Re: [dm-crypt] Feitian PKI donation to dm-crypt projetc

[Arno Wagner <arno@wagner.name>]

On Wed, Nov 03, 2010 at 07:26:12PM +0100, Jean-Michel Pour? - GOOZE wrote:
> Dear friends,
> 
> We would be happy to offer three Feitian PKI smartcards to the dm-crypt
> project. Free Software developer can register here:
> http://gooze.eu/feitian-pki-free-software-developer-card
> 
> Also, we are currently writing a HOWTO to publish on GOOZE.
> 
> Is there a way to enable dm-crypt using opensc-pkcs11.so on startup?
> The idea is to have a complete encrypted system on boot.
> 
> This probably involves creating an initrd with OpenSSL and OpenSC
> included. Did anyone succeed in this?

Having a not completely encrypted initrd and kernel does
not qualify as "completely encrypted system on boot". 

Anyways, this is not really in the dm-crypt/LUKS focus,
although some people go the way of having an initrd that
does set-up an encrypted root. They typically find it 
painful and difficult to set-up, but it is possible.

The main dm-crypt/LUKS focus is encrypted partitions in 
an otherwise not encrypted system.

The only interface for integrating external keys is by
reading them from file or stdin and that is by desing
to keep things simple.

Arno
-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier