From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v4.tansi.org (ns.km33513-03.keymachine.de [87.118.94.3]) by mail.saout.de (Postfix) with ESMTP for ; Sun, 13 Mar 2011 04:06:33 +0100 (CET) Received: from gatewagner.dyndns.org (84-74-164-239.dclient.hispeed.ch [84.74.164.239]) by v4.tansi.org (Postfix) with ESMTPA id D81C4205218 for ; Sun, 13 Mar 2011 04:06:31 +0100 (CET) Date: Sun, 13 Mar 2011 04:06:30 +0100 From: Arno Wagner Message-ID: <20110313030630.GA3697@tansi.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Subject: Re: [dm-crypt] Crypting a filesystem using an asymmetric GPG key ? List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On Sat, Mar 12, 2011 at 05:43:15PM +0000, Il Sdrucciole wrote: > Hello everybody, > > I am currently using several GNU/Linux distros (Ubuntu, Gentoo) and I would > like to crypt my entire disk. > > But the point is, I do not want to use any symmetric algorithm. There weill not be a way around that, unless you a) write it yourself and b) are willing to take a massive performance hit, as in a factor 1000 slower than symmetrical. Expect something like 100kB/s for RSA1024 and something like 25kB/s for RSA2048. (Writing will be faster though.) That is floppy speed. > More, I have > got GPG keys: why not use them to encrypt my FS ? By doing this, I would > have to give my private key and passphrase at boot time, and security would > be improved (possibility to use smartcards, etc.). Aeh, no? LUKS is about as secure as GPG is, likely more, as GPG has no anti-forensics. And you can already use a GPG key with plain dm-crypt to protect the master key. > So my question is, *Is there a way to crypt a filesystem with a GPG > asymmetric key ?* Yes, but you do not want to do that, see above. > Linking the standards would be very user-friendly. What standards? Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier