Re: [CryptoAPI-devel] dfc / util-linux rpms

[Herbert V. R. <hv...@hv...>]

On Sun, 2002-03-24 at 22:13, Herbert Valerio Riedel wrote:
> 3.) util-linux rh7.2 rpms for testing are available here:
> http://www.ifs.tuwien.ac.at/~hvr/crypto/
>=20
> they haven't got much testing yet... so if there's anyone w/ redhat
> machines... please test them!

I've done some quick tests... it seems, that we can offer people who
started using loop-AES a migration path to cryptoloop...

e.g.; if you created your volumes w/ loop-AES w/
losetup-aes -e aes256 -H sha512 /dev/loop0 /dev/hde3

you can access that same volume w/ cryptoloop w/
losetup -e aes -k 256 -P sha512 /dev/loop0 /dev/hde3

...a table for translating loop-AES' losetup options to cryptoapi's
losetup options is below (haven't tested all yet!)


loop-AES			cryptoapi
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
-e aes128 -H rmd160		-e aes -k 128
-e aes128 -H sha256		-e aes -k 128 -P sha256
-e aes128 -H sha384		-e aes -k 128 -P sha384
-e aes128 -H sha512		-e aes -k 128 -P sha512

[...correspondig for 192 bit keylength...]

-e aes256 -H rmd160		-e aes -k 256
-e aes256 -H sha256		-e aes -k 256 -P sha256
-e aes256 -H sha384		-e aes -k 256 -P sha384
-e aes256 -H sha512		-e aes -k 256 -P sha512

(and now the interesting part, when not specifying the -H option)

-e aes128			-e aes -k 128 -P sha256
-e aes192			-e aes -k 192 -P sha384
-e aes256			-e aes -k 256 -P sha512

regards,
--=20
Herbert Valerio Riedel       /    Phone: (EUROPE) +43-1-58801-18840
Email: hv...@hv...       /    Finger hv...@gn... for GnuPG Public Key
GnuPG Key Fingerprint: 7BB9 2D6C D485 CE64 4748  5F65 4981 E064 883F
4142