Return-Path: Received: from r33141.ovh.net (rps4685.ovh.net [94.23.20.27]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.saout.de (Postfix) with ESMTPS for ; Fri, 7 May 2010 16:37:12 +0200 (CEST) Message-ID: <4BE425BB.9020701@mofokom.biz> Date: Fri, 07 May 2010 16:37:47 +0200 From: Warren Crossing MIME-Version: 1.0 References: <4BE27CC0.1070707@mofokom.biz> <4BE285BD.2080401@redhat.com> <4BE291EE.7050500@mofokom.biz> <4BE293A5.5040904@redhat.com> <4BE2C380.6050009@mofokom.biz> <4BE2C765.4060801@redhat.com> In-Reply-To: <4BE2C765.4060801@redhat.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030402030301030402040701" Subject: Re: [dm-crypt] LuksResume with key on partition List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Milan Broz Cc: dm-crypt@saout.de This is a cryptographically signed message in MIME format. --------------ms030402030301030402040701 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable hmmm. It now works.. I seem to have miscalculated a factor of 8 somewhere, the correct size of= my key was 1216bytes=3D9728bits I also had to change lib/utils.c to 483c483 < for(i =3D 0; read_horizon =3D=3D 0 || i <=3D read_horizon= ; i++) { --- > for(i =3D 0; read_horizon =3D=3D 0 || i < read_horizon; = i++) { Will this patch break other keys??? =2E. Now I can use the following udev rule DRIVERS=3D=3D"usb" ACTION=3D=3D"remove" SUBSYSTEM=3D=3D"usb", ENV{ID_SER= IAL_SHORT}=3D=3D"001D",=20 RUN+=3D"/usr/bin/xscreensaver-command -display :0.0 -lock" DRIVERS=3D=3D"usb" ACTION=3D=3D"remove" SUBSYSTEM=3D=3D"usb", ENV{ID_SER= IAL_SHORT}=3D=3D"001D",=20 RUN+=3D"/sbin/cryptsetup luksSuspend safe" DRIVERS=3D=3D"usb" ACTION=3D=3D"add" SUBSYSTEM=3D=3D"usb", ENV{ID_SERIAL= _SHORT}=3D=3D"001D",=20 RUN+=3D"/usr/bin/xscreensaver-command -display :0.0 -deactivate" DRIVERS=3D=3D"sd" ACTION=3D=3D"add" SUBSYSTEM=3D=3D"block", ENV{ID_SERIA= L_SHORT}=3D=3D"001D",=20 RUN+=3D"/usr/sbin/cryptsetup luksResume safe -d /dev/%k -s 9728" Milan Broz wrote: > On 05/06/2010 03:26 PM, Warren Crossing wrote: >> Milan Broz wrote: >>> On 05/06/2010 11:54 AM, Warren Crossing wrote: >>> >>>> I am using cryptsetup 2:1.1.0-2.1 from debian >>>> I tried to get the cvs but cant dig cvs.saout.de (not even from saou= t.de ns)????? >>> >>> http://code.google.com/p/cryptsetup/ >>> (where do you get that old cvs address?) >> >> From www.saout.de. - is this an old dead site? > > No, but svn and project page is now on Google code site. There is lot o= f old information > on wiki seems (But IIRC link to cryptsetup page was updated. Strange.) > >>> try 1.1.1-rc2 please and if it doesn't work, I need some reproducer >>> (I tried simple passphrase and it works here, I think I even used 1.1= =2E0 for test) >> >> I don't have a spare disk handy (perhaps tonight I can try) - so I tri= ed with loops, but it fails with >> >> "Device /dev/loop4 is not a valid LUKS device." > > luksSuspend/Resume is supported on LUKS devices only, it will be never = supported > for plain devices (there is no way how to verify the passphrase is corr= ect, > it can lead to data corruption.) > > Instead of >> cryptsetup -c aes-plain -h sha512 -b 2048 create test /dev/loop4 -d ke= y > > you have to use > cryptsetup luksFormat /dev/loop4 key > > then > cryptsetup luksOpen /dev/loop4 -d key > > Keep default cipher better, not sure why are you using known-IV vulnera= ble mode here... > > Milan > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt --------------ms030402030301030402040701 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGNDCC AxYwggJ/oAMCAQICCQDBH+H2LU+1uzANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJQTDER MA8GA1UEBxMIV2Fyc3phd2ExGDAWBgNVBAMTD1dhcnJlbiBDcm9zc2luZzEqMCgGCSqGSIb3 DQEJARYbd2FycmVuLmNyb3NzaW5nQG1vZm9rb20uYml6MB4XDTEwMDExNDEwMzYxMloXDTEx MDExNDEwMzYxMlowZjELMAkGA1UEBhMCUEwxETAPBgNVBAcTCFdhcnN6YXdhMRgwFgYDVQQD Ew9XYXJyZW4gQ3Jvc3NpbmcxKjAoBgkqhkiG9w0BCQEWG3dhcnJlbi5jcm9zc2luZ0Btb2Zv a29tLmJpejCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAzi4N6j2KLaERCrbtm5jTzOv3 3qBLavij+Ymx8uQzrYGCXVB0huK1HHkpH1shensIOiSQiLymsCC2vaRagv6WWoRZyHggUs/3 7mrr/0XeJnfPeLGAHNlcT4W9dZOUJWYagUj4BzLGO2siEe65IXlBUq8J1RuSOYFPAXR0ffBr mFsCAwEAAaOByzCByDAdBgNVHQ4EFgQUG+WM3O1weUsZxdgV772YuAcN5QUwgZgGA1UdIwSB kDCBjYAUG+WM3O1weUsZxdgV772YuAcN5QWhaqRoMGYxCzAJBgNVBAYTAlBMMREwDwYDVQQH EwhXYXJzemF3YTEYMBYGA1UEAxMPV2FycmVuIENyb3NzaW5nMSowKAYJKoZIhvcNAQkBFht3 YXJyZW4uY3Jvc3NpbmdAbW9mb2tvbS5iaXqCCQDBH+H2LU+1uzAMBgNVHRMEBTADAQH/MA0G CSqGSIb3DQEBBQUAA4GBADd1OLi5c9A7mR3Egb4oFMXAf7kEIGQtSMdgvtB4swyRCbwqgbWu 6VPiFiSJNdodXeqzOD859OOCBJqXBVz5P3fJtFMhJ4h2E0bT/OA6UGhAk/MfzUCdaMD4maNC UHzlu3MCvIxZZky7ef01+GixJqMcGE6JNas+L6ZTFz9yXSEkMIIDFjCCAn+gAwIBAgIJAMEf 4fYtT7W7MA0GCSqGSIb3DQEBBQUAMGYxCzAJBgNVBAYTAlBMMREwDwYDVQQHEwhXYXJzemF3 YTEYMBYGA1UEAxMPV2FycmVuIENyb3NzaW5nMSowKAYJKoZIhvcNAQkBFht3YXJyZW4uY3Jv c3NpbmdAbW9mb2tvbS5iaXowHhcNMTAwMTE0MTAzNjEyWhcNMTEwMTE0MTAzNjEyWjBmMQsw CQYDVQQGEwJQTDERMA8GA1UEBxMIV2Fyc3phd2ExGDAWBgNVBAMTD1dhcnJlbiBDcm9zc2lu ZzEqMCgGCSqGSIb3DQEJARYbd2FycmVuLmNyb3NzaW5nQG1vZm9rb20uYml6MIGfMA0GCSqG SIb3DQEBAQUAA4GNADCBiQKBgQDOLg3qPYotoREKtu2bmNPM6/feoEtq+KP5ibHy5DOtgYJd UHSG4rUceSkfWyF6ewg6JJCIvKawILa9pFqC/pZahFnIeCBSz/fuauv/Rd4md894sYAc2VxP hb11k5QlZhqBSPgHMsY7ayIR7rkheUFSrwnVG5I5gU8BdHR98GuYWwIDAQABo4HLMIHIMB0G A1UdDgQWBBQb5Yzc7XB5SxnF2BXvvZi4Bw3lBTCBmAYDVR0jBIGQMIGNgBQb5Yzc7XB5SxnF 2BXvvZi4Bw3lBaFqpGgwZjELMAkGA1UEBhMCUEwxETAPBgNVBAcTCFdhcnN6YXdhMRgwFgYD VQQDEw9XYXJyZW4gQ3Jvc3NpbmcxKjAoBgkqhkiG9w0BCQEWG3dhcnJlbi5jcm9zc2luZ0Bt b2Zva29tLmJpeoIJAMEf4fYtT7W7MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEA N3U4uLlz0DuZHcSBvigUxcB/uQQgZC1Ix2C+0HizDJEJvCqBta7pU+IWJIk12h1d6rM4Pzn0 44IEmpcFXPk/d8m0UyEniHYTRtP84DpQaECT8x/NQJ1owPiZo0JQfOW7cwK8jFlmTLt5/TX4 aLEmoxwYTok1qz4vplMXP3JdISQxggLnMIIC4wIBATBzMGYxCzAJBgNVBAYTAlBMMREwDwYD VQQHEwhXYXJzemF3YTEYMBYGA1UEAxMPV2FycmVuIENyb3NzaW5nMSowKAYJKoZIhvcNAQkB Fht3YXJyZW4uY3Jvc3NpbmdAbW9mb2tvbS5iaXoCCQDBH+H2LU+1uzAJBgUrDgMCGgUAoIIB yjAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xMDA1MDcxNDM3 NDdaMCMGCSqGSIb3DQEJBDEWBBSHFt+CJLk1Y6COY5JsDv+UlXL0LDBfBgkqhkiG9w0BCQ8x UjBQMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgYIGCSsGAQQBgjcQBDF1MHMwZjELMAkG A1UEBhMCUEwxETAPBgNVBAcTCFdhcnN6YXdhMRgwFgYDVQQDEw9XYXJyZW4gQ3Jvc3Npbmcx KjAoBgkqhkiG9w0BCQEWG3dhcnJlbi5jcm9zc2luZ0Btb2Zva29tLmJpegIJAMEf4fYtT7W7 MIGEBgsqhkiG9w0BCRACCzF1oHMwZjELMAkGA1UEBhMCUEwxETAPBgNVBAcTCFdhcnN6YXdh MRgwFgYDVQQDEw9XYXJyZW4gQ3Jvc3NpbmcxKjAoBgkqhkiG9w0BCQEWG3dhcnJlbi5jcm9z c2luZ0Btb2Zva29tLmJpegIJAMEf4fYtT7W7MA0GCSqGSIb3DQEBAQUABIGAp5SFYbKt01yE KPNklMvXH9ioi+U2nd4O361sprI1nLvXjfwaCsGCs7tls8xsDw+6jH9TJ/ObFouFmclimnsF q4Z3qZv+S6NGMq2tEsR6mNiBiXmzetD6isrYv/bonwqCLkqdLlaVjxyyeT0b511WZy/cRLbq B9VeCjhTk6pFcAYAAAAAAAA= --------------ms030402030301030402040701--