[opensuse] accessing a v9.3 crypto partition with v10.3
I had a mb die. I pulled the ide drive, put it in a usb/ide thingie (technical term), plugged it into my new box with 10.3 installed. I can access the dos partitions, but not the reiser root partition. Additionally, I read, somewhere, that the crypto system has changed in 10.3. Of course I know the key, but I am not sure of the encryption method. How do I access: my linux v9.3 reiser file system partition my encrypted partition tia, john -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John R. Sowden wrote:
10.3. Of course I know the key, but I am not sure of the encryption method. .... my encrypted partition
Mount it by using yast. Just provide a mount point without formating of course!! Then yast will fill your /etc/cryptotab. You can use this info to change the fstab if you don't want the the partition to be mounted automatically at boot. - -- All the best, Peter J. N. aedon DESIGNS, http://www.aedon.eu/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFHXF4mh8q3OtgoGAwRAvp5AJ9+dVkA4oOpp0qtyrRNhQaTHPimjwCfa4z7 W7GSuHTNPuOi+W64rL10FOY= =CLAc -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
peter wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
John R. Sowden wrote:
10.3. Of course I know the key, but I am not sure of the encryption method.
....
my encrypted partition
Mount it by using yast. Just provide a mount point without formating of course!! Then yast will fill your /etc/cryptotab. You can use this info to change the fstab if you don't want the the partition to be mounted automatically at boot.
- -- All the best, Peter J. N. aedon DESIGNS, http://www.aedon.eu/
-----END PGP SIGNATURE-----
I tried that. Yast locked up when I tried to run the partitioner ("initializing"). I ctrl-alt-del'd out and restarted the session with the usb connector unplugged, thinking that was the problem. Same problem. I think the SATA drive is my problem here. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Sunday 2007-12-09 at 12:54 -0800, John R. Sowden wrote:
I had a mb die. I pulled the ide drive, put it in a usb/ide thingie (technical term), plugged it into my new box with 10.3 installed. I can access the dos partitions, but not the reiser root partition. Additionally, I read, somewhere, that the crypto system has changed in 10.3. Of course I know the key, but I am not sure of the encryption method.
In 9.3 the method changed. Look up in the security list archive this thread: Date: Sun, 11 Feb 2007 02:06:11 +0100 (CET) From: Carlos E. R. To: OS-sec <opensuse-security@opensuse.org> Subject: [opensuse-security] Weird encrypted filesystem problem. There the different encryption methods used by Yast in 9.2 and later were explained somewhat. Basically: twofish256: <--- I think this was used in 9.3, not sure ivgen='plain' hashalgo='sha512' klen='256' istwofish='' twofishSL92: ivgen=null hashalgo='sha512' klen='256' istwofish='' twofish: ivgen=null hashalgo='sha512' klen=192 istwofish='' hashalgo="ripemd160:20" name=justaname dev=/dev/availableloopdeice losetup $dev /encriptedfileorpartitiontomount cryptsetup create "$name" "$dev" --cipher twofish-cbc-$ivgen -s $klen -h $hashalgo Then, read this other thread: Date: Thu, 29 Nov 2007 04:18:21 +0100 (CET) From: Carlos E. R. To: OS-sec <opensuse-security@opensuse.org> Subject: [opensuse-security] How does one convert from /etc/cryptotab to /etc/crypttab - From there you can glean the data to edit the /etc/crypttab file appropiately to activate your partition. There is also a web page listed with a lot of info: http://www.suse.de/~lnussel/hdencryption/hdencryption.html and: cryptsetup manpage http://www.saout.de/tikiwiki/tiki-index.php http://www.saout.de/tikiwiki/tiki-index.php?page=LUKS http://luks.endorphin.org - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iD8DBQFHXHNetTMYHG2NR9URAqjkAJ9hTl7cL++LKq0qkOquXaf4UZWLZgCfbjjg IyWO20WaV0AniuA6yHFwd5M= =mQXl -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Carlos E. R. -
John R. Sowden -
peter