Re: [SLUG] Encrypted file system and re-install

From: Derek Glidden (dglidden@illusionary.com)
Date: Tue Oct 30 2001 - 12:10:29 EST


Norbert Cartagena wrote:
>
> I just recently installed SuSE Linux for a friend of
> mine who was tired of all the Windows crashes and
> viruses. I created 4 partitions on her system:
>
> /boot
> <swap>
> /home
> /
>
> / and /home are both using ReiserFS and /home is using
> encription for the file system. I was wondering what
> would happen (if anything) if she were to do a "clean"
> install of SuSE 7.3 on the / and /boot partitions,
> leaving /home untouched. Would I still be able to get
> into the mount point, though it's emcrypted? I guess
> what I'm asking is whether the passwords/keys/whatever
> is a part of the file system itself, held on the
> partition, or whether it's held in the / or /boot
> partitions.

I *believe* that that information is held inside the partition itself.
However, please make a backup of that partition (while mounted) before
testing this theory empirically. :)

Hmm... from the Linux Crypto HOWTO:

CONFIG_BLK_DEV_LOOP_USE_REL_BLOCK (Use relative block numbers...):

    This options allows you to copy around the file containing your
encrypted file system without affecting it's usability. Without this
option enabled, you have to make sure it stays at the exact same place
on the disk in order to use it, because the (absolute, as opposed to
relative) block numbers the file occupies on disk affect the crypto
cipher, see the question on copying files in the FAQ section.

So the crypto key is related to the data in the filesystem, however,
doing a reinstall may or may not affect the location depending on how
the kernel was compiled initially.

It also looks like this HOWTO is for the 2.2 kernel patches, not 2.4, so
things might have (almost certainly have) changed with the 2.4 tree.

My recommendation is to try it on a throwaway box and see what happens.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
#!/usr/bin/perl -w
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map
{$_%16or$t^=$c^=($m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;
$t^=(72,@z=(64,72,$a^=12*($_%16-2?0:$m&17)),$b^=$_%64?12:0,@z)
[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$h=5;$_=unxb24,join
"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$d=
unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d
>>12^$d>>4^$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*
8^$q<<6))<<9,$_=$t[$_]^(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}
print+x"C*",@a}';s/x/pack+/g;eval 

usage: qrpff 153 2 8 105 225 < /mnt/dvd/VOB_FILENAME \ | extract_mpeg2 | mpeg2dec -

http://www.cs.cmu.edu/~dst/DeCSS/Gallery/ http://www.eff.org/ http://www.anti-dmca.org/ http://www.sciencemag.org/cgi/content/full/293/5537/2028



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:03:30 EDT