From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A7AD9138A6C for ; Sat, 18 Apr 2015 11:49:01 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5676BE097E; Sat, 18 Apr 2015 11:48:48 +0000 (UTC) Received: from mail.ramses-pyramidenbau.de (ramses-pyramidenbau.de [46.38.238.63]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E52DCE0968 for ; Sat, 18 Apr 2015 11:48:46 +0000 (UTC) Received: from [IPv6:2a02:810d:8440:554:cddf:15cb:93e:b4a4] (unknown [IPv6:2a02:810d:8440:554:cddf:15cb:93e:b4a4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.ramses-pyramidenbau.de (Postfix) with ESMTPSA id E4C6481D1B for ; Sat, 18 Apr 2015 13:48:42 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ramses-pyramidenbau.de; s=default; t=1429357723; bh=NYQ18DSlkkuYKt3nbBwn+arVFeavU2PtHTpnhgjW++Q=; h=Date:From:To:Subject:References:In-Reply-To; b=I9lvYQni4e86ZA2m3WIOR2WRdohTK9w+ui/JUIfqhXJSUArEvgyddwvSEtwmlF7nZ dpkcR/B9rn+JI1HYoAsQbFpwdHU/Q3m8iyFmGBGo8Tlb7/jl1G/E4INqFK5fzBvBN/ i/sfEnEwEzLIHryHMIs0IHdwgQw8R6+BtFh7Fsg4= Message-ID: <5532449F.600@ramses-pyramidenbau.de> Date: Sat, 18 Apr 2015 13:48:47 +0200 From: Ralf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] cryptsetup wont use aes-xts:plain64 References: In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Archives-Salt: 1f990d39-0f93-4e60-a20d-b70422e60216 X-Archives-Hash: f1f27a4626fbe33fe3ffab2a9ccd8178 Hi Marko, could you please paste the latest few lines of dmesg after trying to create your volume? And please paste the output of lsmod. All your crypto-kernel-stuff are modules. Perhaps they're not loaded. Check if corresponding modules are loaded. Cheers Ralf On 04/18/2015 12:27 PM, Marko Weber | 8000 wrote: > > hello list, > > i try to crypt a partition with cryptsetup. > Yes, in Kernel i had all need things i think. > > CONFIG_CRYPTO=y > CONFIG_CRYPTO_ALGAPI=y > CONFIG_CRYPTO_ALGAPI2=y > CONFIG_CRYPTO_AEAD=m > CONFIG_CRYPTO_AEAD2=y > CONFIG_CRYPTO_BLKCIPHER=y > CONFIG_CRYPTO_BLKCIPHER2=y > CONFIG_CRYPTO_HASH=y > CONFIG_CRYPTO_HASH2=y > CONFIG_CRYPTO_RNG=m > CONFIG_CRYPTO_RNG2=y > CONFIG_CRYPTO_PCOMP=m > CONFIG_CRYPTO_PCOMP2=y > CONFIG_CRYPTO_MANAGER=y > CONFIG_CRYPTO_MANAGER2=y > CONFIG_CRYPTO_USER=m > # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set > CONFIG_CRYPTO_GF128MUL=m > CONFIG_CRYPTO_NULL=m > CONFIG_CRYPTO_PCRYPT=m > CONFIG_CRYPTO_WORKQUEUE=y > CONFIG_CRYPTO_CRYPTD=m > CONFIG_CRYPTO_MCRYPTD=m > CONFIG_CRYPTO_AUTHENC=m > CONFIG_CRYPTO_TEST=m > CONFIG_CRYPTO_ABLK_HELPER=m > CONFIG_CRYPTO_GLUE_HELPER_X86=m > CONFIG_CRYPTO_CCM=m > CONFIG_CRYPTO_GCM=m > CONFIG_CRYPTO_SEQIV=m > CONFIG_CRYPTO_CBC=y > CONFIG_CRYPTO_CTR=m > CONFIG_CRYPTO_CTS=m > CONFIG_CRYPTO_ECB=m > CONFIG_CRYPTO_LRW=m > CONFIG_CRYPTO_PCBC=m > CONFIG_CRYPTO_XTS=m > CONFIG_CRYPTO_CMAC=m > CONFIG_CRYPTO_HMAC=m > CONFIG_CRYPTO_XCBC=m > CONFIG_CRYPTO_VMAC=m > CONFIG_CRYPTO_CRC32C=y > CONFIG_CRYPTO_CRC32C_INTEL=m > CONFIG_CRYPTO_CRC32=m > CONFIG_CRYPTO_CRC32_PCLMUL=m > CONFIG_CRYPTO_CRCT10DIF=y > CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m > CONFIG_CRYPTO_GHASH=m > CONFIG_CRYPTO_MD4=m > CONFIG_CRYPTO_MD5=y > CONFIG_CRYPTO_MICHAEL_MIC=m > CONFIG_CRYPTO_RMD128=m > CONFIG_CRYPTO_RMD160=m > CONFIG_CRYPTO_RMD256=m > CONFIG_CRYPTO_RMD320=m > CONFIG_CRYPTO_SHA1=m > CONFIG_CRYPTO_SHA1_SSSE3=m > CONFIG_CRYPTO_SHA256_SSSE3=m > CONFIG_CRYPTO_SHA512_SSSE3=m > CONFIG_CRYPTO_SHA1_MB=m > CONFIG_CRYPTO_SHA256=m > CONFIG_CRYPTO_SHA512=m > CONFIG_CRYPTO_TGR192=m > CONFIG_CRYPTO_WP512=m > CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m > CONFIG_CRYPTO_AES=y > CONFIG_CRYPTO_AES_X86_64=m > CONFIG_CRYPTO_AES_NI_INTEL=m > CONFIG_CRYPTO_ANUBIS=m > CONFIG_CRYPTO_ARC4=m > CONFIG_CRYPTO_BLOWFISH=m > CONFIG_CRYPTO_BLOWFISH_COMMON=m > CONFIG_CRYPTO_BLOWFISH_X86_64=m > CONFIG_CRYPTO_CAMELLIA=m > CONFIG_CRYPTO_CAMELLIA_X86_64=m > CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64=m > CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64=m > CONFIG_CRYPTO_CAST_COMMON=m > CONFIG_CRYPTO_CAST5=m > CONFIG_CRYPTO_CAST5_AVX_X86_64=m > CONFIG_CRYPTO_CAST6=m > CONFIG_CRYPTO_CAST6_AVX_X86_64=m > CONFIG_CRYPTO_DES=m > CONFIG_CRYPTO_DES3_EDE_X86_64=m > CONFIG_CRYPTO_FCRYPT=m > CONFIG_CRYPTO_KHAZAD=m > CONFIG_CRYPTO_SALSA20=m > CONFIG_CRYPTO_SALSA20_X86_64=m > CONFIG_CRYPTO_SEED=m > CONFIG_CRYPTO_SERPENT=m > CONFIG_CRYPTO_SERPENT_SSE2_X86_64=m > CONFIG_CRYPTO_SERPENT_AVX_X86_64=m > CONFIG_CRYPTO_SERPENT_AVX2_X86_64=m > CONFIG_CRYPTO_TEA=m > CONFIG_CRYPTO_TWOFISH=m > CONFIG_CRYPTO_TWOFISH_COMMON=m > CONFIG_CRYPTO_TWOFISH_X86_64=m > CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=m > CONFIG_CRYPTO_TWOFISH_AVX_X86_64=m > CONFIG_CRYPTO_DEFLATE=m > CONFIG_CRYPTO_ZLIB=m > CONFIG_CRYPTO_LZO=m > CONFIG_CRYPTO_LZ4=m > CONFIG_CRYPTO_LZ4HC=m > CONFIG_CRYPTO_ANSI_CPRNG=m > CONFIG_CRYPTO_DRBG_MENU=m > CONFIG_CRYPTO_DRBG_HMAC=y > # CONFIG_CRYPTO_DRBG_HASH is not set > # CONFIG_CRYPTO_DRBG_CTR is not set > CONFIG_CRYPTO_DRBG=m > CONFIG_CRYPTO_USER_API=m > CONFIG_CRYPTO_USER_API_HASH=m > CONFIG_CRYPTO_USER_API_SKCIPHER=m > CONFIG_CRYPTO_HASH_INFO=y > # CONFIG_CRYPTO_HW is not set > > > but when i try to use cryptsetup i get this: > > # cryptsetup -c aes-xts:plain64 -y -s 256 luksFormat > /dev/mapper/VolGroup01-media2 > > WARNING! > ======== > This will overwrite data on /dev/mapper/VolGroup01-media2 irrevocably. > > Are you sure? (Type uppercase yes): YES > Enter passphrase: > Verify passphrase: > device-mapper: reload ioctl on failed: Invalid argument > Failed to setup dm-crypt key mapping for device > /dev/mapper/VolGroup01-media2. > Check that kernel supports aes-xts:plain64 cipher (check syslog for > more info). > > > > Any ideas? > > i built cryptsetup with this useflags: > > nls openssl python udev urandom > > > > cryptsetup --help shows me i am able to use the options > > Default compiled-in device cipher parameters: > loop-AES: aes, Key 256 bits > plain: aes-cbc-essiv:sha256, Key: 256 bits, Password hashing: > ripemd160 > LUKS1: aes-xts-plain64, Key: 256 bits, LUKS header hashing: > sha1, RNG: /dev/random > > > any help / ideas or knowledge welcome. > > best regards > > marko > > > > >