From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1E1fp7-0000ws-BD for garchives@archives.gentoo.org; Sun, 07 Aug 2005 07:43:57 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j777h05h008680; Sun, 7 Aug 2005 07:43:00 GMT Received: from relay1.mail.vrmd.de (relay1.mail.vrmd.de [81.28.232.18]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j777dQCt025981 for ; Sun, 7 Aug 2005 07:39:26 GMT Received: from [80.137.4.98] (helo=luna.planets) by vm8.bln2.vrmd.de with asmtp (Exim 4.41) id 1E1fkq-0001rq-7v for gentoo-user@lists.gentoo.org; Sun, 07 Aug 2005 09:39:32 +0200 From: Christian Hoenig To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] crypted key for dm-crypt Date: Sun, 7 Aug 2005 09:39:23 +0200 User-Agent: KMail/1.8.2 References: <200508070352.08507.pupeno@pupeno.com> In-Reply-To: <200508070352.08507.pupeno@pupeno.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3938358.3Sboqx86v4"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200508070939.27944.list@hoenig.cc> X-Relay-User: list@hoenig.cc X-Archives-Salt: 6ae7dcb9-2369-48d3-aa94-0bbbf730da2d X-Archives-Hash: 4672027d0a9e33893cdc41c62a50558e --nextPart3938358.3Sboqx86v4 Content-Type: text/plain; charset="iso-8859-6" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi,=20 > Well, I have dm-crypt configured and running. It encrypts tha swap, a > loopback for /tmp (with a random key), all this using the > standard /etc/conf.d/cryptfs. > Now I'd like to encrypt my home with a key instad of a passphrase, place > that key on my pen drive after etcrypting it with a key, my questions are: > - How do I generate the key ? I have restricted my key to printable letters.=20 So an easy way to generate a key without uuencode or stuff is something lik= e=20 this: cat /dev/random |sed -e "s/[^a-zA-Z0-9]//g" > - How do I en/decrypt it ? Encrypt your just generated key? I thought you wanted to get rid of=20 passphrases.=20 You can use the key like it is to en/decrypt your data by just putting it o= n=20 you pendrive and doing stuff with cryptsetup: cryptsetup -d ... HTH a little bit. take care, have fun /christian --nextPart3938358.3Sboqx86v4 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQBC9bqvmauZIX3ydQURAqYqAKCM5YEv8ONcHTu9b4Uli67q9ECG+QCgqMBC aCUX9JZx0x1hWwTe5UGjZIw= =B3uQ -----END PGP SIGNATURE----- --nextPart3938358.3Sboqx86v4-- -- gentoo-user@gentoo.org mailing list