[gentoo-security] Re: Re: cryptoloop

[i.t]

> Am Dienstag, 18. Mai 2004 08:07 schrieb Daniel:
> > Basically
> > any 2.6 kernel will do cryptoloop.
>
> yes - with XOR
>
> from man losetup:
> RESTRICTION
>        DES encryption is painfully slow. On the other hand, XOR is terribly
> weak.
uname -a
Linux athlon2.it97.dyndns.org 2.4.25_pre7-gss-r3
(example works for _ALL_ newer kernels I've tried without crypto-patches or 
aes-loop)

lsmod
Module                  Size  Used by    Tainted: P
blowfish                6860   0  (unused)
aes                    30752   0  (unused)
loop                    9944   0

dd if=/dev/urandom of=blow.fish bs=1k count=1000
1000+0 records in
1000+0 records out

losetup -e blowfish /dev/loop0 blow.fish
Password:
The cipher does not exist, or a cipher module needs to be loaded into the 
kernel
ioctl: LOOP_SET_STATUS: Invalid argument
 # losetup -e aes /dev/loop0 blow.fish
The cipher does not exist, or a cipher module needs to be loaded into the 
kernel
ioctl: LOOP_SET_STATUS: Invalid argument
 # losetup -e XOR /dev/loop0 blow.fish
Password:
(works - nice :- )

I'm absolutely tired by those ughly politics of US-based linux distributions 
(for Fedora it's the same - whatever kernels).

There is no real security without encryption.
The more I think about it I'm willing to stick with OpenBSD
-- 
 . ___
 |  |  Irmund     Thum
 |  |  

--
gentoo-security@g.o mailing list