ------_=_NextPart_001_01C4AF02.92E74FF3 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
I have = an old=20 encrypted file with a .cpt extension.  I created this file using an = old=20 version of SuSE if memory serves.  I am trying to figure out how to = figure=20 out what utility/algorithm was used to create this file so I can take = some stabs=20 at decrypting it.  The file in question was a tar.gz file that = was=20 encrypted using some console based encryption program (with a command = like=20 "encrypt filename.ext" which produces "filename.ext.cpt"), which may = help=20 determine this. Is there maybe a utility that would allow me to put in a = password and have it try to decrypt using all known algorithms and = perhaps show=20 the first few lines from the decrypted file (so I can determine if one = looks=20 like a gz file - although I haven't looked to see if it would have a=20 recognizable header)?
 
I'm = just trying to=20 figure out how to proceed at this point, of if I can forget getting the = data=20 contained in this file back.
 
-Jason = Pfingstmann
------_=_NextPart_001_01C4AF02.92E74FF3-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 11 14:23:22 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGzCd-0004fq-3T; Mon, 11 Oct 2004 14:22:59 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 11 Oct 2004 14:15:53 +0200 (CEST) Received: from ns1.g-housing.de ([62.75.136.201] helo=mail.g-house.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CGz5Y-0004fD-Kf for linux-crypto@nl.linux.org; Mon, 11 Oct 2004 14:15:40 +0200 Received: from g12be.g.pppool.de ([80.185.18.190] helo=[192.168.1.11]) by mail.g-house.de with asmtp (TLS-1.0:DHE_RSA_AES_128_CBC_SHA:16) (Exim 4.34) id 1CGz3D-0008NZ-7C; Mon, 11 Oct 2004 14:13:15 +0200 Message-ID: <416A795B.2090707@g-house.de> Date: Mon, 11 Oct 2004 14:15:23 +0200 From: Christian Kujau User-Agent: Mozilla Thunderbird 0.8 (X11/20040926) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Pfingstmann, Jason" CC: linux-crypto@nl.linux.org Subject: Re: Determining algorithm used References: <6ED785589EF5F94A8B3A9876E18836CA0101F43D@badlands.corp.cableone.net> In-Reply-To: <6ED785589EF5F94A8B3A9876E18836CA0101F43D@badlands.corp.cableone.net> X-Enigmail-Version: 0.86.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: evil@g-house.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pfingstmann, Jason wrote: > I have an old encrypted file with a .cpt extension. I created this file > using an old version of SuSE if memory serves. I am trying to figure > out how to figure out what utility/algorithm was used to create this > file so I can take some stabs at decrypting it. The file in question > was a tar.gz file that was encrypted using some console based encryption > program (with a command like "encrypt filename.ext" which produces > "filename.ext.cpt"), which may help determine this. Is there maybe a well, googling for "encrypt .cpt" reveals, that there is a program called "ccrypt" which is ncrypting files and adding .cpt to the filename: http://quasar.mathstat.uottawa.ca/~selinger/ccrypt/ the website says "ccrypt is based on the Rijndael cipher" so *if* ccrypt was used to encrypt your file (crawl old SuSE distros for that program), then we should have the algorithm. > utility that would allow me to put in a password and have it try to > decrypt using all known algorithms and perhaps show the first few lines > from the decrypted file (so I can determine if one looks like a gz file the plaintext, i.e. the "gz" contents should only be available when you have the correct passphrase though...that's why it's encrypted ;-) Christian. - -- BOFH excuse #383: Your processor has taken a ride to Heaven's Gate on the UFO behind Hale-Bopp's comet. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBanlb+A7rjkF8z0wRAjrpAJ9CtEBk/+EawIYppQr9fHKFywFGrQCeJWd4 iFeQTh56lgXcSp+xoLJx9Kc= =lHrz -----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 12 00:53:31 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CH920-0003cg-Fw; Tue, 12 Oct 2004 00:52:40 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 12 Oct 2004 00:49:12 +0200 (CEST) Received: from revere.aoc.nrao.edu ([146.88.1.15]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CH8yT-0003c5-RH for linux-crypto@nl.linux.org; Tue, 12 Oct 2004 00:49:01 +0200 Received: from [146.88.33.242] (samsara.aoc.nrao.edu [146.88.33.242]) by revere.aoc.nrao.edu (8.11.6/8.11.6) with ESMTP id i9BMm7321173; Mon, 11 Oct 2004 16:48:07 -0600 In-Reply-To: <20040819092615.GE14162@vnl.com> References: <20040812130123.2f1f466a@patryk.uwm.edu.pl> <20040819092615.GE14162@vnl.com> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <9DD135BA-1BD7-11D9-A878-000A95C88606@aoc.nrao.edu> Content-Transfer-Encoding: 7bit Cc: Boyd Waters , patryk , Dale Amon From: Boyd Waters Subject: Re: Crypto API history Date: Mon, 11 Oct 2004 16:48:06 -0600 To: linux-crypto@nl.linux.org X-Mailer: Apple Mail (2.619) X-MailScanner-Information: Please contact postmaster@aoc.nrao.edu for more information X-MailScanner: Found to be clean X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-6.7, required 7, BAYES_01 -5.40, EMAIL_ATTRIBUTION -0.50, IN_REP_TO -0.37, QUOTED_EMAIL_TEXT -0.38, REFERENCES -0.00, REPLY_WITH_QUOTES 0.00, USER_AGENT_APPLEMAIL 0.00) Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: bwaters+mac@aoc.nrao.edu Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is an old thread, but I found the mailing list on (cryptoapi) linux crypto development: http://lists.logix.cz/mailman/listinfo/cryptoapi Recent discussions focused on more use of sysfs for core linux drivers, etc. Developers-only, I presume. Even at this late date, I am not certain how the cryptoapi discussed on that mailing list relates to mainline kernel development. It seems to be the modern equivalent of kerneli.org work. On Aug 19, 2004, at 3:26 AM, Dale Amon wrote: > On Wed, Aug 18, 2004 at 01:29:58PM -0600, Boyd Waters wrote: >> The list to which you posted this query generally deals with Jari >> Ruusu's loop-aes > > Not really. It's a general list. Just hasn't been a lot of > chatter on cryptoapi here lately. Used to be a lot more. > >> You want to ask the CryptoAPI people your question; try sending mail >> to >> cryptoapi-devel@kerneli.org > > That's the developer specific list that was spun off > to focus strictly on the kernel api... although it > does also handle the non-kernel side. > > Hasn't been a lot of discussion lately. I think Herbert > has been very busy with a new job and hasn't stuck his > head up in a long time. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Oct 15 04:56:03 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIIG4-0003Ol-7x; Fri, 15 Oct 2004 04:55:56 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 15 Oct 2004 04:54:32 +0200 (CEST) Received: from virgo.sdc.org ([209.155.42.1]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIIEV-0003Np-27 for linux-crypto@nl.linux.org; Fri, 15 Oct 2004 04:54:19 +0200 Received: from [10.0.1.5] (leila [209.155.156.3]) by virgo.sdc.org (8.12.8/8.12.8) with ESMTP id i9F2s2CD030028; Thu, 14 Oct 2004 20:54:03 -0600 In-Reply-To: <4149DB9B.5080701@saunalahti.fi> References: <4149DB9B.5080701@saunalahti.fi> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <78470622-1E55-11D9-BD69-000A95C88606@aoc.nrao.edu> Content-Transfer-Encoding: 7bit Cc: linux-crypto@nl.linux.org From: Boyd Waters Subject: Re: PPDD and Linux 2.6.8.1 Date: Thu, 14 Oct 2004 20:54:02 -0600 To: Sakari Ailus X-Mailer: Apple Mail (2.619) X-Virus-Scanned: ClamAV 0.80rc3/515/Tue Oct 5 01:51:08 2004 clamav-milter version 0.80c on virgo.sdc.org X-Virus-Status: Clean Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: bwaters+mac@aoc.nrao.edu Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On Sep 16, 2004, at 12:29 PM, Sakari Ailus wrote: > Okay, the same patch works with 2.6.8.1 also. No changes to code > whatsoever. Only some changes relating to the kernel configuration > system were made. Of course, it might eat your hard disk for lunch. Can you explain the advantages of PPDD over the mainline kernel "cryptoloop" (loopback block device encryption via cryptoapi) ? I experimented with crypto-loop using blowfish or twofish, and it seems quite stable for device-backed loops. Jari Ruusu has raised concerns about encryption key re-use with it, so I'm trying loop-aes now... A short description of how PPDD is different would be interesting! Thanks! ~ boyd Boyd Waters Socorro, New Mexico - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Oct 16 10:27:42 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIjs1-0004Un-Jf; Sat, 16 Oct 2004 10:24:57 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 16 Oct 2004 10:23:05 +0200 (CEST) Received: from [67.43.4.157] (helo=host.ufohosting.co.uk) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIjq8-0004UL-M9 for linux-crypto@nl.linux.org; Sat, 16 Oct 2004 10:23:00 +0200 Received: from nobody by host.ufohosting.co.uk with local (Exim 4.42) id 1CIjq3-0003vP-EN for linux-crypto@nl.linux.org; Sat, 16 Oct 2004 09:22:55 +0100 To: linux-crypto@nl.linux.org Subject: dream box From: "support@toecuttersden.com" Message-ID: <200410160855.593c35886109@67.43.4.157> X-Priority: 3 X-Mailer: vBulletin Mail via PHP Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Date: Sat, 16 Oct 2004 09:22:55 +0100 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - host.ufohosting.co.uk X-AntiAbuse: Original Domain - nl.linux.org X-AntiAbuse: Originator/Caller UID/GID - [99 32004] / [47 12] X-AntiAbuse: Sender Address Domain - toecuttersden.com X-Source: X-Source-Args: X-Source-Dir: Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,NORMAL_HTTP_TO_IP autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: support@toecuttersden.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto http://67.43.4.157/showthread.php?t=98904 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Oct 16 12:35:13 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIltc-0004tk-SW; Sat, 16 Oct 2004 12:34:44 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 16 Oct 2004 12:25:34 +0200 (CEST) Received: from gw01.mail.saunalahti.fi ([195.197.172.115]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIlk6-0004oC-AW for linux-crypto@nl.linux.org; Sat, 16 Oct 2004 12:24:54 +0200 Received: from retiisi.dyndns.org (MYCXCIV.dsl.saunalahti.fi [62.142.133.194]) by gw01.mail.saunalahti.fi (Postfix) with ESMTP id D4C1360CF1; Sat, 16 Oct 2004 13:23:10 +0300 (EEST) Received: from [192.168.1.1] (masiina.localdomain [192.168.1.1]) by retiisi.dyndns.org (Postfix) with ESMTP id 96ECD7787; Sat, 16 Oct 2004 13:23:09 +0300 (EEST) Message-ID: <4170F68D.1000705@saunalahti.fi> Date: Sat, 16 Oct 2004 13:23:09 +0300 From: Sakari Ailus User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.2) Gecko/20040803 X-Accept-Language: fi, en-gb, en, sv, fr MIME-Version: 1.0 To: Boyd Waters Cc: linux-crypto@nl.linux.org Subject: Re: PPDD and Linux 2.6.8.1 References: <4149DB9B.5080701@saunalahti.fi> <78470622-1E55-11D9-BD69-000A95C88606@aoc.nrao.edu> In-Reply-To: <78470622-1E55-11D9-BD69-000A95C88606@aoc.nrao.edu> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sakari.ailus@saunalahti.fi Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Boyd Waters wrote: > Can you explain the advantages of PPDD over the mainline kernel > "cryptoloop" (loopback block device encryption via cryptoapi) ? It might not be that mainline soon: I don't know if something has happened since, but it seems that at least 2.6.9pre4 doesn't yet remove cryptoloop. PPDD depends on cryptoloop, so it might break again soon. X) Quick (and possibly dirty) solution would be to kick cryptoloop back, and provide a patch as for 2.4 series. I think PPDD does fairly well what it should do. Most of the stuff, like key management, are tightly integrated. This is a problem if it doesn't offer exactly what you want, and at least then loop-AES is a better choice. The solutions currently in kernel, like cryptoloop, don't seem secure enough for many uses. Try searching Google for e.g. "cryptoloop security weaknesses". I guess Jari has said something about security regarding cryptoloop etc.: > I experimented with crypto-loop using blowfish or twofish, and it seems > quite stable for device-backed loops. Jari Ruusu has raised concerns > about encryption key re-use with it, so I'm trying loop-aes now... > > A short description of how PPDD is different would be interesting! You'll find something from the above URL. More specific description on how PPDD works can be found in Allan Latham's original PPDD package. -- Sakari Ailus sakari.ailus@saunalahti.fi - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Oct 16 14:26:45 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIndu-0005Dh-F7; Sat, 16 Oct 2004 14:26:38 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 16 Oct 2004 14:25:43 +0200 (CEST) Received: from [67.43.4.157] (helo=host.ufohosting.co.uk) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CIncQ-00057h-Kn for linux-crypto@nl.linux.org; Sat, 16 Oct 2004 14:25:06 +0200 Received: from nobody by host.ufohosting.co.uk with local (Exim 4.42) id 1CInar-0005fD-F6 for linux-crypto@nl.linux.org; Sat, 16 Oct 2004 13:23:29 +0100 To: linux-crypto@nl.linux.org Subject: the den From: "pacific@pacificmarine.co.uk" Message-ID: <200410161229.2a3337827612@67.43.4.157> X-Priority: 3 X-Mailer: vBulletin Mail via PHP Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Date: Sat, 16 Oct 2004 13:23:29 +0100 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - host.ufohosting.co.uk X-AntiAbuse: Original Domain - nl.linux.org X-AntiAbuse: Originator/Caller UID/GID - [99 32004] / [47 12] X-AntiAbuse: Sender Address Domain - toecuttersden.com X-Source: X-Source-Args: X-Source-Dir: Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,NORMAL_HTTP_TO_IP autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: pacific@pacificmarine.co.uk Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto http://67.43.4.157/showthread.php?t=98998 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 17 21:59:16 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJHBE-0002St-HV; Sun, 17 Oct 2004 21:59:00 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 17 Oct 2004 21:57:25 +0200 (CEST) Received: from pc-102.chomiczowka.waw.pl ([195.136.32.102] helo=kuba.forest.one.pl) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJH9b-0002Pr-Jc for linux-crypto@nl.linux.org; Sun, 17 Oct 2004 21:57:19 +0200 Received: from klapuch.forest.one.pl (klapuch.forest.one.pl [192.168.1.8]) by kuba.forest.one.pl (Postfix) with ESMTP id 4CFA81B803 for ; Sun, 17 Oct 2004 21:56:05 +0200 (CEST) From: majek04 Reply-To: majek@forest.one.pl To: linux-crypto@nl.linux.org Subject: journaling file system Date: Sun, 17 Oct 2004 21:56:10 +0200 User-Agent: KMail/1.7 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200410172156.10165.majek@forest.one.pl> Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,RCVD_IN_RFCI autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: majek@forest.one.pl Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi. Is there any possibility of running journaling file system on the top of crypted partition or file? It doesn't have to be loop-aes... Yours sincerely majek04 PS. kernel 2.6 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 02:42:07 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJLag-0007CW-Ra; Mon, 18 Oct 2004 02:41:34 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 02:26:02 +0200 (CEST) Received: from [202.74.166.250] (helo=amristar.com.au) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CJLLA-00076D-5d for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 02:25:32 +0200 Received: (qmail 29197 invoked from network); 18 Oct 2004 00:23:13 -0000 Received: from unknown (HELO elvandar) (127.0.0.1) by 0 with SMTP; 18 Oct 2004 00:23:13 -0000 Received: from localhost ([127.0.0.1]) by elvandar with esmtp (Exim 3.35 #1 (Debian)) id 1CJLIf-0001AV-00; Mon, 18 Oct 2004 08:22:57 +0800 Subject: Re: journaling file system From: Daniel Harvey To: majek@forest.one.pl Cc: linux-crypto@nl.linux.org In-Reply-To: <200410172156.10165.majek@forest.one.pl> References: <200410172156.10165.majek@forest.one.pl> Content-Type: text/plain Message-Id: <1098058977.2736.1.camel@elvandar> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Mon, 18 Oct 2004 08:22:57 +0800 Content-Transfer-Encoding: 7bit X-Sent-Items-Stored: elvandar Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: daniel@amristar.com.au Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto >From Jari's README for loop-aes: 2.2. Use of journaling file systems on loop device ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Don't use a journaling file system on top of file backed loop device. Device backed loop device can be used with journaling file systems as device backed loops guarantee that writes reach disk platters in order required by journaling file system (write caching must be disabled on the disk drive, of course). With file backed loop devices, correct write ordering may extend only to page cache (which resides in RAM) of underlying file system. VM can write such pages to disk in any order it wishes, and thus break write order expectation of journaling file system. Daniel. On Mon, 2004-10-18 at 03:56, majek04 wrote: > Hi. > > Is there any possibility of running journaling file system on the top of > crypted partition or file? It doesn't have to be loop-aes... > > Yours sincerely > majek04 > > PS. kernel 2.6 > > > - > Linux-crypto: cryptography in and on the Linux system > Archive: http://mail.nl.linux.org/linux-crypto/ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 06:40:13 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJPAN-0000CU-U5; Mon, 18 Oct 2004 06:30:39 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 06:16:53 +0200 (CEST) Received: from pc-102.chomiczowka.waw.pl ([195.136.32.102] helo=kuba.forest.one.pl) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJOwQ-00001T-5c for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 06:16:14 +0200 Received: from klapuch.forest.one.pl (klapuch.forest.one.pl [192.168.1.8]) by kuba.forest.one.pl (Postfix) with ESMTP id EA6CD1B804 for ; Mon, 18 Oct 2004 06:12:49 +0200 (CEST) From: majek04 Reply-To: majek@forest.one.pl To: linux-crypto@nl.linux.org Subject: Re: journaling file system Date: Mon, 18 Oct 2004 06:12:50 +0200 User-Agent: KMail/1.7 References: <200410172156.10165.majek@forest.one.pl> <1098058977.2736.1.camel@elvandar> In-Reply-To: <1098058977.2736.1.camel@elvandar> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200410180612.50218.majek@forest.one.pl> Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: majek@forest.one.pl Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Yes. I know. But I wonder if there is other patch that can be used with journaling fs. On Monday 18 of October 2004 02:22, Daniel Harvey wrote: > >From Jari's README for loop-aes: > > > 2.2. Use of journaling file systems on loop device > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > Don't use a journaling file system on top of file backed loop device. > Device backed loop device can be used with journaling file systems as > device backed loops guarantee that writes reach disk platters in order > required by journaling file system (write caching must be disabled on > the disk drive, of course). With file backed loop devices, correct write > ordering may extend only to page cache (which resides in RAM) of > underlying file system. VM can write such pages to disk in any order it > wishes, and thus break write order expectation of journaling file > system. > > Daniel. > > On Mon, 2004-10-18 at 03:56, majek04 wrote: > > Hi. > > > > Is there any possibility of running journaling file system on the top of > > crypted partition or file? It doesn't have to be loop-aes... > > > > Yours sincerely > > majek04 > > > > PS. kernel 2.6 > > > > > > - > > Linux-crypto: cryptography in and on the Linux system > > Archive: http://mail.nl.linux.org/linux-crypto/ > > > - > Linux-crypto: cryptography in and on the Linux system > Archive: http://mail.nl.linux.org/linux-crypto/ > > - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 08:53:39 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJROH-0001l7-5q; Mon, 18 Oct 2004 08:53:09 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 08:40:33 +0200 (CEST) Received: from ext-nj2gw-5.online-age.net ([64.14.56.41]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJRBY-0001db-Kc for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 08:40:00 +0200 Received: from int-nj2gw-2.online-age.net (int-nj2gw-2 [3.159.236.66]) by ext-nj2gw-5.online-age.net (8.12.9/8.12.9/990426-RLH) with ESMTP id i9I6bji8009402 for ; Mon, 18 Oct 2004 02:37:46 -0400 (EDT) Received: from cinmlef04.e2k.ad.ge.com (localhost [127.0.0.1]) by int-nj2gw-2.online-age.net (8.12.9/8.12.8/990426-RLH) with ESMTP id i9I6biCk006828 for ; Mon, 18 Oct 2004 02:37:45 -0400 (EDT) Received: from banmlvem02.e2k.ad.ge.com ([3.159.224.39]) by cinmlef04.e2k.ad.ge.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 18 Oct 2004 02:38:25 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: File encryption and compression tool - Help Date: Mon, 18 Oct 2004 12:07:35 +0530 Message-ID: <6F832B0C67025649A27362C04369711706C6EFDC@BANMLVEM02.e2k.ad.ge.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: File encryption and compression tool - Help Thread-Index: AcS03VBScCunb8niSsOzXkjvjtM+2Q== From: "Das, Arijit \(GE Healthcare\)" To: "list" X-OriginalArrivalTime: 18 Oct 2004 06:38:26.0233 (UTC) FILETIME=[1260EA90:01C4B4DD] Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Arijit.Das@med.ge.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi there...I am looking for a simple tool which I can use to encrypt and = compress a file and decompress and decrypt a file in Linux. I can use command line gpg and compress/gzip for it but my = decryption/decompression requirement is that I need to read the = encrypted/compressed file from a ROM and print its contents into console = without creating any temporary files. Basically, I don;t have write = permission to the system....i can only read from it and print into the = console.=20 So, I need a kind of simple C/C++ API which I can use to (de/en)crypt = and (un/)compress byte/char streams.=20 Can anybody share any of his experiances regarding this? Thanks, Arijit - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 16:45:29 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYgo-0004cP-3g; Mon, 18 Oct 2004 16:40:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 16:27:34 +0200 (CEST) Received: from pd9e82867.dip.t-dialin.net ([217.232.40.103] helo=wolfden.dnsalias.net) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYTT-0004RD-J4 for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 16:26:59 +0200 Received: from furrywolf by wolfden.dnsalias.net with local (Exim 4.34) id 1CJYQ8-0000AZ-Ut for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 16:23:33 +0200 Date: Mon, 18 Oct 2004 16:23:32 +0200 From: Mike Dornberger To: linux-crypto@nl.linux.org Subject: Re: File encryption and compression tool - Help Message-ID: <20041018142332.GA393@wolfden.dnsalias.net> Mail-Followup-To: linux-crypto@nl.linux.org References: <6F832B0C67025649A27362C04369711706C6EFDC@BANMLVEM02.e2k.ad.ge.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6F832B0C67025649A27362C04369711706C6EFDC@BANMLVEM02.e2k.ad.ge.com> User-Agent: Mutt/1.5.6+20040722i Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Mike.Dornberger@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi, On Mon, Oct 18, 2004 at 12:07:35PM +0530, Das, Arijit (GE Healthcare) wrote: > Hi there...I am looking for a simple tool which I can use to encrypt and > compress a file and decompress and decrypt a file in Linux. > > I can use command line gpg and compress/gzip for it but my > decryption/decompression requirement is that I need to read the > encrypted/compressed file from a ROM and print its contents into console > without creating any temporary files. Basically, I don;t have write > permission to the system....i can only read from it and print into the > console. hm, someone hasn't read his documentation yet. ;-) Thought of piping? Assume you have secretfile.txt. E.g. (1) $ gzip secretfile.txt (2) $ gpg -c secretfile.txt.gz You get secretfile.txt.gz.gpg On the other box use, e.g. $ gpg --decrypt secretfile.txt.gz.gpg | gunzip | less Or if you first encrypt and then compress (you first did (2) and then (1)): $ gunzip -c secretfile.txt.gpg.gz | gpg --decrypt | less > So, I need a kind of simple C/C++ API which I can use to (de/en)crypt and > (un/)compress byte/char streams. Uhhh, why so complicated? Just use The Power of Shell. HTH, Mike - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 16:45:31 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYgo-0004br-3g; Mon, 18 Oct 2004 16:40:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 16:27:20 +0200 (CEST) Received: from ext-nj2gw-3.online-age.net ([216.35.73.165]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYT7-0004Tp-6V for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 16:26:37 +0200 Received: from int-nj2gw-1.online-age.net (int-nj2gw-1 [3.159.236.65]) by ext-nj2gw-3.online-age.net (8.12.9/8.12.9/990426-RLH) with ESMTP id i9IEOYrW029556 for ; Mon, 18 Oct 2004 10:24:37 -0400 (EDT) Received: from cinmlef05.e2k.ad.ge.com (localhost [127.0.0.1]) by int-nj2gw-1.online-age.net (8.12.9/8.12.8/990426-RLH) with ESMTP id i9IEOXm7013068 for ; Mon, 18 Oct 2004 10:24:34 -0400 (EDT) Received: from banmlvem02.e2k.ad.ge.com ([3.159.224.39]) by cinmlef05.e2k.ad.ge.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 18 Oct 2004 10:24:33 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: File encryption and compression tool - Help Date: Mon, 18 Oct 2004 19:54:36 +0530 Message-ID: <6F832B0C67025649A27362C04369711706CEE81A@BANMLVEM02.e2k.ad.ge.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: File encryption and compression tool - Help Thread-Index: AcS03VBScCunb8niSsOzXkjvjtM+2QAQLkGAAAAgYvA= From: "Das, Arijit \(GE Healthcare\)" To: X-OriginalArrivalTime: 18 Oct 2004 14:24:33.0108 (UTC) FILETIME=[2FEF6140:01C4B51E] Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Arijit.Das@med.ge.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto > Hi....Is it possible to use the "gpg" command anyway to directly = display the contents of the "filename.gpg" file without creating any = temporary file? Someting like cat which reads (here I am looking at = read, decrypt and decompress which is normally done by gpg filename.gpg = command. But this command creates a file in the file system which I = cannot do) the file and displays it.=20 >=20 > Thanks >=20 > -----Original Message----- > From: Das, Arijit (GE Healthcare) =20 > Sent: Mon, October 18, 2004 12:10 PM > To: 'list' > Subject: File encryption and compression tool - Help >=20 > Hi there...I am looking for a simple tool which I can use to encrypt = and compress a file and decompress and decrypt a file in Linux. >=20 > I can use command line gpg and compress/gzip for it but my = decryption/decompression requirement is that I need to read the = encrypted/compressed file from a ROM and print its contents into console = without creating any temporary files. Basically, I don;t have write = permission to the system....i can only read from it and print into the = console.=20 >=20 > So, I need a kind of simple C/C++ API which I can use to (de/en)crypt = and (un/)compress byte/char streams.=20 >=20 > Can anybody share any of his experiances regarding this? >=20 > Thanks, > Arijit - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 18 16:45:36 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYgo-0004bv-3n; Mon, 18 Oct 2004 16:40:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 18 Oct 2004 16:27:21 +0200 (CEST) Received: from ext-ch1gw-3.online-age.net ([216.34.191.37]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJYT6-0004To-HU for linux-crypto@nl.linux.org; Mon, 18 Oct 2004 16:26:36 +0200 Received: from int-ch1gw-3.online-age.net (int-ch1gw-3 [3.159.232.67]) by ext-ch1gw-3.online-age.net (8.12.9/8.12.9/990426-RLH) with ESMTP id i9IEOVbQ018363 for ; Mon, 18 Oct 2004 10:24:32 -0400 (EDT) Received: from cinmlef05.e2k.ad.ge.com (localhost [127.0.0.1]) by int-ch1gw-3.online-age.net (8.12.9/8.12.3/990426-RLH) with ESMTP id i9IEOUu0000183 for ; Mon, 18 Oct 2004 10:24:31 -0400 (EDT) Received: from banmlvem02.e2k.ad.ge.com ([3.159.224.39]) by cinmlef05.e2k.ad.ge.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 18 Oct 2004 10:24:30 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: File encryption and compression tool - Help Date: Mon, 18 Oct 2004 19:53:56 +0530 Message-ID: <6F832B0C67025649A27362C04369711706CEE816@BANMLVEM02.e2k.ad.ge.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: File encryption and compression tool - Help Thread-Index: AcS03VBScCunb8niSsOzXkjvjtM+2QAQLkGA From: "Das, Arijit \(GE Healthcare\)" To: "Das, Arijit \(GE Healthcare\)" , "list" X-OriginalArrivalTime: 18 Oct 2004 14:24:30.0467 (UTC) FILETIME=[2E5C6530:01C4B51E] Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Arijit.Das@med.ge.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi....Is it possible to use the "gpg" command anyway to directly display = the contents of the "filename.gpg" file without creating any temporary = file? Someting like cat which reads (here I am looking at read, decrypt = and decompress which is normally done by gpg filename.gpg command. But = this command creates a file in the file system which I cannot do) the = file and displays it.=20 Thanks > -----Original Message----- > From: Das, Arijit (GE Healthcare) =20 > Sent: Mon, October 18, 2004 12:10 PM > To: 'list' > Subject: File encryption and compression tool - Help >=20 > Hi there...I am looking for a simple tool which I can use to encrypt = and compress a file and decompress and decrypt a file in Linux. >=20 > I can use command line gpg and compress/gzip for it but my = decryption/decompression requirement is that I need to read the = encrypted/compressed file from a ROM and print its contents into console = without creating any temporary files. Basically, I don;t have write = permission to the system....i can only read from it and print into the = console.=20 >=20 > So, I need a kind of simple C/C++ API which I can use to (de/en)crypt = and (un/)compress byte/char streams.=20 >=20 > Can anybody share any of his experiances regarding this? >=20 > Thanks, > Arijit - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 19 17:31:48 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJvwZ-00023A-Fk; Tue, 19 Oct 2004 17:30:35 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 19 Oct 2004 17:25:38 +0200 (CEST) Received: from mail2.sun.ac.za ([146.232.64.14]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJvre-000208-ML for linux-crypto@nl.linux.org; Tue, 19 Oct 2004 17:25:31 +0200 Received: from bach.sun.ac.za ([146.232.49.2]) by mail2.sun.ac.za with esmtp (Exim 4.34) id 1CJv8x-00010g-Bc for linux-crypto@nl.linux.org; Tue, 19 Oct 2004 16:39:19 +0200 Received: from localhost (localhost.localdomain [127.0.0.1]) by bach.sun.ac.za (Postfix) with ESMTP id 86CE31BB5 for ; Tue, 19 Oct 2004 16:39:19 +0200 (SAST) Received: from bach.sun.ac.za ([127.0.0.1]) by localhost (bach.sun.ac.za [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 16818-09 for ; Tue, 19 Oct 2004 16:39:18 +0200 (SAST) Received: from licentia.helderberg.sun.ac.za (licentia.helderberg.sun.ac.za [146.232.185.218]) by bach.sun.ac.za (Postfix) with ESMTP id 54CE016B9 for ; Tue, 19 Oct 2004 16:39:18 +0200 (SAST) From: Jacobus Brink To: linux-crypto@nl.linux.org Subject: Howto for encrypted root? Date: Tue, 19 Oct 2004 16:39:17 +0200 User-Agent: KMail/1.6.2 MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Message-Id: <200410191639.17717.s13877720@bach.sun.ac.za> X-Virus-Scanned: by amavisd-new at bach.sun.ac.za Received-SPF: X-Spam-Status: No, hits=-3.9 required=5.0 tests=BAYES_00,FROM_ENDS_IN_NUMS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: s13877720@bach.sun.ac.za Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto The Cryptoloop HOWTO does not discuss booting from an encrypted root partition. Is there a document along the lines of the Encrypted Root Filesystem HOWTO at http://linuxfromscratch.org/~devine/erfs-howto.html? -- Jacobus Brink ------------- Sed quis custodiet ipsos custodes? - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 19 18:56:02 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJxH5-0007yV-62; Tue, 19 Oct 2004 18:55:51 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 19 Oct 2004 18:55:04 +0200 (CEST) Received: from rly-ip04.mx.aol.com ([64.12.138.8]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJxFg-0007u0-H9 for linux-crypto@nl.linux.org; Tue, 19 Oct 2004 18:54:24 +0200 Received: from smtp-mtc01.proxy.aol.com (smtp-mtc01.proxy.aol.com [64.12.118.17]) by rly-ip04.mx.aol.com (v98.19) with ESMTP id RELAYIN5-6417546ad23c; Tue, 19 Oct 2004 12:54:05 -0400 Received: from laptop01 (AC97C18D.ipt.aol.com [172.151.193.141]) by smtp-mtc01.proxy.aol.com (8.12.11/8.12.11) with ESMTP id i9JGrlm6021864; Tue, 19 Oct 2004 12:53:52 -0400 Reply-To: From: "IT3 Stuart B. Tener, USNR" To: Cc: "'Daniel Harvey'" Subject: Re: journaling file system Date: Tue, 19 Oct 2004 12:53:33 -0400 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_000F_01C4B5DA.A94D9B30" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Importance: Normal X-MS-TNEF-Correlator: 00000000EA7A2121BBE9D11197A80080C7C54FD684755000 X-Apparently-From: Stuart90211@aol.com X-Scanned-By: MIMEDefang 2.43 X-AOL-IP: 64.12.118.17 Received-SPF: X-Spam-Status: No, hits=-4.7 required=5.0 tests=BAYES_00,RCVD_IN_NJABL, RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: teners@bh90210.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format. ------=_NextPart_000_000F_01C4B5DA.A94D9B30 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Mr. Daniel Harvey: Referencing your comments of 18 OCT 2004, I comment as follows: Based on your argument, is it presumable that using a journaling = filesystem on a file backed loop device (even if you are not using loop-aes, or any encryption mechanism) can be quite a dangerous, correct? By the way at the bottom of your comments, you say "PS. Kernel 2.6", = does that mean that the issue you speak of does not apply in Kernel 2.6 as it = has been remediated in that kernel version? Very Respectfully,=20 IT3 Stuart Blake Tener, USNR=20 Beverly Hills, California NR SPAWAR 0886 NAF WASHINGTON, ANDREWS AFB, MD Email: teners@bh90210.net NIPR : stuart.tener@navy.mil CNRF : tenersb@hq.cnrf.navy.mil ARMY : stuart.tener@us.army.mil Amateur/HAM Radio Callsign: N3GWG west coast: (310)-358-0202 P.O. Box 16043, Beverly Hills, CA 90209-2043=20 east coast: (215)-338-6005 P.O. Box 45859, Philadelphia, PA 19149-5859=20 Telecopier: (419)-715-6073 fax to email gateway via www.efax.com JOIN THE US NAVY RESERVE, SERVE YOUR COUNTRY, AND BENEFIT FROM IT ALL.=20 Tuesday, October 19, 2004 12:46 PM Subject: Re: journaling file system From: Daniel Harvey Date: Mon, 18 Oct 2004 08:22:57 +0800 >From Jari's README for loop-aes: 2.2. Use of journaling file systems on loop device ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Don't use a journaling file system on top of file backed loop device. = Device backed loop device can be used with journaling file systems as device = backed loops guarantee that writes reach disk platters in order required by journaling file system (write caching must be disabled on the disk = drive, of course). With file backed loop devices, correct write ordering may = extend only to page cache (which resides in RAM) of underlying file system. VM = can write such pages to disk in any order it wishes, and thus break write = order expectation of journaling file system. Daniel. On Mon, 2004-10-18 at 03:56, majek04 wrote: > Hi. >=20 > Is there any possibility of running journaling file system on the top=20 > of crypted partition or file? It doesn't have to be loop-aes... >=20 > Yours sincerely > majek04 >=20 > PS. kernel 2.6 >=20 >=20 > - > Linux-crypto: cryptography in and on the Linux system > Archive: http://mail.nl.linux.org/linux-crypto/ ------=_NextPart_000_000F_01C4B5DA.A94D9B30 Content-Type: application/ms-tnef; name="winmail.dat" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="winmail.dat" eJ8+IikQAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAGAAAAElQTS5NaWNy b3NvZnQgTWFpbC5Ob3RlADEIAQ2ABAACAAAAAgACAAEGgAMADgAAANQHCgATAAwALgAAAAIANAEB A5AGANgWAAAnAAAACwACAAEAAAALACMAAQAAAAMAJgAAAAAACwApAAEAAAACATEAAQAAAE4AAABQ Q0RGRUIwOQABAAIAAAAAAAAAAAAAAAAAGAAAAAAAAADqeiEhu+nREZeoAIDHxU/WwoAAABAAAABi YSUvT6xdSJwVk6hNcgQtAQAAAAAAAAMANgAAAAAAHgBwAAEAAAAbAAAAUmU6IGpvdXJuYWxpbmcg ZmlsZSBzeXN0ZW0AAAIBcQABAAAAFgAAAAHEtfs/MSWaLdoyBEtPsPDugrfVwRkAAAIBHQwBAAAA GAAAAFNNVFA6VEVORVJTQEJIOTAyMTAuTkVUAAsAAQ4AAAAAQAAGDgAU7hz7tcQBAgEKDgEAAAAY AAAAAAAAAOp6ISG76dERl6gAgMfFT9bCgAAAAwAUDgAAAAALAB8OAQAAAAIBCRABAAAA6hIAAOYS AAB9MwAATFpGda+QfAkHAAYBAQtgbmcxMDMmNwBkAHJjcA3QMjU6MgxgYw1EATQBMXN0xHNoBXBi Y2gQNQkAzRDHaA6wENZiaQFDDaXyMxLmZmUTYgH3AqQDY0cCABDACsBzZXQC0XAocnEyAAAqCqFu b1kWICAwAdAB0DYN8DA4NTA0F/EB0BfgNH2/B20CgwBQA9QVzxbbYhex/xggF4IcxBigBxMCgw8g BFXVGo0xFsw3F9E5F3MYQp8YIBigCFUHsgKDNDYVXigyMzgbJCAHbSBDfkUiZA4QIu4YECQPJRV5 ynIiZDkVXjE2GgEnX3UDgkcJ0WsCgxgAKU829x4hKp8DglQIcCw0GgESsOxkaQM2Kbg3JfEt/wOC kChIZWIJcHcpLDT/HiEwDzEUI/8yhgcQAaAOsHczZROQLL44IsE1rwOCQv0HQHQOsCw0JyEpbjfR OT9FMrNWCJB0bmEHgWW/M2UiwRo8I9gHEyVmNSXx7z9NJxdAxSi1NSkxGjwqSP9AxCvoF8BEXy23 QMQvRipS/zQFRH0xZ0DEMvstsknfNRx/S8U3CjxiRH0490DEOok23ychRH48dkvFPg42IsEeXd0j 1jElYCHIJWY2JfFWnvcnFVgNKLU2KTEeXSpGWAy/K+ggkFyPLaZYDC9GNy/Y/1/eMWVYDDL7AcBi z04dZM19Nwo3N9Ff3jj1WAw6iTd/JyFf3zx0ZM0+CwKRCOY71QlvMHGvZQ8ANXLac/H/c690uXLE dOJzT3cfdt12X+d0j3LfFDAyOHyqfcF9f/9+iXLEfrJ9H4DvgK2AL35f/YIkOQ8ghXSG0X7zhtAC gqkQUHlsB5BoCeB0AAB6cQMhbBLBBRABQAPwZNhjdGwKsQBgcwqwihAjGrCKUm51bQIAYWHIdXRv DVFqdRBQBRB4Z2h0iXEKAYlACgFp2QGQcDADMAAgbBDAAzD+YQExjhAL8CcgB0ANsw8A/4khjCCN 0o5jEycT6AjQCcBzNBCQE25wkGmSBAMwc/huZXgbAAewBbAAwAJz2RbgY3MN4I3xZDQgOrDOdhdQ EEAa4G1pEgCU8DkJ8CBEARCLgDqgIFDdCsBhCcCNUI3gRgIhlCTdEGAxAFAQYANgdwswjCCJAYBz VzQQdGhCE5B3jCAKsJTwbA3gNXCZlHJfmggNkJl2AYCbd2Kbd3L5mXJjYgqwKjCdYhswncPxBPBl bGyJwZlAmOEBQP8QYJVAACA6kZfxMyCakKAWPwlQoDQMsaBDikCgNGRn16EWopCiFmigJXYDMIkP /4ofiy+MP41PjlKo8Y9oqEH/jtSQBBQijoGRbKtnrOSTNf+YIJVsk8Q84AGgiHCUJ48xf5TojaiP R5aACNAeEJMxYn+l4AmAAiCUoohBGtA0EDKHYqAqUA7wIEh5cASQd6hhLCOUYzaw77H/niAx/5Mi s2+0d5dgntCYgAmAtQ//MVC2P43yAFGp7BoCDAGeIN+5QrjKlZkQQLUhcwIgQPGzEEAFoG1wFzK0 DkUAwP0DEFOIUjFQiAM44KR/pY//pp+nr6i+DyCp046mDgCPSP8eIarIkI+Rn5KquMW5Qq5D+jjB /1ALYjzgk3Fw0xbgxXHAdgJRIHtVtXAXIP53GaGUMw7QBTDSQtNSDECf02HIVcR3oEAQMWEw0aV/ tFHSMtYztIXWM7hwMWA4Vjc3wdeUOVlQM1Mgff+PUhrgxTADMMUBmIDFMKEB8QGAbmJqAGAJ8JTw EWCaXBcgeAtgAkBveQnw+lyTcHAQcAAgC5AXIJaBv6EAxbAA4QIwAmAAgGIQoG/bQcWxnrACEHKy 0d5xbdMQcA1hXGgFsHrbEqKQ2QDAcmcLgaKQaN4jOOD5AUFnduC533HHgAuAMVDOMABQ4UHiNTk4 JyDggu3fcHfiw+P0atwRAHALMC/bEYhQtSAPIHYIkHdr/QuAZHwQ5fIE8AdAdVAPALvTUaOTZQ1g 51UCEG/HsPHFsGx5dNLQC4DfUNpx/+jnx6AAwMbQxbDbQd2Qx6D/xxEJMsdAnsACUAdAC5Dr8f8C UeZBxHDo8ObhxTACYJiRv+jhAlEAIKNB3ZAzIGvekfffUBcg7nF3maAJMpNQqNC/xuDM4guAnrKO obqRZgiQimyWAWTroVxBcOjROkLugFLusRpw70Fwdf/wYMewxaAHMO5ntEIDYOiQv9fWAzEa8o9h CrPZcmSPQ//ZcsgSk3ABQNrh6vAEkN9Qf9ly9vLM4tjwEDH2EpZUYz/vkdpz08EW4QCABZBsdt+Z 8PpxD0CT4PpxcQDg+oHfAZAAIPsC5kEJ8HQBwfpxHxqwDcDTwgIwk4BhIC7/0wX6lQ8g+yKPYfuP /J/9r//6lROQxlAFgf+/AM8B3/qVvycgxlCNwP+PBK8Fuin+TO/nQQOPCM8FqWI24BnBCj//+rMi wAePDK8Nvw7P+oZZYP8QcvtvEd8S7xP/+tE1cBB//xZfF28Yf/qGKTAVXxtPHF//HWroAPXA5/HR A/V1xD/FRP/GpcfdIvJdQbRojZ+Or4+//8w/zU+S5MPgyO/J/8sHvuHH1CAf0LRKTXIuljA7oA/x IbTw9cCVQHk6DQr9IvIgMtU3gS3fLu8v/7RZvlLeYPex8GDRIAXAeVgxHiDBgT0QHZA9MG9mIGHP wU9DVCC+sFqQLNQgSTjGIMWgIOhwuoL8czozvzTPNd8w3DNPPF//PW8+fz+PQJ9Br0K/tIZScP+4 4TlQwJBEv0XPRt8w3DiC/0lfSm9LfzDcOvDgMMZwIKH/OkBTgFJQlqBUkPKAxnCwAnYgmUCdwCDr kDhCBlBq31gxwSE4QvEQiHF5iECVoJdJEgZQVPIg6+Bja0jx8bqQb3AglgDl8J6waWD70hCWEWk5 cDiBTa9Ov0/P/1DeWD9ZT1pfMNxNn11vXn99MM1lYI9hn2KvUN3eAHS/ZK9lv2bPUN1TxFayLdrQ znM6QOIwOvBueWSA8GB+cuWgtpBJIXCAKEAyAXM8bSk4wPNwVjC2wHF196iwtsAGUGSrocDgVFBt 4X/BgKIA2YFo/2oPax8w3D/fRE9yn3OvdL9ECUJuYJlA+bbAd2FuYFORezJ2j3ef23ivMNxi6JDG 4G18L30/v35PUN05YTiLOkA4gSDVsN9uYICfga+CvzDck4Zfh2/TiH8w3FBTMdBLwOCTYPEkQDIu Nop/i4+MnzDc/pSPb5B/kY8w3DpAuQDygP9TZDkAb/FTc3syUmBS8LbA84XTtSBhazlSl7NowTrw //HiUlDAkI7IOvJSkVOAOxD/cCCvUTgAOQDwQNuQSPHRIb9Tc1ZwjuNXkNeRuRA/k4//lJ+Vr3m/ dk+gH6Evoj+jRv+jViL/xXHED8Ufxi/HPyZ3/dQyMcjPpO/K7yr/LA8tH/+vkym3pqIpNSp0ssIo 8d4AG1LA9GBmML7TImJrbaJrH+MgX03DIUGs0fJTrYB9VsDgbmA3wMDB/aswZvlwmyA6QKffqOGp fz+qj6ufrK+tv67EJvc5Nf4344CyQLUPth+3L7g/OlCiVC2QU3R1ufJCKTAXVnDRQc+AcjpAVVNO /lK8n72vvr+/z8Dfwe+u8u/EP8VPxl/Hb0JXgdzwbmDuSFYA3QA6QENUkd5xIGB+YTLf0P/SD9Mf pu3KEVMQUEFXQcogMDg4/49c2F/Zb9p/owvKz8vfzO//zf/PD8J/uKvc793/3w/a7ghBRiDcMFNI SU4QR1RPTjpAQU5EkFJFV1PtwEZCOkD8TUTXH+kv6j/rT+CP4Z//4q/jv+TP5d/QL++v8L/xz+3y 2UVTEFYAOqOyVfCbwO2zcGb/IJ1RdAKS/1HykT+6EPof+y/8P/1PMlBZUIhFUkztUEsgIv5iDbqg OnCAyaFzQGJoljkpgLIwLpuwdCLvL/8BfwKPA5+5NHDQroD+8yogBmIjgMPgIADQyeoAefm6zhGM ggCAqgBLqQsCAA3wKgMN8eAM/TQN8W0AAGEAaQBsAHQAiG8AOhARZQBuEJEAcgBzAEAAYgAAaAA5 ADAAMgD6MRGxLhCzECAN8SLQ/sI//yDywBpgAH8IRPTgNVz/u9CmkaYwCN8J76dHBf9x4P8eAhPv CH8Wj/Kf7u8ajxuf+xyms5c2HR2mkPbgcaDbKvxJUMog/q//vx7fH+8g/78iDyMfBG8FdvgwyNIu GIPCQFSAdnkubVYABx+/J58orxzfC18MYrIwNAzPvw3fNYYQYA+OESAQIHUPsX8RABAgEkAQiBFA EMAPwHb8AHkSMQ+gD+ISzy9vFO//MQ8pfyqPK58t3y7iGa8wP98+vz/PQN8ju9alQ8oQ7PADJNAY hGJAaHEuY/hucmYG0C61Hh9Ez0Xf5zIPp1bcQE1ZJMFCu1PA2i7zwG1MOtalQf5gcIDhhQAvSEFN u0D38G7wF9Xy1cD4YG4k0E4zR/RXR9asd7tguhBxgJygEnQk0CgzsjApLTM4NTgtBpAGkI5wLk9h jqBCb3ggp3A0wDMTvBDVHkEgBoEwOS2/pnBZcB4GmfBXKQagNVgB5jNYQFlQMDVM/04PTx9/UC9J H0zvXp9fr2C/WJk0yVgwNTm8EFBo1aBU4B+bwPbQnXBoIVqwMTkx3jRbEGfiHgbJgGy7kG2QdQwQ clehNGlQWAAdoDX9XUE3yJD3gFkguqBucP5i7CBnnYF7cnadcHtgbbA8LmVsIUughUDWrEpPs+1Q yXBIRcnh7MFWUXBl7gBTLOBWRbwQcIMgKFlPVcogQ3FgTlQMUlnts1mgRU5FRmHIcCBGUk9UsHLB QfxMTI6g1q8lIyX/Y19kbyNlf4PrREFUb8BcXPpABWBketHugXsxmlB7Af55e8EvITufdk93X3hv SXlaVJlgczPQvAFP9hBv/5zQhRBpULwQpnA0wEQPfc//ft9/72K1dN+C74P/hQ+GHyF6KWg6bW2c IG0v/HBtfA+Ir4m/is8dPEnw5Do0nBBQTYK/j8+Q3/+R7/NeqR31L/Y/90/4X66DP8M+k+iwMbAB ldCwVTI1/7DooEKx/7MPtB+faZSfla//lr+Xz/RImd+a45w1nW/nr++T+KAToAGh9TehGD4wr2M/ pmIyr7l0yZD0QLo7U3U8Ymq7kSTQu1Ak0Gpvd1RgTAD5AWdsENWgyWBzrnlcEGyQc8VGqBBtJNB+ RKawDBHVgKmQ1TDVcDz7M9C3MkCNsJ0AudJuMlKgPHU+c8W3EC5AJNBNbz5uvBD08IGigmPcYToy c5Mww8AgK9xwXWBzzD5HtrJvQKmQaSdzcFFBTERNb8DWQSBsqCBwNC1hgUA6c8xzxTIu+8BwyeBz yWCoMLTfteS9wE+6UL6De3DVIGljyWB+38OvxL/Fvbl2ulAnXCCc0P/JYG2QwT+188KinHDDEMEB 8bWTYmFjsvD0QMLpWODuRMNEyl/HsGOmsMvwx7D3x5H0QJqQdJQwx//CRZsw98MmzAm9wGdC0aaw LkDHsL/OEDPgVvCdAC5AvcByW/CjlCGIEHNrIJjxdC5AfaiQIJkh1lAloFvQ0pBx7HVp0pD0QGJt UM5PyQTeKNIjzSGUILVSbZzRzWK50vFhYmqQ9EDJYmjX4/vTII6AabewunDBAWqwVGD1wNApWOBX zgLKD8M0WnF/arAjsLRR0hTT9NdDbUFlvnguQdhyWgFsYamAZ9bk/8ew1pBo0JQh0pCoodJhmSHq UlSgKcDydbMQWeK1XZ1Y4FZUsM0y1qRzdZQh/98SvcBsYdLzmSGmsG1Q1AT7+VDN4XPY0FpxprD0 QM4Qv5zQ2xDSkdMg3PneEXC0Uf8z4FUA0+HBH+JWc8y3FOpt7k+ZMLpDgnItojDtYAywd9HxokC7 oDa6cP5gtEBr+zTB0iBvugG8ploh6mbvwD3vV0nkQdjQ0pDlA3BvbnOooAxwqvB05THo4HL/4WC3 MLVh6Q/JCNjRyZLvV/HZwnJ5cC5AsyCpgeiAN+iEW9C1kj9zMFwgZG9/gUDHUpuQt7BsUs1xvpYu //ng8B9xQNoCQqCs4MNw0pDfWgDvV+5m+h9oMFNY4LLwt/Ogt1HAcDb9P/CYLe9X4kys4HV4LfZT BdBi0PcB5KNArUBobVDk49h3AYPftdyTy69PsF+mdzSmhKLF36OWCNFg/0lM78BBoVHZcf8CQQzz hz+ITQYvBz8ITwlfDwpvSUwsuZ0wdHA6L74vLWIZYOugrNEBsC6+YMxnLxczAdUvIgVfD6+PsJ8T vyOza1A5NDSMQHszjzSRMp9ANP82Dx/FTq0gQWg4sTlAcDhxLyKB/zfGOsA6QCMyOyA4ADpAOOBu eDlROGA5IGcigSPYLfwAYznxOqAiUDhCIpA7X/8Y7xn/Gwc96xIfEy8UP0nT/xZPF18YYpOtKG8a nxGPK8//LN9JT3P6qd+q75sfnC+dPx+lwKUfpiw0zzXdMTM5OjZr8DanEDdPBPV9AAFEwAAAAwDe P59OAAADAAlZAwAAAAMAQGUAAAAACwAAgAggBgAAAAAAwAAAAAAAAEYAAAAAA4UAAAAAAAADAAKA CCAGAAAAAADAAAAAAAAARgAAAAAQhQAAAAAAAAMABYAIIAYAAAAAAMAAAAAAAABGAAAAAFKFAAAT oAEAHgAlgAggBgAAAAAAwAAAAAAAAEYAAAAAVIUAAAEAAAAFAAAAMTAuMAAAAAADACaACCAGAAAA AADAAAAAAAAARgAAAAABhQAAAAAAAEAAKIAIIAYAAAAAAMAAAAAAAABGAAAAAGCFAAAACNboKQAA AAsAL4AIIAYAAAAAAMAAAAAAAABGAAAAAA6FAAAAAAAAAwAygAggBgAAAAAAwAAAAAAAAEYAAAAA GIUAAAAAAAALANWACCAGAAAAAADAAAAAAAAARgAAAAAGhQAAAAAAAAsA2YAIIAYAAAAAAMAAAAAA AABGAAAAAIKFAAABAAAAAgH4DwEAAAAQAAAA6nohIbvp0RGXqACAx8VP1gIB+g8BAAAAEAAAAOp6 ISG76dERl6gAgMfFT9YDAP4PBQAAAAMADTT9NwIAAgEUNAEAAAAQAAAATklUQfm/uAEAqgA32W4A AAIBfwABAAAAMQAAADAwMDAwMDAwRUE3QTIxMjFCQkU5RDExMTk3QTgwMDgwQzdDNTRGRDY4NDc1 NTAwMAAAAAADAAYQkPnctAMABxD6BgAAAwAQEAAAAAADABEQAAAAAB4ACBABAAAAZQAAAE1SREFO SUVMSEFSVkVZOlJFRkVSRU5DSU5HWU9VUkNPTU1FTlRTT0YxOE9DVDIwMDQsSUNPTU1FTlRBU0ZP TExPV1M6QkFTRURPTllPVVJBUkdVTUVOVCxJU0lUUFJFU1VNQUIAAAAADls= ------=_NextPart_000_000F_01C4B5DA.A94D9B30-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 19 21:28:58 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJzej-0003q0-RC; Tue, 19 Oct 2004 21:28:25 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 19 Oct 2004 21:24:40 +0200 (CEST) Received: from ns1.g-housing.de ([62.75.136.201] helo=mail.g-house.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CJzay-0003pW-6B for linux-crypto@nl.linux.org; Tue, 19 Oct 2004 21:24:32 +0200 Received: from g1f32.g.pppool.de ([80.185.31.50] helo=[192.168.10.11]) by mail.g-house.de with asmtp (Exim 4.34) id 1CJzWD-0003Zv-1n for linux-crypto@nl.linux.org; Tue, 19 Oct 2004 21:19:37 +0200 Message-ID: <417569E7.6060203@g-house.de> Date: Tue, 19 Oct 2004 21:24:23 +0200 From: Christian User-Agent: Mozilla Thunderbird 0.6+ (Windows/20041008) X-Accept-Language: en-us, en MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: Howto for encrypted root? References: <200410191639.17717.s13877720@bach.sun.ac.za> In-Reply-To: <200410191639.17717.s13877720@bach.sun.ac.za> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: evil@g-house.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Jacobus Brink wrote: > The Cryptoloop HOWTO does not discuss booting from an encrypted root > partition. Is there a document along the lines of the Encrypted Root > Filesystem HOWTO at http://linuxfromscratch.org/~devine/erfs-howto.html? i parse your mail as "you want to know how to set up an encrypted root filesystem NOT using loop-aes but cryptoloop" - right? well, the "official" cryptoloop howto from tldp.org is in revision 1.2. an older version of this howto (v1.1) is available here: http://www.frech.ch/howto/HOWTO/html_single/Cryptoloop-HOWTO/ and it says in chapter 2: "Loop-AES offers some additional features that are not yet present in the kernel implementation of Cryptoloop. If you want to encrypt the root and swap partitions, you may want to stick with Loop-AES for now." i don't know why it was deleted from current versions of the howto. i assume (!) you can take the loop-aes encrypted rootfs howto as a basis. you'll probably have to create an initrd for cryptoloop too, which will be present unencrypted and then (during bootup) will pivot_root to the real (encrypted) rootfs. -- BOFH excuse #324: Your packets were eaten by the terminator - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Oct 20 04:32:20 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CK6GV-0001qi-90; Wed, 20 Oct 2004 04:31:51 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 20 Oct 2004 04:22:42 +0200 (CEST) Received: from [202.74.166.250] (helo=amristar.com.au) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CK66g-0001ia-L9 for linux-crypto@nl.linux.org; Wed, 20 Oct 2004 04:21:43 +0200 Received: (qmail 21488 invoked from network); 20 Oct 2004 02:19:11 -0000 Received: from unknown (HELO elvandar) (127.0.0.1) by 0 with SMTP; 20 Oct 2004 02:19:11 -0000 Received: from localhost ([127.0.0.1]) by elvandar with esmtp (Exim 3.35 #1 (Debian)) id 1CK64D-0003Hf-00; Wed, 20 Oct 2004 10:19:09 +0800 Subject: Re: journaling file system From: Daniel Harvey To: stuart@bh90210.net Cc: linux-crypto@nl.linux.org In-Reply-To: References: Content-Type: text/plain Message-Id: <1098238749.2582.23.camel@elvandar> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Wed, 20 Oct 2004 10:19:09 +0800 Content-Transfer-Encoding: 7bit X-Sent-Items-Stored: elvandar Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: daniel@amristar.com.au Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi Stuart, (1) Absolutely - journaling filesystems depend upon the maintenance of the order of device write operations. Where this is not the case, file system recovery based upon the journal has the potential to be very dangerous. (2) The "PS. Kernel 2.6" comment was made by Majek in his original e-mail. The implications of ordered device writes vs journaling filesystems apply across the board including 2.6. The potential problems are inherent to the the very flexibility of a loop device - you can potentially construct looped filesystems n-levels deep. BTW, I cannot claim the arguments as "mine" or take credit :-) Happy to accept the blame for all errors. Comments/clarifications welcome. D. -- Daniel Harvey On Wed, 2004-10-20 at 00:53, IT3 Stuart B. Tener, USNR wrote: > Mr. Daniel Harvey: > > Referencing your comments of 18 OCT 2004, I comment as follows: > > Based on your argument, is it presumable that using a journaling filesystem > on a file backed loop device (even if you are not using loop-aes, or any > encryption mechanism) can be quite a dangerous, correct? > > By the way at the bottom of your comments, you say "PS. Kernel 2.6", does > that mean that the issue you speak of does not apply in Kernel 2.6 as it has > been remediated in that kernel version? > > > Very Respectfully, > > IT3 Stuart Blake Tener, USNR > Beverly Hills, California > > NR SPAWAR 0886 > NAF WASHINGTON, ANDREWS AFB, MD > > Email: teners@bh90210.net > NIPR : stuart.tener@navy.mil > CNRF : tenersb@hq.cnrf.navy.mil > ARMY : stuart.tener@us.army.mil > > Amateur/HAM Radio Callsign: N3GWG > > west coast: (310)-358-0202 P.O. Box 16043, Beverly Hills, CA 90209-2043 > east coast: (215)-338-6005 P.O. Box 45859, Philadelphia, PA 19149-5859 > Telecopier: (419)-715-6073 fax to email gateway via www.efax.com > > JOIN THE US NAVY RESERVE, SERVE YOUR COUNTRY, AND BENEFIT FROM IT ALL. > > Tuesday, October 19, 2004 12:46 PM > > Subject: Re: journaling file system > From: Daniel Harvey > Date: Mon, 18 Oct 2004 08:22:57 +0800 > > >>From Jari's README for loop-aes: > > > 2.2. Use of journaling file systems on loop device > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > Don't use a journaling file system on top of file backed loop device. Device > backed loop device can be used with journaling file systems as device backed > loops guarantee that writes reach disk platters in order required by > journaling file system (write caching must be disabled on the disk drive, of > course). With file backed loop devices, correct write ordering may extend > only to page cache (which resides in RAM) of underlying file system. VM can > write such pages to disk in any order it wishes, and thus break write order > expectation of journaling file system. > > Daniel. > > On Mon, 2004-10-18 at 03:56, majek04 wrote: > > Hi. > > > > Is there any possibility of running journaling file system on the top > > of crypted partition or file? It doesn't have to be loop-aes... > > > > Yours sincerely > > majek04 > > > > PS. kernel 2.6 > > > > > > - > > Linux-crypto: cryptography in and on the Linux system > > Archive: http://mail.nl.linux.org/linux-crypto/ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Oct 20 05:59:46 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CK7Yy-00071k-Qd; Wed, 20 Oct 2004 05:55:00 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 20 Oct 2004 05:44:05 +0200 (CEST) Received: from pd9e8233b.dip.t-dialin.net ([217.232.35.59] helo=wolfden.dnsalias.net) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CK7Nm-0006st-65 for linux-crypto@nl.linux.org; Wed, 20 Oct 2004 05:43:26 +0200 Received: from furrywolf by wolfden.dnsalias.net with local (Exim 4.34) id 1CK7KT-0000Ws-GZ for linux-crypto@nl.linux.org; Wed, 20 Oct 2004 05:40:01 +0200 Resent-From: Mike.Dornberger@gmx.de Resent-Date: Wed, 20 Oct 2004 05:40:01 +0200 Resent-Message-ID: <20041020034001.GA2012@wolfden.dnsalias.net> Resent-To: linux-crypto@nl.linux.org Date: Mon, 18 Oct 2004 16:23:32 +0200 From: Mike Dornberger To: linux-crypto@nl.linux.org Subject: Re: File encryption and compression tool - Help Message-ID: <20041018142332.GA393@wolfden.dnsalias.net> Mail-Followup-To: linux-crypto@nl.linux.org References: <6F832B0C67025649A27362C04369711706C6EFDC@BANMLVEM02.e2k.ad.ge.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6F832B0C67025649A27362C04369711706C6EFDC@BANMLVEM02.e2k.ad.ge.com> User-Agent: Mutt/1.5.6+20040722i Resent-Sender: furrywolf Resent-Date: Wed, 20 Oct 2004 05:40:01 +0200 Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Mike.Dornberger@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi, On Mon, Oct 18, 2004 at 12:07:35PM +0530, Das, Arijit (GE Healthcare) wrote: > Hi there...I am looking for a simple tool which I can use to encrypt and > compress a file and decompress and decrypt a file in Linux. > > I can use command line gpg and compress/gzip for it but my > decryption/decompression requirement is that I need to read the > encrypted/compressed file from a ROM and print its contents into console > without creating any temporary files. Basically, I don;t have write > permission to the system....i can only read from it and print into the > console. hm, someone hasn't read his documentation yet. ;-) Thought of piping? Assume you have secretfile.txt. E.g. (1) $ gzip secretfile.txt (2) $ gpg -c secretfile.txt.gz You get secretfile.txt.gz.gpg On the other box use, e.g. $ gpg --decrypt secretfile.txt.gz.gpg | gunzip | less Or if you first encrypt and then compress (you first did (2) and then (1)): $ gunzip -c secretfile.txt.gpg.gz | gpg --decrypt | less > So, I need a kind of simple C/C++ API which I can use to (de/en)crypt and > (un/)compress byte/char streams. Uhhh, why so complicated? Just use The Power of Shell. HTH, Mike - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Oct 21 05:41:07 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CKToU-0002fi-BF; Thu, 21 Oct 2004 05:40:30 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 21 Oct 2004 05:37:56 +0200 (CEST) Received: from virgo.sdc.org ([209.155.42.1]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CKTlS-0002ZU-Ff for linux-crypto@nl.linux.org; Thu, 21 Oct 2004 05:37:22 +0200 Received: from [10.0.1.5] (leila [209.155.156.3]) by virgo.sdc.org (8.12.8/8.12.8) with ESMTP id i9L3ZBHI011685; Wed, 20 Oct 2004 21:35:11 -0600 In-Reply-To: <417569E7.6060203@g-house.de> References: <200410191639.17717.s13877720@bach.sun.ac.za> <417569E7.6060203@g-house.de> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <3550EA5A-2312-11D9-87F1-000A95C88606@aoc.nrao.edu> Content-Transfer-Encoding: 7bit Cc: Boyd Waters From: Boyd Waters Subject: Re: Howto for encrypted root? Date: Wed, 20 Oct 2004 21:35:09 -0600 To: linux-crypto@nl.linux.org X-Mailer: Apple Mail (2.619) X-Virus-Scanned: ClamAV 0.80/543/Wed Oct 20 13:24:13 2004 clamav-milter version 0.80j on virgo.sdc.org X-Virus-Status: Clean Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: bwaters+mac@aoc.nrao.edu Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On Oct 19, 2004, at 1:24 PM, Christian wrote: > i parse your mail as "you want to know how to set up an encrypted root > filesystem NOT using loop-aes but cryptoloop" - right? > I wrote a sort-of long howto about cryptoloop-based encrypted root at http://www.sdc.org/~leila/usb-dongle I think it is noted in the TLDP HOWTO. My efforts focused on a pivot_root boot from a uClibc-based mini-system on a USB flash device. The web site has source code and an example filesystem image. I never completed the write-up, as I wanted to personally use everything that I documented. I got stuck on the bootable CD, believe it or not, but figured out how to do that just a couple of days ago. So although the document is a year old, I was planning on dusting it off and updating it. But I must say that I'm in the process of moving my stuff from crypto-loop to loop-AES! ~ boyd - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Oct 22 23:36:28 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CL759-0006AI-Ix; Fri, 22 Oct 2004 23:36:19 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 22 Oct 2004 23:34:58 +0200 (CEST) Received: from webshielde1000.santa-monica.org ([4.36.254.81]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CL73c-00069L-Px for linux-crypto@nl.linux.org; Fri, 22 Oct 2004 23:34:44 +0200 Received: from ssl02.labridge.com(206.117.169.10) by webshielde1000.santa-monica.org via csmap id 9085cafe_2471_11d9_8f0b_0002b3c90015_27968; Fri, 22 Oct 2004 14:30:26 -0700 (PDT) Received: from by labridge.com (CommuniGate Pro RULES 4.1.8) with RULES id 5163464; Fri, 22 Oct 2004 14:31:31 -0700 X-Autogenerated: Mirror X-Mirrored-by: Received: from [64.18.0.41] (HELO psmtp.com) by labridge.com (CommuniGate Pro SMTP 4.1.8) with SMTP id 5163423 for mfeinstein@feinstein.org; Fri, 22 Oct 2004 14:31:31 -0700 Received: from source ([69.177.129.151]) by exprod5mx127.postini.com ([64.18.4.10]) with SMTP; Fri, 22 Oct 2004 14:31:26 PDT From: linux-crypto@nl.linux.org To: mfeinstein@feinstein.org Subject: Returned due to virus; was:Mail Delivery (failure mfeinstein@feinstein.org) Date: Fri, 22 Oct 2004 16:30:57 -0400 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_001B_01C0CA80.6B015D10" X-Priority: 3 X-MSMail-Priority: Normal Message-ID: Received-SPF: X-Spam-Status: No, hits=-1.7 required=5.0 tests=BAYES_00,HTML_FONTCOLOR_RED, HTML_MESSAGE,MISSING_MIMEOLE,NO_REAL_NAME,PRIORITY_NO_NAME autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: linux-crypto@nl.linux.org Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format. ------=_NextPart_000_001B_01C0CA80.6B015D10 Content-Type: multipart/Mixed; boundary="----=_NextPart_001_001C_01C0CA80.6B015D10" ------=_NextPart_001_001C_01C0CA80.6B015D10 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable ------=_NextPart_001_001C_01C0CA80.6B015D10 Content-Disposition: attachment Content-Type: Text/HTML; name="noname.htm.htm" Content-Transfer-Encoding: 7bit X-NAI-WebShielde1000-mimepp: Attachment removed VIRUS INFECTION ALERT

VIRUS INFECTION ALERT

The WebShield® e1000 Appliance discovered a virus in this file. The file was not cleaned and has been removed.

See your system administrator for further information.

File name: noname.htm
Virus name: Exploit-MIME.gen.c

Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeeb2b.com

------=_NextPart_001_001C_01C0CA80.6B015D10-- ------=_NextPart_000_001B_01C0CA80.6B015D10 Content-Disposition: attachment Content-Type: Text/HTML; name="message.scr.htm" Content-Transfer-Encoding: 7bit X-NAI-WebShielde1000-mimepp: Attachment removed VIRUS INFECTION ALERT

VIRUS INFECTION ALERT

The WebShield® e1000 Appliance discovered a virus in this file. The file was not cleaned and has been removed.

See your system administrator for further information.

File name: message.scr
Virus name: W32/Netsky.p@MM

Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeeb2b.com

------=_NextPart_000_001B_01C0CA80.6B015D10-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 24 19:26:12 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CLm3w-0006bh-9X; Sun, 24 Oct 2004 19:21:48 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 24 Oct 2004 19:17:01 +0200 (CEST) Received: from [213.173.154.11] (helo=surfeu.fi) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CLlzD-0006as-Fh for linux-crypto@nl.linux.org; Sun, 24 Oct 2004 19:16:55 +0200 Received: from [213.140.184.223] (account ce6c8edf HELO users.sourceforge.net) by surfeu.fi (CommuniGate Pro SMTP 3.4.1) with ESMTP id 108116704; Sun, 24 Oct 2004 20:16:41 +0300 Message-ID: <417BE3D6.BB54FE7D@users.sourceforge.net> Date: Sun, 24 Oct 2004 20:18:14 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: linux-crypto@nl.linux.org CC: linux-kernel@vger.kernel.org Subject: Announce loop-AES-v2.2c file/swap crypto package Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto loop-AES changes since previous release: - Added compile time autodetection and workaround for per-thread vs. per-process rlimits (2.6 kernels). - Added Gentoo compatible binary key setup option to mount and losetup 'mount -p 0 -o phash=unhashed3' or 'losetup -p 0 -H unhashed3'. - Added random key setup option to mount and losetup. This can be used to encrypt /tmp with random keys. - Added workaround for module_param_array() breakage in 2.6.10-rc bzip2 compressed tarball is here: http://loop-aes.sourceforge.net/loop-AES/loop-AES-v2.2c.tar.bz2 md5sum 439a25bd1e85e8053bf0cf3c504279ed http://loop-aes.sourceforge.net/loop-AES/loop-AES-v2.2c.tar.bz2.sign -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Oct 24 23:50:27 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CLqDo-0008T5-BP; Sun, 24 Oct 2004 23:48:16 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 24 Oct 2004 23:43:00 +0200 (CEST) Received: from ns1.g-housing.de ([62.75.136.201] helo=mail.g-house.de) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CLq8Y-0008SZ-9q for linux-crypto@nl.linux.org; Sun, 24 Oct 2004 23:42:50 +0200 Received: from g0d6d.g.pppool.de ([80.185.13.109] helo=sheep.housecafe.de) by mail.g-house.de with esmtp (TLS-1.0:RSA_ARCFOUR_SHA:16) (Exim 4.34) id 1CLq2F-00042J-51; Sun, 24 Oct 2004 23:36:19 +0200 Received: from prinz.housecafe.de ([192.168.10.11]) by sheep.housecafe.de with esmtp (Exim 4.34) id 1CLq8N-0006lE-3A; Sun, 24 Oct 2004 23:42:39 +0200 Message-ID: <417C21CE.3030806@g-house.de> Date: Sun, 24 Oct 2004 23:42:38 +0200 From: Christian Kujau User-Agent: Mozilla Thunderbird 0.8 (X11/20040926) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Jari Ruusu CC: linux-crypto@nl.linux.org Subject: Re: Announce loop-AES-v2.2c file/swap crypto package References: <417BE3D6.BB54FE7D@users.sourceforge.net> In-Reply-To: <417BE3D6.BB54FE7D@users.sourceforge.net> X-Enigmail-Version: 0.86.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-3.0 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DSBL, RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS,RCVD_IN_SORBS_HTTP, RCVD_IN_SORBS_SOCKS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: evil@g-house.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jari Ruusu wrote: > loop-AES changes since previous release: > - Added compile time autodetection and workaround for per-thread vs. > per-process rlimits (2.6 kernels). > - Added Gentoo compatible binary key setup option to mount and losetup > 'mount -p 0 -o phash=unhashed3' or 'losetup -p 0 -H unhashed3'. > - Added random key setup option to mount and losetup. This can be used to > encrypt /tmp with random keys. > - Added workaround for module_param_array() breakage in 2.6.10-rc Thanks! i was just about to file a bug report because compilation failed with 2.6.10-rc1 ;-) Christian. - -- BOFH excuse #154: You can tune a file system, but you can't tune a fish (from most tunefs man pages) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBfCHO+A7rjkF8z0wRAmIPAJ4h7QrV35OJPjb0fpHhcD/duQ0cPwCgnmod ZE+CKqEvFViGmExoSYzBM6k= =6/1l -----END PGP SIGNATURE----- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Oct 25 18:58:32 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CM8Aq-00058u-T9; Mon, 25 Oct 2004 18:58:24 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 25 Oct 2004 18:54:20 +0200 (CEST) Received: from [213.173.154.11] (helo=surfeu.fi) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CM86k-000583-A3 for linux-crypto@nl.linux.org; Mon, 25 Oct 2004 18:54:10 +0200 Received: from [213.140.185.57] (account ce6c8edf HELO users.sourceforge.net) by surfeu.fi (CommuniGate Pro SMTP 3.4.1) with ESMTP id 108319916; Mon, 25 Oct 2004 19:53:58 +0300 Message-ID: <417D2FEE.D0FB3C99@users.sourceforge.net> Date: Mon, 25 Oct 2004 19:55:10 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r7 i686) X-Accept-Language: en MIME-Version: 1.0 To: linux-crypto@nl.linux.org CC: linux-kernel@vger.kernel.org Subject: Re: Announce loop-AES-v2.2c file/swap crypto package References: <417BE3D6.BB54FE7D@users.sourceforge.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Jari Ruusu wrote: > - Added random key setup option to mount and losetup. This can be used to > encrypt /tmp with random keys. As some of you may have noticed, new example 4 of loop-AES README file was fucked up. One important step was missing from example 4 instructions, and if those instructions were followed literally, /tmp partition most likely ended up being unwritable by non-root users. Below is the fix in patch form, and URL of full corrected README file: http://loop-aes.sourceforge.net/loop-AES.README -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD --- ../loop-AES-v2.2c/README Sun Oct 24 19:19:00 2004 +++ ./README Mon Oct 25 19:15:39 2004 @@ -1,4 +1,4 @@ -Written by Jari Ruusu , October 24 2004 +Written by Jari Ruusu , October 25 2004 Copyright 2001,2002,2003,2004 by Jari Ruusu. Redistribution of this file is permitted under the GNU Public License. @@ -616,7 +616,10 @@ /dev/hda555 /tmp ext2 defaults,loop=/dev/loop2,encryption=AES128,phash=random 0 0 ^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^ ^ -Third, run "mount /tmp" command and you are done. +Third, run "mount /tmp" and "chmod a+rwxt /tmp" commands. + +Fourth, make sure that "chmod a+rwxt /tmp" command is run by init scripts +somewhere after "mount -a" command is run. Encryption keys and plaintext data on above type mount vanish on unmount or power off. Using journaled file system in such case does not make much - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Oct 26 13:01:13 2004 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1CMP2r-00048c-F1; Tue, 26 Oct 2004 12:59:17 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 26 Oct 2004 12:54:51 +0200 (CEST) Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1CMOyM-00047i-R0 for linux-crypto@nl.linux.org; Tue, 26 Oct 2004 12:54:38 +0200 Received: (qmail 11490 invoked by uid 65534); 26 Oct 2004 10:54:25 -0000 Received: from dial-195-14-250-185.netcologne.de (EHLO dagobert) (195.14.250.185) by mail.gmx.net (mp026) with SMTP; 26 Oct 2004 12:54:25 +0200 X-Authenticated: #4240698 From: Jan =?iso-8859-1?q?L=FChr?= To: linux-crypto@nl.linux.org Subject: [newbie] overviewing the chaos Date: Tue, 26 Oct 2004 12:55:28 +0200 User-Agent: KMail/1.6.2 MIME-Version: 1.0 Content-Disposition: inline Content-Type: Text/Plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message-Id: <200410261255.30997.jluehr@gmx.net> Received-SPF: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jluehr@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Greetings, well, I'm looking for a way to encrypt my files, filesystem - surprised, ai= n't=20 yeh? ;-) But I'm getting a little bit confused by the offer. Due to google a found a lot of ways to perform this task =2D GnuPG =2D aes-pipe =2D aes-loop =2D standard linux crypto loopback device =2D Encryption using the device mapper =2D ppdd loop device =2D (.. some I have not found yet, but afaik there was an approach patching= nfs=20 or something like that) I hope nobody blame me for being a little bit confused right know ;-) Due to google, I found how to set up every single utility, but I haven't fo= und=20 any site comparing theses approaches, analysing 'em (from a scientific poin= t=20 of view) and give some advice for newbies. I've been using gpg for mail and backup encryption for years, It tend to b= e=20 very useful, and because of using userland programs only, it is very portab= le=20 and ideal for backups or mails I may want to decrypt on othersystems. I used it from a very naive point of view not thinking of security in detai= l,=20 (like multiple keys for block-device encryption). Now the situation has changed. I purchased a laptop and want to encrypt my= =20 home for security reasons. (I don't want a thief or a competitor be able to= =20 read it). So I need I very secure filesystem encryption and aes-loop, ppdd= =20 and device-mapper encryption draw my attention. Due to requiring modules /= =20 kernelcode and a patched util-linux it seem to be impossible to use more th= an=20 one at the same time. (Without rebooting the system) On the other hand I want to use some mountable encryption for portable stor= age=20 devices as well. For instance I have a USB-Stick /DVD-RAM /-RW with some=20 enclosed data I want to access on different systems. (All systems are=20 considered to be trusted). The data should be able to be accessed form=20 userland as well as kernelland based tools. I want to be able to mount it o= n=20 some systems - on other systems userland access is necessary because I cann= ot=20 use the kernel I want. Being able to gain access to my data with OpenBSD,=20 Solaris or MacOS would also be nice.=20 On the one hand, aes-pipe seems to be a perfect approach for this task, but= on=20 the other hand, I don't know which features of loop-aes (like multiple key= s)=20 are implemented in aes-pipe, too. So, can you show me a way out of this jungle? Keep smiling yanosz - Linux-crypto: