From linux-crypto-bounce@nl.linux.org Wed May 02 22:29:49 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjLSC-00075G-8k; Wed, 02 May 2007 22:29:36 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 02 May 2007 22:28:49 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HjLRC-0006pP-Ds for linux-crypto@nl.linux.org; Wed, 02 May 2007 22:28:34 +0200 Received: (qmail 12624 invoked by uid 0); 2 May 2007 20:26:41 -0000 Received: from 84.175.0.109 by www003.gmx.net with HTTP; Wed, 02 May 2007 22:26:41 +0200 (CEST) Content-Type: text/plain; charset="us-ascii" Date: Wed, 02 May 2007 22:26:41 +0200 From: Peter_22@gmx.de In-Reply-To: <20070428113051.GK13982@tatooine.rebelbase.local> Message-ID: <20070502202641.204800@gmx.net> MIME-Version: 1.0 References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> Subject: Re: Linux distro w/loop-aes To: markus reichelt , linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX1/2iOollGj2xEedD4a5u3/7osegPJZQ4/jDb9WAvS tJ/mgDRJQ2NDM2X5uXTmD4A6HA5NVtC+iyew== Content-Transfer-Encoding: 7bit X-GMX-UID: OcMNcnUXTiE+X6cKMWRwLMx9ZUVSRFdw Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -------- Original-Nachricht -------- Datum: Sat, 28 Apr 2007 13:30:51 +0200 Von: markus reichelt An: linux-crypto@nl.linux.org Betreff: Re: Linux distro w/loop-aes > > Change of status, I'm currently working on it. > You work on what? Which distro is it? I suppose SuSE will never integrate loop-aes. They did their best to spoil each kernel since I started. Ubuntu lacks RAID support in the graphical installer even in the latest release. No, we are far from a distro that asks for a memory stick to save your root gpg files on it. Very far. Nevertheless, I appreciate every step forward in this area. Best regards Peter -- "Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu May 03 16:12:37 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hjc2s-00041m-1L; Thu, 03 May 2007 16:12:34 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 03 May 2007 16:12:02 +0200 (CEST) Received: from ag-out-0708.google.com ([72.14.246.249]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hjc29-0003Bg-2l for linux-crypto@nl.linux.org; Thu, 03 May 2007 16:11:49 +0200 Received: by ag-out-0708.google.com with SMTP id 33so827935agc for ; Thu, 03 May 2007 07:10:24 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=n6DUVczSYtB6sWvP0HQdVL1bygt3vA0cUGU/2FJQDZbZn41ruDo+qLC5G8+A7gxQ0SUu1DZbzPS4lwrnTU+v4D0g2B7M4UEEg4iaFM/s97yc37rscoP2yVkJs1G0+bAkBMw/rtSDUhkR0ycj5t8Wm1U/V46p9ECXjZNfmmGwHtY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=uQY+0lnJdZIwd20imfOvwZGSKZFyByUYFMYq+0TRRtrJuzn6BdoBM4PNz7Dj9ZiZXQPyg+JuWNJ+a2rihMrei8SclLh21v0PspNOCzmSLvbzQb772MRrmktCXYT8ZoAt7dn86UmqpTJZ8NSxIccSXG5o7JJ+5U1mJAKP4T25iUA= Received: by 10.90.27.13 with SMTP id a13mr1740777aga.1178200561350; Thu, 03 May 2007 06:56:01 -0700 (PDT) Received: by 10.90.27.8 with HTTP; Thu, 3 May 2007 06:56:01 -0700 (PDT) Message-ID: <7bcefdb70705030656md1286f1x74ab7a6be43421e7@mail.gmail.com> Date: Thu, 3 May 2007 15:56:01 +0200 From: "tante leen" To: lk.hensbergen@quicknet.nl Subject: Belangrijk Torrent Nieuws MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_19545_13217350.1178200561290" Received-SPF: X-Spam-Status: No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_50, HTML_10_20,HTML_MESSAGE,RCVD_BY_IP,UPPERCASE_75_100 autolearn=no version=3.0.1 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: leetante@gmail.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto ------=_Part_19545_13217350.1178200561290 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline BELANGRIJK NIEUWS !!!!!!! DOOR ONENIGHEID IN DE STAFF ZIJN WIJ GESTOPT OP POWERLIQUID EN AMZINGFAST DUS DE OUDE EXPOTO STAFF GAAT NU ZELF EEN TORRENTSITE BEGINNEN EN GELOOF ONS WE ZULLEN HEM WEER GROOT MAKEN EN GOED DUS WORDT OOK LID VAN ONZE SITE EN STEUN ONS OM ER WEER EEN MOOIE SITE VAN TE MAKEN !!!!! DUS ELKE DONATIE IS DAN OOK VAN HARTE WELKOM , MAAR JE BENT HET NIET VERPLICHT http://www.flowextreme.org/ EN SCHRIJF JE DAN GRATIS IN TEVENS KAN U OOK WEER STEMMEN ZODAT WIJ OOK EEN LEUK PLAATSJE KRIJGEN IN DE DUTH TOP 200 DOOR OP DEZE LINK TE KLIKKEN http://www.uranking.com/vote.asp?member=45730 WE KUNNEN OP DIT MOMENT NOG NIET VEEL UPLOADEN, OMDAT WE ZITTEN TE WACHTEN OP DE UPLOADESERVER MAAR ALS DIE ER EENMAAL IS WORDT HET WEER ECHT EEN GOEDE TRACKER MET EEN HOOP BEKENDE GEZICHTEN DUS WIL JE GRAAG UPLOADER WORDEN MELD JE DAN SNEL AAN , WANT WE KUNNEN JULLIE HULP NU ECHT GOED GEBRUIKEN MVGV HET FLOWEXTREME TEAM ------=_Part_19545_13217350.1178200561290 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline

BELANGRIJK NIEUWS !!!!!!!

DOOR ONENIGHEID IN DE STAFF ZIJN WIJ GESTOPT OP POWERLIQUID EN AMZINGFAST

DUS DE OUDE EXPOTO STAFF GAAT NU ZELF EEN TORRENTSITE BEGINNEN
EN GELOOF ONS WE ZULLEN HEM WEER GROOT MAKEN EN GOED

DUS WORDT OOK LID VAN ONZE SITE EN STEUN ONS OM ER WEER EEN MOOIE SITE VAN TE MAKEN !!!!!
DUS ELKE DONATIE IS DAN OOK VAN HARTE WELKOM , MAAR JE BENT HET NIET VERPLICHT

http://www.flowextreme.org/  EN SCHRIJF JE DAN GRATIS IN

TEVENS KAN U OOK WEER STEMMEN ZODAT WIJ OOK EEN LEUK PLAATSJE KRIJGEN IN DE DUTH TOP 200
DOOR OP DEZE LINK TE KLIKKEN

http://www.uranking.com/vote.asp?member=45730  

WE KUNNEN OP DIT MOMENT NOG NIET VEEL UPLOADEN, OMDAT WE ZITTEN TE WACHTEN OP DE UPLOADESERVER
MAAR ALS DIE ER EENMAAL IS WORDT HET WEER ECHT EEN GOEDE TRACKER MET EEN HOOP BEKENDE GEZICHTEN

DUS WIL JE GRAAG UPLOADER WORDEN MELD JE DAN SNEL AAN , WANT WE KUNNEN JULLIE HULP NU ECHT GOED GEBRUIKEN

MVGV HET FLOWEXTREME TEAM

------=_Part_19545_13217350.1178200561290-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu May 03 22:45:50 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjiBO-0003bq-8A; Thu, 03 May 2007 22:45:46 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 03 May 2007 22:45:03 +0200 (CEST) Received: from mta-1.ms.rz.rwth-aachen.de ([134.130.7.72]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjiAP-0003Wn-JJ for linux-crypto@nl.linux.org; Thu, 03 May 2007 22:44:45 +0200 Received: from circe ([134.130.3.36]) by mta-1.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHH007WQGAJY900@mta-1.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Thu, 03 May 2007 22:44:43 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Thu, 03 May 2007 22:44:43 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l43Kih9t030105 for ; Thu, 03 May 2007 22:44:43 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 5A3AC5B7D4 for ; Thu, 03 May 2007 22:44:43 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16557-07 for ; Thu, 03 May 2007 22:44:42 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id E02735B775 for ; Thu, 03 May 2007 22:44:42 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id 9FE8D1A6175; Thu, 03 May 2007 22:44:50 +0200 (CEST) Date: Thu, 03 May 2007 22:44:50 +0200 From: markus reichelt Subject: Re: Linux distro w/loop-aes In-reply-to: <20070502202641.204800@gmx.net> To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070503204450.GA4187@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=dDRMvlgZJXvWKvBx Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --dDRMvlgZJXvWKvBx Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Peter_22@gmx.de wrote: > > Change of status, I'm currently working on it.=20 > >=20 > You work on what? Which distro is it? I'm a slackware user (as indirectly mentioned before) so I work on the slackware installer. > I suppose SuSE will never integrate loop-aes. They did their best > to spoil each kernel since I started. Ubuntu lacks RAID support in > the graphical installer even in the latest release. No, we are far > from a distro that asks for a memory stick to save your root gpg > files on it. Very far. Nevertheless, I appreciate every step > forward in this area. Well, I've got it working (proof-of-concept), but the setup is somewhat messy... Long story short, One has to know what one is doing, most likely there won't be the infamous Point'n'Click-interface due to the nature of a typical slackware install. But I have some ideas of making life more comfortable in this regard.... will put up a draft / roadmap when I'm confident about beta testers. --=20 left blank, right bald --dDRMvlgZJXvWKvBx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGOknCLMyTO8Kj/uQRAta1AKCCVAzLI8NF3+v+FcYkyI+5zSTB9QCeOskr Lhks4UMW35lvAZ5U0Kw4900= =t4a+ -----END PGP SIGNATURE----- --dDRMvlgZJXvWKvBx-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 04 00:55:11 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjkCb-0006Mq-4N; Fri, 04 May 2007 00:55:09 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 04 May 2007 00:54:41 +0200 (CEST) Received: from mx01.hinterhof.net ([83.137.99.114]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjkBx-0006JM-D2 for linux-crypto@nl.linux.org; Fri, 04 May 2007 00:54:29 +0200 Received: from localhost (localhost [127.0.0.1]) by mx01.hinterhof.net (Postfix) with ESMTP id 0808EFF99 for ; Fri, 4 May 2007 00:24:14 +0200 (CEST) Received: from dp.vpn.nusquama.org (p54a7ee1e.dip.t-dialin.net [84.167.238.30]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "dp.vpn.nusquama.org", Issuer "Max Vozeler" (verified OK)) by mx01.hinterhof.net (Postfix) with ESMTP id B4546FF59 for ; Fri, 4 May 2007 00:24:13 +0200 (CEST) Received: by dp.vpn.nusquama.org (Postfix, from userid 1000) id 682972D9B09; Fri, 4 May 2007 00:23:17 +0200 (CEST) Date: Fri, 4 May 2007 00:23:17 +0200 From: Max Vozeler To: linux-crypto@nl.linux.org Subject: Re: Linux distro w/loop-aes Message-ID: <20070503222316.GA17107@dp.vpn.nusquama.org> Mail-Followup-To: linux-crypto@nl.linux.org References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070502202641.204800@gmx.net> Received-SPF: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: max@nusquama.org Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi Peter, On Wed, May 02, 2007 at 10:26:41PM +0200, Peter_22@gmx.de wrote: > No, we are far from a distro that asks for a memory stick to save > your root gpg files on it. Very far. What makes you think so? FWIW, this is an itch that has scratched me for a while now and I've only stopped working on it because our code was frozen for release. I've already reserved some weekends for adding the support for keys on removable media to debian-installer in the next few weeks. I realize that this is won't be directly useful to users of other Linux distributions, but I wouldn't say we (as in the free software community) are far away from such features, at all :-) Speaking for debian-installer (the only installer I have a good enough understanding of), I think most of the infrastructure is in fact already there. For example, much of the code required for accessing removable media can be shared with other parts of the installer that handle the loading of firmware or updated kernel modules. I would think this is not much different with other distribution installers. If they already handle e.g. loading of pre-configuration from floppy or USB media, it may not be much work to extend it for write access and generating/storing the keys. cheers, Max - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 04 01:12:36 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjkTQ-0005oK-Al; Fri, 04 May 2007 01:12:32 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 04 May 2007 01:12:17 +0200 (CEST) Received: from mx01.hinterhof.net ([83.137.99.114]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HjkSb-0005nw-1L for linux-crypto@nl.linux.org; Fri, 04 May 2007 01:11:41 +0200 Received: from localhost (localhost [127.0.0.1]) by mx01.hinterhof.net (Postfix) with ESMTP id CF4CAFF99 for ; Fri, 4 May 2007 01:12:29 +0200 (CEST) Received: from dp.vpn.nusquama.org (p54a7ee1e.dip.t-dialin.net [84.167.238.30]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "dp.vpn.nusquama.org", Issuer "Max Vozeler" (verified OK)) by mx01.hinterhof.net (Postfix) with ESMTP id 5D3F3FF59 for ; Fri, 4 May 2007 01:12:29 +0200 (CEST) Received: by dp.vpn.nusquama.org (Postfix, from userid 1000) id E96412D9B09; Fri, 4 May 2007 01:11:33 +0200 (CEST) Date: Fri, 4 May 2007 01:11:33 +0200 From: Max Vozeler To: linux-crypto@nl.linux.org Subject: Re: Linux distro w/loop-aes Message-ID: <20070503231133.GA28342@dp.vpn.nusquama.org> Mail-Followup-To: linux-crypto@nl.linux.org References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070503204450.GA4187@tatooine.rebelbase.local> Received-SPF: X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: max@nusquama.org Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi markus, On Thu, May 03, 2007 at 10:44:50PM +0200, markus reichelt wrote: > * Peter_22@gmx.de wrote: > > > > Change of status, I'm currently working on it. > > > > > You work on what? Which distro is it? > > I'm a slackware user (as indirectly mentioned before) so I work on > the slackware installer. Hey, cool that you're working on this for slackware. :-) > Well, I've got it working (proof-of-concept), but the setup is > somewhat messy... Long story short, One has to know what one is > doing, most likely there won't be the infamous > Point'n'Click-interface due to the nature of a typical slackware > install. But I have some ideas of making life more comfortable in > this regard.... will put up a draft / roadmap when I'm confident > about beta testers. Just a thought: Reading your mail I went through the issues I came across doing similar for debian-installer -- and came to think that some of those issues probably affect all installers independent of the distribution to be installed. For example, the small amount of entropy gathered up to the point of key generation. I think it could be interesting to share some ideas and maybe code in this area. Like, to overcome the small amount of entropy, in Debian the user is presented with a text entry box and asked to type random characters into it - A progress bar shows how much mindless typing remains ;-) This is not exactly great, and I would be interested in discussing other approaches to the problem. E.g. we could try to take advantage of hardware RNGs - but how to detect them? hw_random used to autoload and provide a /dev/hwrandom (IIRC) on this system here but blocked reads forever as the chipset doesn't really have an RNG. Another idea was to just trigger any disk IO and hope that the IDE/SCSI driver contributes entropy this way. Or perhaps using audio/video-entropyd - but are they reliable enough on their own or should their output be fed through something like rngd to be safe? Or should we just use /dev/urandom? Regarding the implementation, large parts of our code are specific to the Debian partitioning tool (partman) and the debconf interface used in the installer, but maybe some bits are also applicable or interesting for your slackware implementation, maybe blockdev-wipe which is like dd if=/dev/zero with progress output. You can find most of this code at [1] and there is some discussion at [2] and also spread in the debian-boot list archives. Happy hacking and looking forward to your results :-) cheers, Max -- 1: svn://svn.debian.org/wsvn/d-i/trunk/packages/partman/partman-crypto 2: http://wiki.debian.org/DebianInstaller/PartmanCrypto - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat May 05 00:45:36 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hk6Wq-0001FT-04; Sat, 05 May 2007 00:45:32 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 05 May 2007 00:44:51 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Hk6Vu-000197-Sf for linux-crypto@nl.linux.org; Sat, 05 May 2007 00:44:34 +0200 Received: (qmail 9165 invoked by uid 0); 4 May 2007 22:42:43 -0000 Received: from 84.175.73.136 by www144.gmx.net with HTTP; Sat, 05 May 2007 00:42:43 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Sat, 05 May 2007 00:42:44 +0200 From: Peter_22@gmx.de In-Reply-To: <20070503222316.GA17107@dp.vpn.nusquama.org> Message-ID: <20070504224244.21310@gmx.net> MIME-Version: 1.0 References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503222316.GA17107@dp.vpn.nusquama.org> Subject: Re: Linux distro w/loop-aes To: Max Vozeler , linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX19iEoB7Xipi9oIbS5qYW77GJZf4N+/Nvk2J3w+xgY i1ESCEcILvWzz6y0kc0amb7OeD/CzjXJPmdQ== Content-Transfer-Encoding: 8bit X-GMX-UID: 1o8Dc297bmwoQ6YZPjdLIvpPUzc4cpHG Received-SPF: X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -------- Original-Nachricht -------- Datum: Fri, 4 May 2007 00:23:17 +0200 Von: Max Vozeler An: linux-crypto@nl.linux.org > > No, we are far from a distro that asks for a memory stick to save > > your root gpg files on it. Very far. > > What makes you think so? What makes me so pessimistic about full disk encryption beginning with the installation? Well, first the fact that I had to struggle with every single SuSE distro since I started with 8.1. Two hours ago I had a (deeper) look at Kubuntu 7.04 amd64 regarding its loop-aes capabilities. It was embarrassing. I found your name several times when people asked where they may get the appropriate packages to build the loop module. As of today: - ubuntu lacks loop-aes (feisty) - debian (!) packages have to be used as interim solution to get it working somehow - the ubuntu 7.04 DVD starts a live system where rmmod loop fails - not even a successful build of the loop.ko can be verified from within the live system To avoid misunderstandings, I appreciate your engagement in debian and ubuntu! My words are not criticism but ubuntu isnŽt much closer to loop-aes than SuSE. With regard to FULL disk encryption I have serious doubts if the majority of debian/ubuntu users want such deep interventions in the kernel configuration. Up to now I always had to build a special kernel to include vfat, usb, serial ata, native language support and the like. For this evening it looks like it will remain the same even with debian and ubuntu anyway. Nonetheless, ubuntu and SuSE are fine distros with installers that most people are able to use. What you build upon this basis remains up to you. > If they already handle e.g. loading of > pre-configuration from floppy or USB media, it may not be much work > to extend it for write access and generating/storing the keys. "USB media" invites me to explain why I am so crazy about this option. USB media are no bulky boxes! It is more like this: Dimensions: 15mm x 11mm x 1mm(L x W x D) http://sandisk.com/Products/ProductInfo.aspx?ID=1195 And donŽt forget, the cheap 128 MB version is already oversized. -- "Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat May 05 00:57:21 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hk6iF-0002p3-O5; Sat, 05 May 2007 00:57:19 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 05 May 2007 00:57:05 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Hk6hP-0002eO-Uc for linux-crypto@nl.linux.org; Sat, 05 May 2007 00:56:28 +0200 Received: (qmail 23955 invoked by uid 0); 4 May 2007 22:54:36 -0000 Received: from 84.175.73.136 by www051.gmx.net with HTTP; Sat, 05 May 2007 00:54:36 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Sat, 05 May 2007 00:54:36 +0200 From: Peter_22@gmx.de In-Reply-To: <20070503204450.GA4187@tatooine.rebelbase.local> Message-ID: <20070504225436.21320@gmx.net> MIME-Version: 1.0 References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> Subject: Re: Linux distro w/loop-aes To: markus reichelt , linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX1+UkIsQe76U1GSKvXhX/EcrrYqO/cvQNZa8+V3pdu 2/j3r2UnKitZm7SHX1KTHJz1UlxbLSUMQUqw== Content-Transfer-Encoding: 8bit X-GMX-UID: noADc2h7bmwoQ6YZPjdL8oRPUzc4clFg Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto -------- Original-Nachricht -------- Datum: Thu, 03 May 2007 22:44:50 +0200 Von: markus reichelt An: linux-crypto@nl.linux.org Betreff: Re: Linux distro w/loop-aes > I'm a slackware user (as indirectly mentioned before) so I work on > the slackware installer. My tour through the linux distros didnŽt lead me to slackware so far. Seems to be a rather remote place. > Well, I've got it working (proof-of-concept), but the setup is > somewhat messy... Long story short, One has to know what one is > doing, most likely there won't be the infamous > Point'n'Click-interface due to the nature of a typical slackware > install. But I have some ideas of making life more comfortable in > this regard.... will put up a draft / roadmap when I'm confident > about beta testers. Respecting your engagement for slackware I still guess more people could profit from your efforts if you did it for the debian community. Do people choosing slackware care about compiling a new kernel or do they even seek a graphical installer? Best regards Peter -- "Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat May 05 02:54:16 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hk8XM-00014f-MZ; Sat, 05 May 2007 02:54:12 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 05 May 2007 02:53:47 +0200 (CEST) Received: from panther.misty.com ([198.137.254.71]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hk8WY-0000vF-Np for linux-crypto@nl.linux.org; Sat, 05 May 2007 02:53:22 +0200 X-Envelope-From: teners@bh90210.net Received: from smtpserver1.misty.com (localhost [127.0.0.1]) by panther.misty.com (8.13.8/8.13.8) with ESMTP id l44NlWYr022962; Fri, 4 May 2007 19:47:34 -0400 (EDT) Received: from [12.109.56.182] ([12.109.56.182]) (authenticated bits=0) by smtpserver1.misty.com (8.13.8/8.13.8) with ESMTP id l44NlSGV022959; Fri, 4 May 2007 19:47:30 -0400 (EDT) User-Agent: Microsoft-Entourage/11.3.3.061214 Date: Fri, 04 May 2007 19:47:25 -0400 Subject: Re: Linux distro w/loop-aes From: "IT3 Stuart Blake Tener, USN" To: , Max Vozeler , Message-ID: Thread-Topic: Linux distro w/loop-aes Thread-Index: AceOppDlz1owSPqZEdum3AANkzM2/g== In-Reply-To: <20070504224244.21310@gmx.net> Mime-version: 1.0 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,MIME_QP_LONG_LINE autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: teners@bh90210.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Mr. Vozeler, et alia: It is particularly instructive that of the congress of users and client= s that I frequent with regularity, a notable number have begun to assert instantiate Ubuntu installations. When queried as to what drove their compunction to do so, in more than some several cases I received responses not unlike: Why would I not try it? I get Linux with the "Apple Approach" o= f "it just works". Predicated upon a congress of users whom would exemplify such thought i= n their choice for an OS alternative to Windows, or in order to provide a les= s costly support driven alternative to other Linux based OS distributions, th= e fact that they are driven by this modicum of thought does not and should no= t otherwise limit their ability to choose to assert a posture whereby the dis= k is fully encrypted from the moment installation reaches finalization. Is there some reason why kernels could not be built on the fly during the course of installation capable of supporting the mixture of options tha= t a user would otherwise build in when rolling their own kernel post install time? Additionally, the provisioning of multiple choice kernels onto the distribution media would provide the user's a choice of options neither impossible, nor unattractive in being able to engage loop-aes as a potentia= l encryption software. However, I do believe the best choice for the future will be TrueCrypt since it is planned to be supported on MacOS as well as what is already in force with support for Linux and Windows (thought I do think loop-aes does appear to be one of the best products available of its kind in the open source market). Very Respectfully Submitted, Stuart B. Tener, IT3, USNR, N3GWG Teners AT BH90210 DOTT COM (310) 358-0202 Beverly Hills, CA / Las Vegas, NV / Washington, DC / Philadelphia, PA On 5/4/07 6:42 PM, "Peter_22@gmx.de" wrote: > -------- Original-Nachricht -------- > Datum: Fri, 4 May 2007 00:23:17 +0200 > Von: Max Vozeler > An: linux-crypto@nl.linux.org >=20 >>> No, we are far from a distro that asks for a memory stick to save >>> your root gpg files on it. Very far. >>=20 >> What makes you think so? >=20 > What makes me so pessimistic about full disk encryption beginning with th= e > installation? Well, first the fact that I had to struggle with every sing= le > SuSE distro since I started with 8.1. Two hours ago I had a (deeper) look= at > Kubuntu 7.04 amd64 regarding its loop-aes capabilities. It was embarrassi= ng. I > found your name several times when people asked where they may get the > appropriate packages to build the loop module. As of today: > - ubuntu lacks loop-aes (feisty) > - debian (!) packages have to be used as interim solution to get it worki= ng > somehow > - the ubuntu 7.04 DVD starts a live system where rmmod loop fails > - not even a successful build of the loop.ko can be verified from within = the > live system >=20 > To avoid misunderstandings, I appreciate your engagement in debian and ub= untu! > My words are not criticism but ubuntu isn=B4t much closer to loop-aes than = SuSE. >=20 > With regard to FULL disk encryption I have serious doubts if the majority= of > debian/ubuntu users want such deep interventions in the kernel configurat= ion. > Up to now I always had to build a special kernel to include vfat, usb, se= rial > ata, native language support and the like. For this evening it looks like= it > will remain the same even with debian and ubuntu anyway. Nonetheless, ubu= ntu > and SuSE are fine distros with installers that most people are able to us= e. > What you build upon this basis remains up to you. >=20 >> If they already handle e.g. loading of >> pre-configuration from floppy or USB media, it may not be much work >> to extend it for write access and generating/storing the keys. >=20 > "USB media" invites me to explain why I am so crazy about this option. US= B > media are no bulky boxes! It is more like this: > Dimensions: 15mm x 11mm x 1mm(L x W x D) > http://sandisk.com/Products/ProductInfo.aspx?ID=3D1195 > And don=B4t forget, the cheap 128 MB version is already oversized. --=20 Very Respectfully, IT3 Stuart Blake Tener, USN Beverly Hills, California Amateur Radio Call Sign: N3GWG (Extra) email: teners@bh90210.net phone: +(1) 310.358.0202 (Beverly Hills, CA) phone: +(1) 215.338.6005 (Philadelphia, PA) phone: +(1) 702.988.3989 (Las Vegas, NV) E-Fax: +(1) 915.773.0935 (Telecopier) Military emails (checked monthly until remote NMCI access is secured) NIPRNET: stuart.tener@navy.mil / tenerstu@nro.mil SIPRNET: NONE TS/SCI: tenerstu@nro.ic.gov (GWAN) Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat May 05 14:58:23 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkJq7-0007mr-71; Sat, 05 May 2007 14:58:19 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 05 May 2007 14:57:42 +0200 (CEST) Received: from qb-out-0506.google.com ([72.14.204.225]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkJp8-0007Sf-Hh for linux-crypto@nl.linux.org; Sat, 05 May 2007 14:57:18 +0200 Received: by qb-out-0506.google.com with SMTP id p32so2147016qba for ; Sat, 05 May 2007 05:55:57 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:subject:mime-version:content-type; b=hPwbri9tn2579KoRPkHZUU/OYHmB24URpLZ6QYZAmuzILirT4+2WKLWouKflqVS9hmwh0SAVGTHIA0r4iiLnDz+n0Jvhuemlad8D8qr7BfHj7sRGjOKI7+af3lT8jRK2GQvOCzOJ0i5G08ATi0+ekzK54FjVmUuG7okacrELMvI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:subject:mime-version:content-type; b=n5l763EOy/bKdbb5O62QpxZQzpN1MzTSG/g5I0YtKx3pV2TluQjESlr0TmrFdnr9tdbeEAtolcHJWFXr874nqZJ/D1OyM4cHnIogm7p11ae2wBzVq3rfZ9EvshMKINZbnjFiQ2ccpwLJ3zH2fxuBWsMTRaPQishiPQ6YtA8ZeeE= Received: by 10.100.125.5 with SMTP id x5mr3469349anc.1178368921118; Sat, 05 May 2007 05:42:01 -0700 (PDT) Received: by 10.100.142.14 with HTTP; Sat, 5 May 2007 05:42:00 -0700 (PDT) Message-ID: Date: Sat, 5 May 2007 13:42:01 +0100 From: "peter bryant" Subject: HELP CLAIM UNCLAIMED PRIZE MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_55350_977370.1178368921037" Bcc: Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-0.8 required=5.0 tests=ALL_TRUSTED,BAYES_50, HTML_30_40,HTML_MESSAGE,MISSING_HEADERS,RCVD_BY_IP,SUBJ_ALL_CAPS, UNCLAIMED_MONEY autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: petbryantt1@googlemail.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto ------=_Part_55350_977370.1178368921037 Content-Type: text/plain; charset=BIG5; format=flowed Content-Transfer-Encoding: base64 Content-Disposition: inline Kk1SLiBQRVRFUiBCUllBTlQKRW1haWw6ICpwZXRlcmJyeWFudDA3QGFvbC5jby51azxodHRwOi8v d2VibWFpbC5hb2wuY29tLzI1Njk4L2FpbS9lbi11cy9tYWlsL2Rpc3BsYXktbWVzc2FnZS5hc3B4 Iz4KCioqCipSRTogSEVMUCBDTEFJTSBVTkNMQUlNRUQgTE9UVEVSWSBQUklaRQoKSSBhbSBhIHN0 YWZmIG9mIFVLIE5hdGlvbmFsIExvdHRlcnksIHdob3NlIGR1dHkgaXMgdG8gY29sbGF0ZS9jb21w dXRlCnB1cmNoYXNlZCwgcGFpZCBhbmQgdW5jbGFpbWVkIGxvdHRlcnkgdGlja2V0cyBiZWZvcmUg YW5kIGFmdGVyIGVhY2ggZHJhdy4gSW4KdGhlIGNvdXJzZSBvZiBteSBkdXR5LCBJIGRpc2NvdmVy IGEgdGlja2V0IG51bWJlciB0aGF0IHdvbiBOaW5lIG1pbGxpb24KdGhyZWUgaHVuZHJlZCBhbmQg ZWlnaHR5IHR3byB0aG91c2FuZCBmb3VyIGh1bmRyZWQgYW5kIG5pbmV0eSBzaXggcG91bmRzCiii RzksMzgyLDQ5Ni4wMCkgZnJvbSB0aGUgJydMb3R0byBkcmF3JycgaGVsZCBpbiAyMDA0LCBhbmQg ZXZlciBzaW5jZSBub2JvZHkKaGFzIGNvbWUgZm9yd2FyZCB0byBtYWtlIGNsYWltcy4KCk15IHJl YXNvbiBmb3IgY29udGFjdGluZyB5b3UgaXMgdGhhdCBJIHdhbnQgeW91IHRvIHN0YW5kIG91dCB0 byB0aGUgbG90dGVyeQpjb21wYW55IGFzIHRoZSBwbGF5ZXIgLyB3aW5uZXIgb2YgdGhlIHByaXpl LiBCeSBwcmVzZW50aW5nIHRoZSB0aWNrZXQKaW5mb3JtYXRpb24gdG8gdGhlIGNvbXBhbnkgeW91 IHdvdWxkIGJlIGVudGl0bGVkIHRvIHRoZSB3aW5uaW5nIHByaXplIG9mIHRoZQqiRzksMzgyLDQ5 Ni4wMCBhdXRvbWF0aWNhbGx5LgoKTk9URSBUSEUgRk9MTE9XSU5HOwoKMS4gWW91IGhhdmUgbm90 IHdvbiBhIGxvdHRlcnkgcHJpemU7IEkgaGF2ZSBjb250YWN0ZWQgeW91IGluIGdvb2QgZmFpdGgg Zm9yCnVzIHRvIGNsYWltIHRoZSBwcml6ZSB3aXRob3V0IHRoZSBrbm93bGVkZ2Ugb2YgdGhlIGxv dHRlcnkgY29tcGFueS4gKgoqMi4gSSd2ZSB0aGUgdGlja2V0IGNvbXBsZXRlIGluZm9ybWF0aW9u IChkdXBsaWNhdGUgY29weSBvZiB0aGUgdGlja2V0LCB0aGUKcmV0YWlsIHN0b3JlIG5hbWUgYW5k IGFkZHJlc3MgdGhlIHRpY2tldCB3YXMgcHVyY2hhc2VkKSoKKjMuIEhhdmUgY29udGFjdGVkIHlv dSBpbiBnb29kIGZhaXRoIGZvciB1cyB0byBjbGFpbSB0aGUgcHJpemUsIHdpdGhvdXQgdGhlCmtu b3dsZWRnZSBvZiB0aGUgTG90dGVyeSBDb21wYW55LioKKjQuIEFzIHN0YWZmIG9mIHRoZSBjb21w YW55IG15IGRpcmVjdCBpbnZvbHZlbWVudCBzaG91bGQgbm90IGJlIG1lbnRpb24gaW4KdGhlIHBy b2Nlc3Mgb2YgbWFraW5nIHRoZSBjbGFpbSwgYnV0IEknbGwgZGlyZWN0IC9jb25kdWN0IHlvdSBv biBob3cgdG8KYXBwbHkgZm9yIHByaXplIGluIGFjY29yZGFuY2UgdG8gdGhlIFVLIE5hdGlvbmFs IGxvdHRlcnkgY2xhaW0gcG9saWN5IGZvcgpsb3N0IGFuZCBmb3VuZCB0aWNrZXQgaW5mb3JtYXRp b24uKgoqNS4gT24geW91ciBhY2NlcHRhbmNlIHRvIGNsYWltIHRoZSBwcml6ZSwgYW0gd2lsbGlu ZyB0byBzaGFyZSB0aGUgd2lubmluZwpwcml6ZSB3aXRoIHlvdSBvbiBhIDUwIKFWIDUwIGJhc2Vz ICiiRzQsNjkxLDI0OC4wMCBmb3IgZWFjaCBvZiB1cykqCio2LiBJZiBpbnRlcmVzdGVkIGluIHdv cmtpbmcgd2l0aCBtZSwgcGxlYXNlIGNvbnRhY3QgbWUgYnkgcGhvbmUsIGZheCBvcgplbWFpbCBz dGF0ZSBhYm92ZS4KCk1vc3QgaW1wb3J0YW50bHk6IElmIEkvd2UgZG8gbm90IGNsYWltIHRoaXMg d2lubmluZyBwcml6ZSwgaXQgd2lsbAphdXRvbWF0aWNhbGx5IGJlIGZvcmZlaXRlZCBhbmQgYmUg dHJhbnNmZXJyZWQgdG8gdGhlIE5hdGlvbmFsIExvdHRlcnkKRGlzdHJpYnV0aW9uIEZ1bmQgb3Ig dGhlIE9seW1waWMgTG90dGVyeSBEaXN0cmlidXRpb24gRnVuZCAoQVMgVEhFIENPTVBBTlkKTUFL RVMgVVMvR0VORVJBTCBQVUJMSUMgQkVMSUVWRSksIGJ1dCB5b3UgYW5kIEkga25vdyB0aGF0IHRo ZSBmdW5kcwpldmVudHVhbGx5IGZpbmRzIGl0cyB3YXkgdG8gdGhlIGNvbXBhbnkncyB0b3Agb2Zm aWNpYWwncyBwcml2YXRlIHBvY2tldApkaXJlY3RseSBvciBpbmRpcmVjdGx5IG92ZXIgdGltZS4q CipJIGF3YWl0IHlvdXIgcmVzcG9uc2Ugb24gdGhlIGFib3ZlLgoKWW91cnMgdHJ1bHksCk1SLiBQ RVRFUiBCUllBTlQKRW1haWw6ICpwZXRlcmJyeWFudDA3QGFvbC5jby51azxodHRwOi8vd2VibWFp bC5hb2wuY29tLzI1Njk4L2FpbS9lbi11cy9tYWlsL2Rpc3BsYXktbWVzc2FnZS5hc3B4Iz4K ------=_Part_55350_977370.1178368921037 Content-Type: text/html; charset=BIG5 Content-Transfer-Encoding: base64 Content-Disposition: inline PGRpdj48Zm9udCBmYWNlPSJjb21pYyBzYW5zIG1zIj48c3Ryb25nPk1SLiBQRVRFUiBCUllBTlQ8 YnI+RW1haWw6IDwvc3Ryb25nPjxhIGNsYXNzPSJlbWFpbERpc3BsYXlUZXh0IiB0aXRsZT0icGV0 ZXJicnlhbnQwN0Bhb2wuY28udWsiIG9uY2xpY2s9InJldHVybiBIYW5kbGVBZGRyZXNzQ2xpY2so bXNnQ29udGV4dC50b0FkZHJMaXN0Lmxpc3RbMF0pOyIgaHJlZj0iaHR0cDovL3dlYm1haWwuYW9s LmNvbS8yNTY5OC9haW0vZW4tdXMvbWFpbC9kaXNwbGF5LW1lc3NhZ2UuYXNweCMiPgo8Zm9udCBm YWNlPSJjb21pYyBzYW5zIG1zIj5wZXRlcmJyeWFudDA3QGFvbC5jby51azwvZm9udD48L2E+Jm5i c3A7PC9mb250PjwvZGl2Pgo8ZGl2PjxzdHJvbmc+PC9zdHJvbmc+Jm5ic3A7PC9kaXY+CjxkaXY+ PGZvbnQgZmFjZT0iY29taWMgc2FucyBtcyI+PHN0cm9uZz5SRTogSEVMUCBDTEFJTSBVTkNMQUlN RUQgTE9UVEVSWSBQUklaRTxicj4mbmJzcDs8YnI+SSBhbSBhIHN0YWZmIG9mIFVLIE5hdGlvbmFs IExvdHRlcnksIHdob3NlIGR1dHkgaXMgdG8gY29sbGF0ZS9jb21wdXRlIHB1cmNoYXNlZCwgcGFp ZCBhbmQgdW5jbGFpbWVkIGxvdHRlcnkgdGlja2V0cyBiZWZvcmUgYW5kIGFmdGVyIGVhY2ggZHJh dy4gSW4gdGhlIGNvdXJzZSBvZiBteSBkdXR5LCBJIGRpc2NvdmVyIGEgdGlja2V0IG51bWJlciB0 aGF0IHdvbiBOaW5lIG1pbGxpb24gdGhyZWUgaHVuZHJlZCBhbmQgZWlnaHR5IHR3byB0aG91c2Fu ZCBmb3VyIGh1bmRyZWQgYW5kIG5pbmV0eSBzaXggcG91bmRzICiiRzksMzgyLAo0OTYuMDApIGZy b20gdGhlICcnTG90dG8gZHJhdycnIGhlbGQgaW4gMjAwNCwgYW5kIGV2ZXIgc2luY2Ugbm9ib2R5 IGhhcyBjb21lIGZvcndhcmQgdG8gbWFrZSBjbGFpbXMuPGJyPiZuYnNwOzxicj5NeSByZWFzb24g Zm9yIGNvbnRhY3RpbmcgeW91IGlzIHRoYXQgSSB3YW50IHlvdSB0byBzdGFuZCBvdXQgdG8gdGhl IGxvdHRlcnkgY29tcGFueSBhcyB0aGUgcGxheWVyIC8gd2lubmVyIG9mIHRoZSBwcml6ZS4gQnkg cHJlc2VudGluZyB0aGUgdGlja2V0IGluZm9ybWF0aW9uIHRvIHRoZSBjb21wYW55IHlvdSB3b3Vs ZCBiZSBlbnRpdGxlZCB0byB0aGUgd2lubmluZyBwcml6ZSBvZiB0aGUgokc5LDM4MiwKNDk2LjAw IGF1dG9tYXRpY2FsbHkuIDxicj4mbmJzcDs8YnI+Tk9URSBUSEUgRk9MTE9XSU5HOzxicj4mbmJz cDs8YnI+MS4gWW91IGhhdmUgbm90IHdvbiBhIGxvdHRlcnkgcHJpemU7IEkgaGF2ZSBjb250YWN0 ZWQgeW91IGluIGdvb2QgZmFpdGggZm9yIHVzIHRvIGNsYWltIHRoZSBwcml6ZSB3aXRob3V0IHRo ZSBrbm93bGVkZ2Ugb2YgdGhlIGxvdHRlcnkgY29tcGFueS4gPC9zdHJvbmc+PC9mb250PjwvZGl2 PgoKPGRpdj48Zm9udCBmYWNlPSJjb21pYyBzYW5zIG1zIj48c3Ryb25nPjIuIEkndmUgdGhlIHRp Y2tldCBjb21wbGV0ZSBpbmZvcm1hdGlvbiAoZHVwbGljYXRlIGNvcHkgb2YgdGhlIHRpY2tldCwg dGhlIHJldGFpbCBzdG9yZSBuYW1lIGFuZCBhZGRyZXNzIHRoZSB0aWNrZXQgd2FzIHB1cmNoYXNl ZCk8L3N0cm9uZz48L2ZvbnQ+PC9kaXY+CjxkaXY+PGZvbnQgZmFjZT0iY29taWMgc2FucyBtcyI+ PHN0cm9uZz4zLiBIYXZlIGNvbnRhY3RlZCB5b3UgaW4gZ29vZCBmYWl0aCBmb3IgdXMgdG8gY2xh aW0gdGhlIHByaXplLCB3aXRob3V0IHRoZSBrbm93bGVkZ2Ugb2YgdGhlIExvdHRlcnkgQ29tcGFu eS48L3N0cm9uZz48L2ZvbnQ+PC9kaXY+CjxkaXY+PGZvbnQgZmFjZT0iY29taWMgc2FucyBtcyI+ PHN0cm9uZz40LiBBcyBzdGFmZiBvZiB0aGUgY29tcGFueSBteSBkaXJlY3QgaW52b2x2ZW1lbnQg c2hvdWxkIG5vdCBiZSBtZW50aW9uIGluIHRoZSBwcm9jZXNzIG9mIG1ha2luZyB0aGUgY2xhaW0s IGJ1dCBJJ2xsIGRpcmVjdCAvY29uZHVjdCB5b3Ugb24gaG93IHRvIGFwcGx5IGZvciBwcml6ZSBp biBhY2NvcmRhbmNlIHRvIHRoZSBVSyBOYXRpb25hbCBsb3R0ZXJ5IGNsYWltIHBvbGljeSBmb3Ig bG9zdCBhbmQgZm91bmQgdGlja2V0IGluZm9ybWF0aW9uLgo8L3N0cm9uZz48L2ZvbnQ+PC9kaXY+ CjxkaXY+PGZvbnQgZmFjZT0iY29taWMgc2FucyBtcyI+PHN0cm9uZz41LiBPbiB5b3VyIGFjY2Vw dGFuY2UgdG8gY2xhaW0gdGhlIHByaXplLCBhbSB3aWxsaW5nIHRvIHNoYXJlIHRoZSB3aW5uaW5n IHByaXplIHdpdGggeW91IG9uIGEgNTAgoVYgNTAgYmFzZXMgKKJHNCw2OTEsMjQ4LjAwIGZvciBl YWNoIG9mIHVzKTwvc3Ryb25nPjwvZm9udD48L2Rpdj4KPGRpdj48Zm9udCBmYWNlPSJjb21pYyBz YW5zIG1zIj48c3Ryb25nPjYuIElmIGludGVyZXN0ZWQgaW4gd29ya2luZyB3aXRoIG1lLCBwbGVh c2UgY29udGFjdCBtZSBieSBwaG9uZSwgZmF4IG9yIGVtYWlsIHN0YXRlIGFib3ZlLjxicj4mbmJz cDs8YnI+TW9zdCBpbXBvcnRhbnRseTogSWYgSS93ZSBkbyBub3QgY2xhaW0gdGhpcyB3aW5uaW5n IHByaXplLCBpdCB3aWxsIGF1dG9tYXRpY2FsbHkgYmUgZm9yZmVpdGVkIGFuZCBiZSB0cmFuc2Zl cnJlZCB0byB0aGUgTmF0aW9uYWwgTG90dGVyeSBEaXN0cmlidXRpb24gRnVuZCBvciB0aGUgT2x5 bXBpYyBMb3R0ZXJ5IERpc3RyaWJ1dGlvbiBGdW5kIChBUyBUSEUgQ09NUEFOWSBNQUtFUyBVUy9H RU5FUkFMIFBVQkxJQyBCRUxJRVZFKSwgYnV0IHlvdSBhbmQgSSBrbm93IHRoYXQgdGhlIGZ1bmRz IGV2ZW50dWFsbHkgZmluZHMgaXRzIHdheSB0byB0aGUgY29tcGFueSdzIHRvcCBvZmZpY2lhbCYj Mzk7cyBwcml2YXRlIHBvY2tldCBkaXJlY3RseSBvciBpbmRpcmVjdGx5IG92ZXIgdGltZS4KPC9z dHJvbmc+PC9mb250PjwvZGl2Pgo8ZGl2Pjxmb250IGZhY2U9ImNvbWljIHNhbnMgbXMiPjxzdHJv bmc+SSBhd2FpdCB5b3VyIHJlc3BvbnNlIG9uIHRoZSBhYm92ZS48YnI+Jm5ic3A7PGJyPllvdXJz IHRydWx5LDxicj5NUi4gUEVURVIgQlJZQU5UPGJyPkVtYWlsOiA8L3N0cm9uZz48YSBjbGFzcz0i ZW1haWxEaXNwbGF5VGV4dCIgdGl0bGU9InBldGVyYnJ5YW50MDdAYW9sLmNvLnVrIiBvbmNsaWNr PSJyZXR1cm4gSGFuZGxlQWRkcmVzc0NsaWNrKG1zZ0NvbnRleHQudG9BZGRyTGlzdC5saXN0WzBd KTsiIGhyZWY9Imh0dHA6Ly93ZWJtYWlsLmFvbC5jb20vMjU2OTgvYWltL2VuLXVzL21haWwvZGlz cGxheS1tZXNzYWdlLmFzcHgjIj4KPGZvbnQgZmFjZT0iY29taWMgc2FucyBtcyI+cGV0ZXJicnlh bnQwN0Bhb2wuY28udWs8L2ZvbnQ+PC9hPiZuYnNwOzwvZm9udD48L2Rpdj4K ------=_Part_55350_977370.1178368921037-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat May 05 19:13:05 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkNob-00021x-Ia; Sat, 05 May 2007 19:13:01 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 05 May 2007 19:12:31 +0200 (CEST) Received: from oviedo.mxwh.net ([72.34.55.76]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkNnt-0001uV-4U for linux-crypto@nl.linux.org; Sat, 05 May 2007 19:12:17 +0200 Received: from todo by oviedo.mxwh.net with local (Exim 4.63) (envelope-from ) id 1HkKaQ-0006ez-Da for linux-crypto@nl.linux.org; Sat, 05 May 2007 08:46:10 -0500 To: linux-crypto@nl.linux.org Subject: BancoPostaonline From: Poste.it Reply-To: BancoPostaonline@oviedo.mxwh.net MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit Message-Id: Date: Sat, 05 May 2007 08:46:10 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - oviedo.mxwh.net X-AntiAbuse: Original Domain - nl.linux.org X-AntiAbuse: Originator/Caller UID/GID - [32364 32002] / [47 12] X-AntiAbuse: Sender Address Domain - oviedo.mxwh.net X-Source: X-Source-Args: X-Source-Dir: Received-SPF: X-Spam-Status: No, score=2.5 required=5.0 tests=ALL_TRUSTED,BAYES_99, HTML_20_30,HTML_FONT_BIG,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY autolearn=no version=3.0.1 X-Spam-Level: ** X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Bancopostaonline@Poste.it Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto

Benvenuto in BancoPostaonline!

Caro socio,

Verifica il tuo conto BancoPostaonline

Questa operazione e fondamentale per la sicurezza del Suo conto!

Recentemente abbiamo notato dei tentativi sospetti di accesso al Suo conto di PosteItaliane da un IP address straniero e noi abbiamo motivi di credere che la Sua carta prepagata sia stata utilizzata dai terzi senza la Sua autorizzazione.
Se recentemente ha copiuto dei viaggi all’estero e quindi ha utilizzato la Sua carta prepagata PostPay, allora i tentativi insoliti di utilizzo potrebbero essere stati compiuti da Lei. Se invece non sia stato cosi, La consigliamo di accedere tramite il seguente collegamento alla nostra base di dati e seguire le istruzioni, in modo da proteggerLa da eventuali frode.

Contatta il seguente link:
https://www.poste.it/online/personale/login-home.fcc?TYPE
per confermare il conto.

Se scegliete di ignorare la nostra richiesta, purtroppo non avremo altra scelta che bloccare temporaneamente il Suo conto.

Se ha ricevuto questo avviso e non e il vero proprietario della carta prepagata di PosteItaliane, La informiamo che rappresenta una violazione della politica di PosteItaliane di sostituirsi ad un’altro utente di PosteItaliane. Tale azione puo anche rappresentare una violazione di leggi locali, nazionali e/o internazionali. PosteItaliane si impegna nell’applicazione della legge nel tentativo di combattere le evetuali frodi o furti. Le informazioni saranno fornite su richiesta alle agenzie legali per accertarsi che i falsi possessori siano proseguiti nella misura adeguata dalla legge.

Per maggiori informazioni consulta il Foglio Informativo e le Istruzioni operative per l'utilizzo di BancoPostaOnline (file .pdf)
Per assistenza tecnica: numero verde 803.160 (segui le istruzioni della guida vocale e scegli l'opzione Servizi internet)

Grazie per la Sua collaborazione, e di aver accettato di lavorare insieme a noi per la sicurezza del Suo conto.

Distinti saluti,
PosteItaliane,Reparto Di Rassegna Di Cliente


Poste.it E-mail ID 52r229adf234vsa81385po2

- Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon May 07 02:36:10 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkrCt-0002U2-QE; Mon, 07 May 2007 02:36:03 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 07 May 2007 02:35:19 +0200 (CEST) Received: from web3003.mail.tnz.yahoo.co.jp ([203.216.249.203]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HkrBv-0002SM-Ic for linux-crypto@nl.linux.org; Mon, 07 May 2007 02:35:03 +0200 Received: (qmail 30176 invoked by uid 60001); 7 May 2007 00:27:56 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:Received:X-RocketDSI:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fTul5eGujRbgoSkKML4vTbb3eJhA/Whr6Lip3/inUm3xPaZHwpyHq6uJ1d8d54ePRZ+GAxB94NkW5UxgRqVsJkVirlWIkU3vztYHEpklFfzb27KUF4zxOXGUSO/fRmzp ; Message-ID: <20070507002756.30174.qmail@web3003.mail.tnz.yahoo.co.jp> Received: from [213.136.118.47] by web3003.mail.tnz.yahoo.co.jp via HTTP; Mon, 07 May 2007 09:27:56 JST X-RocketDSI: i=203.216.249.203;s=w Date: Mon, 7 May 2007 09:27:56 +0900 (JST) From: "Mrs.Gloria Pelaez" Reply-To: mrsgloriapelaez101@yahoo.com.ph Subject: I am Mrs Gloria Pelaez Pls Act Asap. To: linux-crypto@nl.linux.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-2136051433-1178497676=:13467" Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_50,FROM_HAS_ULINE_NUMS, HTML_50_60,HTML_MESSAGE,RCVD_IN_SORBS_WEB autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: mrsgloria_mgp01@yahoo.co.jp Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --0-2136051433-1178497676=:13467 Content-Type: text/plain; charset=iso-2022-jp $B?7$7$$%a!<%k%"%I%l%9$r$*CN$i$;$7$^$9?7$7$$%a!<%k%"%I%l%9!'(B mrsgloria_mgp01@yahoo.co.jp Dearest one, I am Mrs Gloria Pelaez A complete citizen of Philippines . I am the Wife of Late Mr Emmanuel N.Pelaez of Philippines he worked with America Embassy as An Ambassador So i have something important i want you to handle in God,s glory Get back for more Details. Thanks God bless - Mrs.Gloria Pelaez --0-2136051433-1178497676=:13467 Content-Type: text/html; charset=iso-2022-jp
$B?7$7$$%a!<%k%"%I%l%9$r$*CN$i$;$7$^$9(B
$B?7$7$$%a!<%k%"%I%l%9!'(B mrsgloria_mgp01@yahoo.co.jp

Dearest one,

I am Mrs Gloria Pelaez A complete citizen of Philippines . I am the Wife of Late Mr Emmanuel N.Pelaez of Philippines he worked with America Embassy as An Ambassador So i have something important i want you to handle in God,s glory Get back for more Details.

Thanks God bless

- Mrs.Gloria Pelaez
--0-2136051433-1178497676=:13467-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon May 07 11:47:07 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hkzo3-00020P-FF; Mon, 07 May 2007 11:46:59 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 07 May 2007 11:46:27 +0200 (CEST) Received: from mta-1.ms.rz.rwth-aachen.de ([134.130.7.72]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkzmI-0001vq-Qm for linux-crypto@nl.linux.org; Mon, 07 May 2007 11:45:10 +0200 Received: from circe ([134.130.3.36]) by mta-1.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHO006R00EYNF90@mta-1.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Mon, 07 May 2007 11:44:58 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Mon, 07 May 2007 11:44:58 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l479ivga013447 for ; Mon, 07 May 2007 11:44:57 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 670305B7D4 for ; Mon, 07 May 2007 11:44:58 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07729-05 for ; Mon, 07 May 2007 11:44:57 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 96FD95B775 for ; Mon, 07 May 2007 11:44:57 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id A3B931A6175; Mon, 07 May 2007 11:45:03 +0200 (CEST) Date: Mon, 07 May 2007 11:45:03 +0200 From: markus reichelt Subject: Re: Linux distro w/loop-aes In-reply-to: <20070503231133.GA28342@dp.vpn.nusquama.org> To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070507094503.GB23124@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=gBBFr7Ir9EOA20Yy Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070503231133.GA28342@dp.vpn.nusquama.org> User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --gBBFr7Ir9EOA20Yy Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Max Vozeler wrote: > > I'm a slackware user (as indirectly mentioned before) so I work > > on the slackware installer. >=20 > Hey, cool that you're working on this for slackware. :-) slackware won't include loop-aes and therefore the project will be just an add-on for slackware. Because of that I will only include a non-SMP kernel (I don't have the hardware for SMP testing) and only the i686 build. i486 with loop-aes doesn't make sense. One has to fiddle with loop-aes & kernel anyway. > > Well, I've got it working (proof-of-concept), but the setup is > > somewhat messy... Long story short, One has to know what one is > > doing, most likely there won't be the infamous > > Point'n'Click-interface due to the nature of a typical slackware > > install. But I have some ideas of making life more comfortable in > > this regard.... will put up a draft / roadmap when I'm confident > > about beta testers. >=20 > Just a thought: Reading your mail I went through the issues I=20 > came across doing similar for debian-installer -- and came to think > that some of those issues probably affect all installers independent=20 > of the distribution to be installed. For example, the small amount > of entropy gathered up to the point of key generation.=20 I agree. > I think it could be interesting to share some ideas and maybe code=20 > in this area. Like, to overcome the small amount of entropy, in Debian > the user is presented with a text entry box and asked to type random > characters into it - A progress bar shows how much mindless typing > remains ;-) This is not exactly great, and I would be interested in > discussing other approaches to the problem. most likely it's going to be a simplistic setup only, nothing fancy. Just that it works and people can adapt it to their needs easily. > E.g. we could try to take advantage of hardware RNGs - but how to=20 > detect them? hw_random used to autoload and provide a /dev/hwrandom > (IIRC) on this system here but blocked reads forever as the chipset > doesn't really have an RNG. Another idea was to just trigger any disk > IO and hope that the IDE/SCSI driver contributes entropy this way. > Or perhaps using audio/video-entropyd - but are they reliable enough > on their own or should their output be fed through something like=20 > rngd to be safe? Or should we just use /dev/urandom?=20 There are some approaches to this (found some sites about the topic), but I tend to stick to gpg --gen-random for now. gpg is already needed so why not make use of it ;-) It's using an implementation of "Software Generation of Practically Strong Random Numbers" by Peter Gutman, which is ok for me http://www.cs.auckland.ac.nz/~pgut001/pubs/random.pdf He published a followup-paper on the subject, but I doubt gnupg is going to tinker with that. > Regarding the implementation, large parts of our code are specific > to the Debian partitioning tool (partman) and the debconf interface=20 > used in the installer, but maybe some bits are also applicable or=20 > interesting for your slackware implementation, maybe blockdev-wipe > which is like dd if=3D/dev/zero with progress output. You can find most > of this code at [1] and there is some discussion at [2] and also > spread in the debian-boot list archives. the slackware installer is spartanic, if the disk is not partitioned one will get a nice message about fdisk ;-)=20 However, I've stopped work on the latest official release installer because that was made for 2.4 kernels (which gave me troubles here and there.... had to use chroot et al. --- messy) and it looks like (finally!) the next release will feature a 2.6 kernel, and maybe a recent busybox for the installer. I have some ideas concerning the boot setup (create boot CD/USB stick on-the-fly, adapt initrd, patch linuxrc instead of compiling freshly) and try to get that framework running in the meantime. --=20 left blank, right bald --gBBFr7Ir9EOA20Yy Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGPvUfLMyTO8Kj/uQRAgW9AKCMbI1ZsqvvUALpq7Xad9X4FBsxVQCfbD3O vQR2EijQY5JNddYNYMwMq0k= =HLbV -----END PGP SIGNATURE----- --gBBFr7Ir9EOA20Yy-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon May 07 11:48:26 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HkzpR-0002PY-1r; Mon, 07 May 2007 11:48:25 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 07 May 2007 11:48:20 +0200 (CEST) Received: from mta-1.ms.rz.rwth-aachen.de ([134.130.7.72]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hkzp8-0002Ot-4A for linux-crypto@nl.linux.org; Mon, 07 May 2007 11:48:06 +0200 Received: from circe ([134.130.3.36]) by mta-1.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHO006FX0JZNDA0@mta-1.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Mon, 07 May 2007 11:47:59 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Mon, 07 May 2007 11:47:59 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l479lxQ8014070 for ; Mon, 07 May 2007 11:47:59 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 9C24D5B7D4 for ; Mon, 07 May 2007 11:47:59 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07729-06 for ; Mon, 07 May 2007 11:47:59 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 466355B775 for ; Mon, 07 May 2007 11:47:59 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id 7C56A1A6175; Mon, 07 May 2007 11:48:05 +0200 (CEST) Date: Mon, 07 May 2007 11:48:05 +0200 From: markus reichelt Subject: Re: Linux distro w/loop-aes In-reply-to: <20070504225436.21320@gmx.net> To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070507094805.GC23124@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=WhfpMioaduB5tiZL Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070504225436.21320@gmx.net> User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --WhfpMioaduB5tiZL Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Peter_22@gmx.de wrote: > Respecting your engagement for slackware I still guess more people > could profit from your efforts if you did it for the debian > community. Do people choosing slackware care about compiling a new > kernel or do they even seek a graphical installer? Max is working on debian. --=20 left blank, right bald --WhfpMioaduB5tiZL Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGPvXVLMyTO8Kj/uQRAq0xAJ9836hPAQqKcBvD9K0QJPhfKXCenQCeKvyN ir/0C512K2EGUUkWrqE/dTc= =dG8K -----END PGP SIGNATURE----- --WhfpMioaduB5tiZL-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon May 07 17:47:56 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Hl5RI-00041Y-MW; Mon, 07 May 2007 17:47:52 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 07 May 2007 17:47:27 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Hl5Qi-0003lS-Da for linux-crypto@nl.linux.org; Mon, 07 May 2007 17:47:16 +0200 Received: (qmail 13949 invoked by uid 0); 7 May 2007 15:38:43 -0000 Received: from 84.175.2.99 by www079.gmx.net with HTTP; Mon, 07 May 2007 17:38:43 +0200 (CEST) Content-Type: text/plain; charset="us-ascii" Date: Mon, 07 May 2007 17:38:43 +0200 From: Peter_22@gmx.de In-Reply-To: <20070507094805.GC23124@tatooine.rebelbase.local> Message-ID: <20070507153843.33680@gmx.net> MIME-Version: 1.0 References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070504225436.21320@gmx.net> <20070507094805.GC23124@tatooine.rebelbase.local> Subject: Re: Linux distro w/loop-aes To: markus reichelt , linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX18bIERj/kUbdFba4+L5p/G+XNeZGoIUl7mB77ZiQf gKQDmUlqpDgCjiNhdtTAsU75so8lS02sFiAg== Content-Transfer-Encoding: 7bit X-GMX-UID: O38Mcmp/f2IsBIMCOmxosJN4dWxlc9Z5 Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto * markus reichelt wrote: > Max is working on debian. Lol! I know Max maintains loop-aes packages for Debian. Nonetheless, there are certain requirements that every kernel has to fulfill for loop-aes disk encryption or even booting from USB media. Just one more direct question concerning Kubuntu 7.04 amd64: How much work is it to rebuild a fresh installation towards full disk encryption? Needs the kernel to be recompiled to support booting from USB media? Kind regards Peter -- "Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue May 08 07:03:47 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlHrU-0003gw-4I; Tue, 08 May 2007 07:03:44 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 08 May 2007 07:03:04 +0200 (CEST) Received: from ag-out-0708.google.com ([72.14.246.248]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlHqZ-0003b5-4s for linux-crypto@nl.linux.org; Tue, 08 May 2007 07:02:47 +0200 Received: by ag-out-0708.google.com with SMTP id 8so3058375agc for ; Mon, 07 May 2007 22:02:43 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:subject:mime-version:content-type; b=QXbZeCKTEOAsDXPprVGkOT05VDvJ1IrN+07xETlvUhHqWuT0p5Fpg0X/YFpuZMRD3QQyHaHShAaoYqBbidW7o88k16IdMUuz+p2nC1ArlLy4Z5wdOqsFQAWRP8XCjW8jI/tNWZCpRpoK7Jf4DkpjU3LPiOOgJgiHMZ+ykfRiuoc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:subject:mime-version:content-type; b=MJMw5QBpCwGQfXWBYbXWDxj1kg0qGtU8VNrSGmiW+H+vOI8E91yen+0wF82wQBI/aS++diCCW9Ru4KPo1UqiTlsqK+DQpMJIpsy96DtEO/ZgqCJ7EZkXQ/1xRsjSCMG+bFmhJYYeZzjX1w3o5Xs4hVL6YDgKjVFEaZnRFJ9BC2w= Received: by 10.90.119.15 with SMTP id r15mr5894323agc.1178600562776; Mon, 07 May 2007 22:02:42 -0700 (PDT) Received: by 10.90.115.2 with HTTP; Mon, 7 May 2007 22:02:42 -0700 (PDT) Message-ID: Date: Tue, 8 May 2007 00:02:42 -0500 From: "James Fleming" Subject: Re: Pls reply and comment MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_1893_26840179.1178600562689" Bcc: Received-SPF: X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_50, HTML_20_30,HTML_MESSAGE,MISSING_HEADERS,RCVD_BY_IP autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: reflectionjig@gmail.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto ------=_Part_1893_26840179.1178600562689 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline All, I hv recently started a new blog site. Contents of it are relationship between father and son. I am soliciting comments and suggestions as eventually I will turn these short stories in to a book. Your comments are valuable to me. Feel Free to forward this site to anybody and invite them to comment. Site Address - www.godzillachai.blogspot.com Also Mother's day is approaching. Don't forget to show your appreciation with a gift! Click on anything you like on the page. Thanks -M www.godzillachai.blogspot.com ------=_Part_1893_26840179.1178600562689 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline

All,

I hv recently started a new blog site. Contents of it
are relationship between father and son. I am
soliciting comments and suggestions as eventually I
will turn these short stories in to a book.
Your comments are valuable to me.
Feel Free to forward this site to anybody and invite them to comment.

Site Address - www.godzillachai.blogspot.com

Also Mother's day is approaching. Don't forget to show
your appreciation with a gift! Click on anything you
like on the page.


Thanks
-M

www.godzillachai.blogspot.com

 

------=_Part_1893_26840179.1178600562689-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue May 08 21:09:26 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlV3s-0003PS-9p; Tue, 08 May 2007 21:09:24 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 08 May 2007 21:08:51 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HlV3C-0007kI-KP for linux-crypto@nl.linux.org; Tue, 08 May 2007 21:08:42 +0200 Received: (qmail invoked by alias); 08 May 2007 19:06:51 -0000 Received: from vpn20.mip.uni-hannover.de (EHLO [130.75.236.20]) [130.75.236.20] by mail.gmx.net (mp002) with SMTP; 08 May 2007 21:06:51 +0200 X-Authenticated: #5227436 X-Provags-ID: V01U2FsdGVkX18BWr4D5kIBLhy2FFb6aoQSKhs13qnKQoYpXKvDHI hnajzXqjZV4nO1 Message-ID: <4640C97C.902@gmx.net> Date: Tue, 08 May 2007 21:03:24 +0200 From: Torsten72 User-Agent: Thunderbird 1.5.0.10 (Windows/20070221) MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: kernel messages Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: torsten.st@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi, I am using the precompiled debian loop-aes-modules-2.6-686 which has keyscrubbing enabled. But when modprobe is run to load the loop module from inside the initrd I just get this: loop: loaded (max 8 devices) When using modprobe on the fully booted system (after rmmod loop) I get this: loop: AES key scrubbing enabled loop: loaded (max 8 devices) If I rmmod again and use insmod instead (fully booted system) there is no key scrubbing line: loop: loaded (max 8 devices) The loop.ko in the initrd is the same version as on my root filesystem, I checked that. What's going on here? - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue May 08 22:08:02 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlVyY-0002QP-ID; Tue, 08 May 2007 22:07:58 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 08 May 2007 22:07:39 +0200 (CEST) Received: from mx01.hinterhof.net ([83.137.99.114]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlVxt-0001n3-5y for linux-crypto@nl.linux.org; Tue, 08 May 2007 22:07:17 +0200 Received: from localhost (localhost [127.0.0.1]) by mx01.hinterhof.net (Postfix) with ESMTP id 9A36810587 for ; Tue, 8 May 2007 22:08:18 +0200 (CEST) Received: from dp.vpn.nusquama.org (p54A7FCCF.dip.t-dialin.net [84.167.252.207]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "dp.vpn.nusquama.org", Issuer "Max Vozeler" (verified OK)) by mx01.hinterhof.net (Postfix) with ESMTP id 3B8C5100E9 for ; Tue, 8 May 2007 22:08:18 +0200 (CEST) Received: by dp.vpn.nusquama.org (Postfix, from userid 1000) id 479362DAC4A; Tue, 8 May 2007 22:07:08 +0200 (CEST) Date: Tue, 8 May 2007 22:07:08 +0200 From: Max Vozeler To: linux-crypto@nl.linux.org Subject: Re: kernel messages Message-ID: <20070508200708.GA19900@dp.vpn.nusquama.org> Mail-Followup-To: linux-crypto@nl.linux.org References: <4640C97C.902@gmx.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4640C97C.902@gmx.net> Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-1.9 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: max@nusquama.org Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi Torsten, On Tue, May 08, 2007 at 09:03:24PM +0200, Torsten72 wrote: > I am using the precompiled debian loop-aes-modules-2.6-686 which has > keyscrubbing enabled. > But when modprobe is run to load the loop module from inside the initrd > I just get this: > loop: loaded (max 8 devices) > When using modprobe on the fully booted system (after rmmod loop) I get > this: > loop: AES key scrubbing enabled > loop: loaded (max 8 devices) > If I rmmod again and use insmod instead (fully booted system) there is > no key scrubbing line: > loop: loaded (max 8 devices) Could you check if modprobe -v loop shows the same path you pass to insmod if you load it manually? The loop-aes-* Debian packages for 2.6 kernels install loop-AES modules (including loop.ko) into /lib/modules/$(uname -r)/updates. modprobe from module-init-tools makes modules in this directory take precedence over modules from the kernel/ directory. If you loaded kernel/drivers/block/loop.ko using insmod and modprobe used updates/loop.ko, it could explain the difference. > The loop.ko in the initrd is the same version as on my root > filesystem, I checked that. > > What's going on here? Based on the above, I would guess that the normal loop.ko (kernel/drivers/block/loop.ko) got included in the initrd. Perhaps loop-AES was installed after the initrd was built? If not, we would need to check the initrd generator, perhaps it doesn't take into account the updates/ directory. cheers, Max - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed May 09 00:10:52 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlXtP-00053R-U4; Wed, 09 May 2007 00:10:47 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 09 May 2007 00:10:23 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HlXss-0004yZ-PS for linux-crypto@nl.linux.org; Wed, 09 May 2007 00:10:14 +0200 Received: (qmail invoked by alias); 08 May 2007 22:08:24 -0000 Received: from vpn20.mip.uni-hannover.de (EHLO [130.75.236.20]) [130.75.236.20] by mail.gmx.net (mp031) with SMTP; 09 May 2007 00:08:24 +0200 X-Authenticated: #5227436 X-Provags-ID: V01U2FsdGVkX1836CE1l+Q3lJrdDP4RulH/wjfxY2phnHUJfB0ybc Mxkg/+hCGzNLs4 Message-ID: <4640F409.3090804@gmx.net> Date: Wed, 09 May 2007 00:04:57 +0200 From: Torsten72 User-Agent: Thunderbird 1.5.0.10 (Windows/20070221) MIME-Version: 1.0 To: linux-crypto@nl.linux.org Subject: Re: kernel messages Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: torsten.st@gmx.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi Max, you were right. The new loop.ko was only in /lib/modules/$(uname -r)/updates and not in the initrd. After creating a new initrd with update-initramfs and modifying /conf/modules again it now does what it was supposed to do :) Thank you. Torsten - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu May 10 02:47:06 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HlwoA-0002I8-Hn; Thu, 10 May 2007 02:47:02 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 10 May 2007 02:46:21 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HlwnL-00029K-HA for linux-crypto@nl.linux.org; Thu, 10 May 2007 02:46:11 +0200 Received: (qmail 2056 invoked by uid 0); 10 May 2007 00:44:20 -0000 Received: from 84.175.66.147 by www083.gmx.net with HTTP; Thu, 10 May 2007 02:44:20 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Thu, 10 May 2007 02:44:20 +0200 From: Peter_22@gmx.de In-Reply-To: <20070507153843.33680@gmx.net> Message-ID: <20070510004420.298640@gmx.net> MIME-Version: 1.0 References: <73cfbf220703282034j1cd8072bm343cfb6cb1767fb2@mail.gmail.com> <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070504225436.21320@gmx.net> <20070507094805.GC23124@tatooine.rebelbase.local> <20070507153843.33680@gmx.net> Subject: Kubuntu 7.04 amd64 vs. loop-aes To: linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX1/NvxZzEyvNS9JOIvXfRfsqGhfuZnB59uOKgPLjVS I+w6ouiw2325gdXurAKwbcmo59Ns+2UEOZ1Q== Content-Transfer-Encoding: 8bit X-GMX-UID: 1lN6c5QHbmwofqYZPjdLr/FPUzc4ctGq Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-0.4 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Hi folks! Tonight I installed Kubuntu 7.04 on my AMD64 using a second hard disk. To my horror loop-aes is missing. And even more horrific is what the package manager adept shows: no loop-aes package and aespipe in version 2.3b. Well, version 2.3b was something back in 2005, right? Where are the correct packages for Kubuntu 7.04 amd64? I hoped Ubuntu could displace SuSE with a flawless package support that follows the "it just works!" slogan. Tomorrow IŽll do the usual business, load all source from the web and compile the kubuntu kernel in the shell - just like I did with SuSE before. IŽll report the most stunning error messages to you, so stay tuned! Kind regards Peter -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu May 10 18:57:41 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmBxR-0000HI-TF; Thu, 10 May 2007 18:57:37 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 10 May 2007 18:57:04 +0200 (CEST) Received: from smtp-out5.blueyonder.co.uk ([195.188.213.8]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmBwk-0000Gm-Mr for linux-crypto@nl.linux.org; Thu, 10 May 2007 18:56:54 +0200 Received: from [172.23.170.143] (helo=anti-virus02-10) by smtp-out5.blueyonder.co.uk with smtp (Exim 4.52) id 1HmBwU-0006jX-GX for linux-crypto@nl.linux.org; Thu, 10 May 2007 17:56:38 +0100 Received: from [82.32.6.109] (helo=loser.MSHOME) by asmtp-out6.blueyonder.co.uk with esmtp (Exim 4.52) id 1HmBoK-0006id-QO for linux-crypto@nl.linux.org; Thu, 10 May 2007 17:48:12 +0100 Received: from jw2328 by loser.MSHOME with local (Exim 4.63) (envelope-from ) id 1HmBoL-0001If-Si for linux-crypto@nl.linux.org; Thu, 10 May 2007 17:48:13 +0100 Date: Thu, 10 May 2007 17:48:13 +0100 From: James Westby To: linux-crypto@nl.linux.org Subject: Re: Kubuntu 7.04 amd64 vs. loop-aes Message-ID: <20070510164813.GA4908@jameswestby.net> References: <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070504225436.21320@gmx.net> <20070507094805.GC23124@tatooine.rebelbase.local> <20070507153843.33680@gmx.net> <20070510004420.298640@gmx.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20070510004420.298640@gmx.net> User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jw+debian@jameswestby.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto On (10/05/07 02:44), Peter_22@gmx.de wrote: > Hi folks! > > Tonight I installed Kubuntu 7.04 on my AMD64 using a second hard disk. > To my horror loop-aes is missing. And even more horrific is what the > package manager adept shows: no loop-aes package and aespipe in > version 2.3b. Well, version 2.3b was something back in 2005, right? > Where are the correct packages for Kubuntu 7.04 amd64? I hoped Ubuntu > could displace SuSE with a flawless package support that follows the > "it just works!" slogan. Tomorrow IŽll do the usual business, load all > source from the web and compile the kubuntu kernel in the shell - just > like I did with SuSE before. IŽll report the most stunning error > messages to you, so stay tuned! > http://packages.ubuntu.com/feisty/source/loop-aes suggests that there is 3.1d available. Have you activated the universe component? Thanks, James - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu May 10 20:52:43 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmDkn-0002zL-Ce; Thu, 10 May 2007 20:52:41 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 10 May 2007 20:52:14 +0200 (CEST) Received: from mail.gmx.net ([213.165.64.20]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HmDkA-0002mI-QF for linux-crypto@nl.linux.org; Thu, 10 May 2007 20:52:02 +0200 Received: (qmail 23695 invoked by uid 0); 10 May 2007 18:50:11 -0000 Received: from 84.175.66.234 by www023.gmx.net with HTTP; Thu, 10 May 2007 20:50:11 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Thu, 10 May 2007 20:50:11 +0200 From: Peter_22@gmx.de In-Reply-To: <20070510164813.GA4908@jameswestby.net> Message-ID: <20070510185011.175760@gmx.net> MIME-Version: 1.0 References: <20070331141106.74840@gmx.net> <20070404162316.GF4034@tatooine.rebelbase.local> <20070405212057.64580@gmx.net> <20070428113051.GK13982@tatooine.rebelbase.local> <20070502202641.204800@gmx.net> <20070503204450.GA4187@tatooine.rebelbase.local> <20070504225436.21320@gmx.net> <20070507094805.GC23124@tatooine.rebelbase.local> <20070507153843.33680@gmx.net> <20070510004420.298640@gmx.net> <20070510164813.GA4908@jameswestby.net> Subject: Re: Kubuntu 7.04 amd64 vs. loop-aes To: James Westby , linux-crypto@nl.linux.org X-Authenticated: #5663700 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX19pNyYm3l5pyz5hBloJxQ/92aqLRAfFfvEbD/j7T7 luiQoQrcIOp+zdL2X27/x4BsGQ+qrXbh3muA== Content-Transfer-Encoding: 8bit X-GMX-UID: BQ0rC5MlbHIhRKZTbzQ0GAYiJihyapBa Received-SPF: X-Spam-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_20,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto James Westby wrote: >http://packages.ubuntu.com/feisty/source/loop-aes > > suggests that there is 3.1d available. http://loop-aes.sourceforge.net/loop-AES/loop-AES-v3.1f.tar.bz2 suggests that there is 3.1_F_ available since 23-Feb-2007 07:19 > Have you activated the universe component? As I followed just the standard installation routine I am uncertain about that but I donŽt think I did so. Anyway, it seems Ubuntu packages are a little bit out of date. Thanks for the hint. Best regards Peter -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 13:31:03 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmTKv-0007QY-1N; Fri, 11 May 2007 13:31:01 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 13:30:23 +0200 (CEST) Received: from mta-1.ms.rz.rwth-aachen.de ([134.130.7.72]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmTJs-0007NO-CA for linux-crypto@nl.linux.org; Fri, 11 May 2007 13:29:56 +0200 Received: from circe ([134.130.3.36]) by mta-1.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHV008C9JXLB7C0@mta-1.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Fri, 11 May 2007 13:29:45 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Fri, 11 May 2007 13:29:44 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l4BBThG5010565 for ; Fri, 11 May 2007 13:29:43 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id D7AD85B779 for ; Fri, 11 May 2007 13:29:44 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32256-06 for ; Fri, 11 May 2007 13:29:44 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 343AB5B775 for ; Fri, 11 May 2007 13:29:44 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id 56C5B1A64B7; Fri, 11 May 2007 13:29:49 +0200 (CEST) Date: Fri, 11 May 2007 13:29:49 +0200 From: markus reichelt Subject: PATCH: build-initrd.sh add MODULENAMEPREFIX To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070511112949.GA3988@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=EuxKj2iCbKjpUGkD Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --EuxKj2iCbKjpUGkD Content-Type: multipart/mixed; boundary="vtzGhvizbBRQ85DL" Content-Disposition: inline --vtzGhvizbBRQ85DL Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I'm using a single boot medium for different machines using the same kernel version and found this patch to make life a bit easier. --=20 left blank, right bald --vtzGhvizbBRQ85DL Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: attachment; filename="build-initrd.sh.modulenameprefix.patch" Content-Transfer-Encoding: quoted-printable --- build-initrd.sh.orig 2007-01-31 20:04:15.000000000 +0100 +++ build-initrd.sh 2007-05-11 13:25:16.000000000 +0200 @@ -125,6 +125,18 @@ # 1 =3D use loop module, 0 =3D loop driver linked to kernel USEMODULE=3D1 =20 +# Prefix of all module names. Only used if USEMODULE=3D1 or extra modules = are +# loaded. +# Normally this is empty, but if you want to use the same kernel version on +# different CPU architectures in combination with a single boot medium, +# you can add a prefix to the module names to make sure that the correct +# modules are loaded for each CPU architecture. +# You might have to honour 8.3 filename conventions (syslinux USB Stick), = so +# the recommended prefix length is 4 chars max for the loop module alone. +# In case you need additional modules loaded you might have to adapt the m= odule +# names in question manually to fit that convention. +MODULENAMEPREFIX=3D + # 1 =3D stop after creating and copying initrd, 0 =3D also copy tools/libs INITRDONLY=3D0 =20 @@ -456,7 +468,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/loop"); + strCat(buf, "/${MODULENAMEPREFIX}loop"); strCat(buf, modext); strCat(buf, " ${LOOPMODPARAMS}"); if(exeWait(buf)) goto fail5; @@ -466,7 +478,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME1}"); + strCat(buf, "/${MODULENAMEPREFIX}${EXTRAMODULENAME1}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS1}"); if(exeWait(buf)) goto fail5; @@ -475,7 +487,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME2}"); + strCat(buf, "/${MODULENAMEPREFIX}${EXTRAMODULENAME2}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS2}"); if(exeWait(buf)) goto fail5; @@ -484,7 +496,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME3}"); + strCat(buf, "/${MODULENAMEPREFIX}${EXTRAMODULENAME3}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS3}"); if(exeWait(buf)) goto fail5; @@ -493,7 +505,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME4}"); + strCat(buf, "/${MODULENAMEPREFIX}${EXTRAMODULENAME4}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS4}"); if(exeWait(buf)) goto fail5; @@ -502,7 +514,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME5}"); + strCat(buf, "/${MODULENAMEPREFIX}${EXTRAMODULENAME5}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS5}"); if(exeWait(buf)) goto fail5; --vtzGhvizbBRQ85DL-- --EuxKj2iCbKjpUGkD Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGRFOtLMyTO8Kj/uQRAruwAJ495FnSnVZz62PpaMjsHton1GNTyACfXvZ1 yTL46GORX++WjDBJKBA0WFw= =YLdB -----END PGP SIGNATURE----- --EuxKj2iCbKjpUGkD-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 15:49:18 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmVUg-0008DM-Ra; Fri, 11 May 2007 15:49:14 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 15:48:51 +0200 (CEST) Received: from mta-1.ms.rz.rwth-aachen.de ([134.130.7.72]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmVU6-0008D6-Rr for linux-crypto@nl.linux.org; Fri, 11 May 2007 15:48:38 +0200 Received: from circe ([134.130.3.36]) by mta-1.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHV009F4QCT7LB0@mta-1.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Fri, 11 May 2007 15:48:29 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Fri, 11 May 2007 15:48:28 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l4BDmSA5006436 for ; Fri, 11 May 2007 15:48:28 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id DFD285B779 for ; Fri, 11 May 2007 15:48:28 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10828-10 for ; Fri, 11 May 2007 15:48:28 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id 8B9EB5B775 for ; Fri, 11 May 2007 15:48:28 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id C9E5B1A64B7; Fri, 11 May 2007 15:48:33 +0200 (CEST) Date: Fri, 11 May 2007 15:48:33 +0200 From: markus reichelt Subject: Re: PATCH: build-initrd.sh add MODULENAMEPREFIX In-reply-to: <20070511112949.GA3988@tatooine.rebelbase.local> To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070511134833.GB3988@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=8NvZYKFJsRX2Djef Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de References: <20070511112949.GA3988@tatooine.rebelbase.local> User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --8NvZYKFJsRX2Djef Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * markus reichelt wrote: > I'm using a single boot medium for different machines using the same > kernel version and found this patch to make life a bit easier. please disregard this, it's too clumsy. --=20 left blank, right bald --8NvZYKFJsRX2Djef Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGRHQxLMyTO8Kj/uQRArhOAJsEFdN0Zm21j+xusT4xOLpmJ3SueACeOJmC ptZ1ow5SoEvAwYXlNkpZaAw= =nwl5 -----END PGP SIGNATURE----- --8NvZYKFJsRX2Djef-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 16:09:56 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmVoe-000605-B6; Fri, 11 May 2007 16:09:52 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 16:09:34 +0200 (CEST) Received: from mta-2.ms.rz.rwth-aachen.de ([134.130.7.73]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmVo0-0005yd-M9 for linux-crypto@nl.linux.org; Fri, 11 May 2007 16:09:12 +0200 Received: from circe ([134.130.3.36]) by mta-2.ms.rz.RWTH-Aachen.de (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JHV00IAZQM2P270@mta-2.ms.rz.RWTH-Aachen.de> for linux-crypto@nl.linux.org; Fri, 11 May 2007 15:54:02 +0200 (CEST) Received: from talos.rz.RWTH-Aachen.DE ([134.130.3.22]) by circe (MailMonitor for SMTP v1.2.2 ) ; Fri, 11 May 2007 15:54:02 +0200 (MEST) Received: from enterprise.ram.rwth-aachen.de (enterprise.ram.RWTH-Aachen.DE [137.226.68.2]) by smarthost.rwth-aachen.de (8.13.8/8.13.1/1) with ESMTP id l4BDs1rr007530 for ; Fri, 11 May 2007 15:54:01 +0200 Received: from localhost (localhost [127.0.0.1]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id E026A5B779 for ; Fri, 11 May 2007 15:54:01 +0200 (CEST) Received: from enterprise.ram.rwth-aachen.de ([127.0.0.1]) by localhost (enterprise [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12668-02 for ; Fri, 11 May 2007 15:54:01 +0200 (CEST) Received: from tatooine.rebelbase.local (wintergate.ram.rwth-aachen.de [137.226.69.158]) by enterprise.ram.rwth-aachen.de (Postfix) with ESMTP id A18555B775 for ; Fri, 11 May 2007 15:54:01 +0200 (CEST) Received: by tatooine.rebelbase.local (Postfix, from userid 500) id 05FC51A64B7; Fri, 11 May 2007 15:54:06 +0200 (CEST) Date: Fri, 11 May 2007 15:54:06 +0200 From: markus reichelt Subject: PATCH: build-initrd.sh add MODULEDIRECTORY To: linux-crypto@nl.linux.org Mail-followup-to: linux-crypto@nl.linux.org Message-id: <20070511135406.GC3988@tatooine.rebelbase.local> Organization: still stuck in reorganization mode MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary=Lb0e7rgc7IsuDeGj Content-disposition: inline X-PGP-Key: 0xC2A3FEE4 X-PGP-Fingerprint: FFB8 E22F D2BC 0488 3D56 F672 2CCC 933B C2A3 FEE4 X-Request-PGP: http://mareichelt.de/keys/c2a3fee4.asc X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at enterprise.ram.rwth-aachen.de User-Agent: Mutt/1.5.13 (2006-08-11) Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: ml@mareichelt.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --Lb0e7rgc7IsuDeGj Content-Type: multipart/mixed; boundary="cQXOx3fnlpmgJsTP" Content-Disposition: inline --cQXOx3fnlpmgJsTP Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, a cleaner approach this time (I hope...) --=20 left blank, right bald --cQXOx3fnlpmgJsTP Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: attachment; filename="build-initrd.sh.moduledirectory.patch" Content-Transfer-Encoding: quoted-printable --- build-initrd.sh.orig 2007-01-31 20:04:15.000000000 +0100 +++ build-initrd.sh 2007-05-11 15:53:27.000000000 +0200 @@ -125,6 +125,15 @@ # 1 =3D use loop module, 0 =3D loop driver linked to kernel USEMODULE=3D1 =20 +# Directory to look for modules under /boot/modules-`uname -r`/ +# Only used if USEMODULE=3D1 or extra modules are loaded. +# Normally this is empty, but if you want to use the same kernel version on +# different CPU architectures in combination with a single boot medium, you +# can use this to make sure that the correct modules are loaded for each +# CPU architecture. MODULEDIRECTORY must end with a / +# Example: MODULEDIRECTORY=3D"`hostname`/" +MODULEDIRECTORY=3D"" + # 1 =3D stop after creating and copying initrd, 0 =3D also copy tools/libs INITRDONLY=3D0 =20 @@ -456,7 +465,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/loop"); + strCat(buf, "/${MODULEDIRECTORY}loop"); strCat(buf, modext); strCat(buf, " ${LOOPMODPARAMS}"); if(exeWait(buf)) goto fail5; @@ -466,7 +475,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME1}"); + strCat(buf, "/${MODULEDIRECTORY}${EXTRAMODULENAME1}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS1}"); if(exeWait(buf)) goto fail5; @@ -475,7 +484,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME2}"); + strCat(buf, "/${MODULEDIRECTORY}${EXTRAMODULENAME2}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS2}"); if(exeWait(buf)) goto fail5; @@ -484,7 +493,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME3}"); + strCat(buf, "/${MODULEDIRECTORY}${EXTRAMODULENAME3}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS3}"); if(exeWait(buf)) goto fail5; @@ -493,7 +502,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME4}"); + strCat(buf, "/${MODULEDIRECTORY}${EXTRAMODULENAME4}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS4}"); if(exeWait(buf)) goto fail5; @@ -502,7 +511,7 @@ buf[0] =3D 0; strCat(buf, "/lib/insmod /lib/modules-"); strCat(buf, &un.release[0]); - strCat(buf, "/${EXTRAMODULENAME5}"); + strCat(buf, "/${MODULEDIRECTORY}${EXTRAMODULENAME5}"); strCat(buf, modext); strCat(buf, " ${EXTRAMODULEPARAMS5}"); if(exeWait(buf)) goto fail5; --cQXOx3fnlpmgJsTP-- --Lb0e7rgc7IsuDeGj Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGRHV+LMyTO8Kj/uQRAr/ZAKCGGBDpvfLfBWwNPxDlRper5eQi8gCfcDP3 Bzamqtzwifm8YpWFAaS2BRM= =MtGV -----END PGP SIGNATURE----- --Lb0e7rgc7IsuDeGj-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 18:41:41 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmYBV-0007Yb-Py; Fri, 11 May 2007 18:41:37 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 18:41:08 +0200 (CEST) Received: from web54012.mail.re2.yahoo.com ([206.190.36.244]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1HmYAo-0007X0-Ae for linux-crypto@nl.linux.org; Fri, 11 May 2007 18:40:54 +0200 Received: (qmail 31373 invoked by uid 60001); 11 May 2007 16:33:40 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=6icrsnMoG+7GKy01j7hf6XtaM/QiHn5cbpoOCMP77zWp/u7HrPYFxnT7pBmXLmeb9sh1a1l0QlvgqfjR2FeG7d2qKtRMlB1lhmrW+p39zTHPTBP19xiUh3Nyx83rDEpQZyQKWAX0BddatG0rOii+1yJL9W2/DTad7ltkGSLSCog=; X-YMail-OSG: T2ibEYwVM1nRxGaFX6W68BMyDoPhDW9mV.uWrSR3SK_Jc88F8fpllfQRwsxW2QJUm5H8FN1aQJXZCKZnjIAxSEmfncL0DH_5PoZGX8cetShdWShKaPpl9ll6AaqfEA-- Received: from [84.254.17.180] by web54012.mail.re2.yahoo.com via HTTP; Fri, 11 May 2007 09:33:40 PDT Date: Fri, 11 May 2007 09:33:40 -0700 (PDT) From: Phil H Subject: Kernel tainted - no version for "loop_unregister_transfer" To: linux-crypto@nl.linux.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1899789682-1178901220=:31205" Content-Transfer-Encoding: 8bit Message-ID: <646084.31205.qm@web54012.mail.re2.yahoo.com> Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --0-1899789682-1178901220=:31205 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi As an exercise I've been putting loop-aes and ciphers into a lived using the 2.6.18.1 kernel. I rebuilt the kernel and modules with CONFIG_BLK_DEV_LOOP=n, then compiled loop-AES-3.1f and ciphers-v3.0e against these sources, edited the livecd replacing the kernel and modules, putting the loop driver into initrd.gz to get loaded it early in the boot (needed). Also built the current gnupg2 sources. After predictable stuffing around, I got a livecd that works. Loop-aes worked too, and loop_serpent (all tests passed OK) BUT loop_serpent puts the following troubling messager into dmesg: loop_serpent: no version for "loop_unregister_transfer" found: kernel tainted. loop: registered serpent encryption Nonetheless it works. There are no other errors in dmesg. I know Jari will say not to use this. I suppose, since the aes cipher doesn't give this message, I could just use that and throw the serpent module away? Previously I tried the same exercise with CONFIG_BLK_DEV_LOOP=m. Same error, but also worked. This livecd does not appear to have a system.map anywhere - could that be related? Is it related to the (different) kernel tainting error that the Debian people were getting with the ciphers a while back? Haven't yet tried the other ciphers. --------------------------------- No need to miss a message. Get email on-the-go with Yahoo! Mail for Mobile. Get started. --0-1899789682-1178901220=:31205 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi

As an exercise I've been putting loop-aes and ciphers into a lived using the 2.6.18.1 kernel.

I rebuilt the kernel and modules with CONFIG_BLK_DEV_LOOP=n, then compiled loop-AES-3.1f and ciphers-v3.0e against these sources, edited the livecd replacing the kernel and modules, putting the loop driver into initrd.gz to get loaded it early in the boot (needed).  Also built the current gnupg2 sources.

After predictable stuffing around, I got a livecd that works.  Loop-aes worked too,
and loop_serpent (all tests passed OK) BUT loop_serpent puts  the following troubling messager into dmesg:

loop_serpent: no version for "loop_unregister_transfer" found: kernel tainted.
loop: registered serpent encryption

Nonetheless it works.  There are no other errors in dmesg.

I know Jari will say not to use this.  I suppose, since the aes cipher doesn't give this message, I could just use that and throw the serpent module away?

Previously I tried the same exercise with CONFIG_BLK_DEV_LOOP=m.  Same error, but also worked.

This livecd does not appear to have a system.map anywhere - could that be related?

Is it related to the (different) kernel tainting error that the Debian people were getting with the ciphers a while back?

Haven't yet tried the other ciphers.






No need to miss a message. Get email on-the-go
with Yahoo! Mail for Mobile. Get started. --0-1899789682-1178901220=:31205-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 20:18:32 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmZhE-0006WR-Fp; Fri, 11 May 2007 20:18:28 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 20:18:04 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmZgh-0006Vb-AB for linux-crypto@nl.linux.org; Fri, 11 May 2007 20:17:55 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id E463917B455; Fri, 11 May 2007 21:17:49 +0300 (EEST) X-Virus-Scanned: amavisd-new at tnnet.fi Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail.tnnet.fi [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JM2YSIdtkk09; Fri, 11 May 2007 21:17:44 +0300 (EEST) Received: from a64.adsl.tnnet.fi (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id 4F6FD17B44E; Fri, 11 May 2007 21:17:44 +0300 (EEST) Message-ID: <4644B346.FF8D52F@users.sourceforge.net> Date: Fri, 11 May 2007 21:17:42 +0300 From: Jari Ruusu To: markus reichelt Cc: linux-crypto@nl.linux.org Subject: Re: PATCH: build-initrd.sh add MODULEDIRECTORY References: <20070511135406.GC3988@tatooine.rebelbase.local> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto markus reichelt wrote: > I'm using a single boot medium for different machines using the same > kernel version and found this patch to make life a bit easier. [snip] > a cleaner approach this time (I hope...) Are you using same kernel version on different architectures, like 32bit x86 and 64bit amd64, or same architecture but uniprocessor/SMP boxes? For 32bit/64bit your patch works if program binaries (losetup + gpg + etc.) are all 32bit. Same versions of kernels but different config should use different EXTRAVERSION= or whatever in kernel Makefile. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 20:19:20 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmZi2-0006bg-U5; Fri, 11 May 2007 20:19:18 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 11 May 2007 20:19:12 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1HmZhj-0006aF-44 for linux-crypto@nl.linux.org; Fri, 11 May 2007 20:18:59 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id A785917B455; Fri, 11 May 2007 21:18:58 +0300 (EEST) X-Virus-Scanned: amavisd-new at tnnet.fi Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail.tnnet.fi [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XDT9sRsqDjHL; Fri, 11 May 2007 21:18:53 +0300 (EEST) Received: from a64.adsl.tnnet.fi (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id F086D17B44E; Fri, 11 May 2007 21:18:52 +0300 (EEST) Message-ID: <4644B38C.100CDAD6@users.sourceforge.net> Date: Fri, 11 May 2007 21:18:52 +0300 From: Jari Ruusu To: Phil H Cc: linux-crypto@nl.linux.org Subject: Re: Kernel tainted - no version for "loop_unregister_transfer" References: <646084.31205.qm@web54012.mail.re2.yahoo.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_40 autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Phil H wrote: > After predictable stuffing around, I got a livecd that works. Loop-aes > worked too, and loop_serpent (all tests passed OK) BUT loop_serpent puts > the following troubling messager into dmesg: > > loop_serpent: no version for "loop_unregister_transfer" found: kernel tainted. > loop: registered serpent encryption When ciphers package is built it needs to find previously compiled loop.ko module at compile time. If it can't find it, then loop_serpent.ko (and loop_twofish.ko and loop_blowfish.ko) end up having no version info about exported symbols from loop.ko module. That is result of mainline kbuild guys doing their best to torpedo externally compiled modules that depend on other externally compiled modules. Anyway, can you try this: 1) Get new Makefile from here, and drop it to loop-AES source directory: http://loop-aes.sourceforge.net/updates/Makefile-20070305.bz2 http://loop-aes.sourceforge.net/updates/Makefile-20070305.bz2.sign 2) Copy *.c files from ciphers package to loop-AES source directory. 3) Build new loop.ko, loop_serpent.ko, loop_twofish.ko and loop_blowfish.ko modules using this command: make EXTRA_CIPHERS=y That builds and installs them all together so that version info don't get lost between two diffrent make invocations. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri May 11 22:03:40 2007 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22)