[gentoo-security] Re: cryptoloop - dm-crypt

[i.t]

Am Dienstag, 18. Mai 2004 20:58 schrieb Marc Ballarin:
> switch to 2.6 and use dm-crypt. Much cleaner, easier,faster and even in
> stock kernels.

badly documented and looks buggy:
# echo '0 144522 crypt aes-plain AABBCCDDEEFFAABBCCDDEEFFAABB 0 /dev/hdb1 0' | 
dmsetup create volume1
device-mapper ioctl cmd 9 failed: Invalid argument
Command failed

#ls -l /dev/mapper/
total 0
crw-r-----    1 root     root      10,  63 Jan  1  1970 control
brw-r-----    1 root     root     254,   0 Jan  1  1970 volume1

/var/log/messages:
May 19 16:09:30 device-mapper: : crypt: Error setting key

other errors after hundreds of tries:
May 19 16:06:26 device-mapper: : crypt: Error decoding key
May 19 15:56:26 device-mapper: error adding target to table
May 19 15:56:37 device-mapper: crypt: Unexpected additional cipher options
May 19 15:56:37 device-mapper: : crypt: Invalid chaining mode
May 19 15:56:49 device-mapper: : unknown target type

well -I'm just asking myself whether I'm willing once again to spend more 
hours, some days or weeks to examine the whole thing?
The answer is NO
-- 
 . ___
 |  |  Irmund     Thum
 |  |  

--
gentoo-security@g.o mailing list