Thanks for the info... -----Original Message----- From: zentara [mailto:zentara@highstream.net] Sent: Friday, November 09, 2001 9:14 AM To: Suse-Linux-E (E-mail) Subject: Re: [SLE] Crypt Files System James Davis wrote:
I am installing 7.2 and wanted to get any feedback either positve or negative about using the crypt feature. I am installing 7.2 Pro
It works great. The only drawback that I observed is that suse chose to limit the encryption to twofish, when the Rijnaedel(Advanced Encryption System winner) is available. There is also some general problems with moving the encrypted filesystem to another medium, like a cdrom. The cryptoapi depends on the block-size of filesystem it is on, and if you move it to another filesystem(with different block size), it won't decrypt. There is a fix for this, but you should read the docs if you want to put your crypto files on cdrom, or move it to different filesystems(like ext2 to reiserfs). Go to: http://sdb.suse.de/en/sdb/html/jsj_crypto_filesystem_mini_howto.html for information on manual setup of the crypto system. If you want to compile a kernel with crypto support for AES or other method, go to http://sourceforge.net/projects/cryptoapi/ The new cryptoapi system is designed to be modular and kernel independent, but alot of people have trouble getting the module to work. So you may need to do an old-style kernel patch. The cryptoapi people have made a regular kernel patch for kernel 2.4.8, but it can be applied to later vanilla kernel sources. It works fine and also allows you to build the cryptoapi directly into the kernel, since many people don't trust modules. The patch is available at: ftp://ftp.kernel.org/pub/linux/kernel/people/hvr/cryptoapi-2.4.8.diff.bz2 -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com