Debut de solution

En cherchant encore, j'ai trouve un debut de solution un peu plus simple. Il s'agit d'infos recuperees dans une mailing liste.

thanks so much, for your help. It is exactly what I want.
I use Redhat 8.0 and it comes with the other crypt-loop (is it called IV?)
I've been able to create an image like below:
mkisofs -J -R -o cd3.img photo-album/
aespipe -e AES128 -T < cd3.img > cd3enc.img
cdrecord -v dev=0,0,0 -eject cd3enc.img
I could not mount it with 'mount', but I've been able to do this:
losetup -e aes -k 128 -P sha256 /dev/loop0 /dev/cdrom
mount -o ro -t iso9660 /dev/loop0 /cryptcd
So all of that works.
But I really like to have an entry in /etc/fstab, that can transparently mount it.
Right now I have:
/dev/cdrom /cryptcd iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=AES128 0 0
but that does not work.
Any comments or tips? Much appreciated!
Happy new year!!
 Michael
Jari Ruusu wrote:
> Michael Janich wrote:
 
> > I want to create/burn encrypted CDs and DVDs.
> > Do I do this with
> > mkisofs ... | aespipe -k256 ... | cdwrite -
> > mount /dev/cdrom -o loop -e aes256 /cdrom
> > Does someone have any experience with this?
 
> Example 4 from aespipe README file:
> Create encrypted ISO9660 CD-ROM image that can be mounted using Linux
> loop-AES crypto package:
> mkisofs -r directory-tree | aespipe -e AES128 -T >image.iso
 
> This image file can then be mounted under Linux like this:
> mount -t iso9660 image.iso /cdrom -o loop=/dev/loop0,encryption=AES128
> Or, after writing image.iso to CD-ROM, like this:
> mount -t iso9660 /dev/cdrom /cdrom -o loop=/dev/loop0,encryption=AES128
> Latest version (v2.1a) of aespipe is here:
> http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2(...)
> http://loop-aes.sourceforge.net/aespipe-v2.1a.tar.bz2.sign(...)
> Regards,
> Jari Ruusu <jari.ruusu@pp.inet.fi>
-- 
 Michael Janich, Chief Technology Officer, Noble Group Ltd, Hong Kong
 http://www.thisisnoble.com/(...) Tel: +852 2861-4615. Fax: +852 2865-3865. 
Michael Janich wrote:
> But I really like to have an entry in /etc/fstab, that can transparently mount it.
> Right now I have:
> 
> /dev/cdrom /cryptcd iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=AES128 0 0
> 
> but that does not work.
> 
> Any comments or tips? Much appreciated!
Put this line into your /etc/fstab and it will work:
/dev/cdrom /cryptcd iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=aes,keybits=128,phash=sha256 0 0
 ^^^^^^^^^^^^^^ ^^^^^^^^^^^ ^^^^^^^^^^^^
Kerneli.org and loop-AES versions have different mount, losetup and fstab
options. Examples in aespipe README file use loop-AES syntax.
Regards,
Jari Ruusu <jari.ruusu@pp.inet.fi>
-
Linux-crypto: cryptography in and on the Linux system
Archive: http://mail.nl.linux.org/linux-crypto/(...)