From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v6.tansi.org (ns.km31936-01.keymachine.de [87.118.116.4]) by mail.server123.net (Postfix) with ESMTP for ; Sat, 27 Dec 2014 08:38:37 +0100 (CET) Received: from gatewagner.dyndns.org (77-57-49-177.dclient.hispeed.ch [77.57.49.177]) by v6.tansi.org (Postfix) with ESMTPA id BEA2F20DC238 for ; Sat, 27 Dec 2014 08:38:36 +0100 (CET) Date: Sat, 27 Dec 2014 08:38:36 +0100 From: Arno Wagner Message-ID: <20141227073836.GA16775@tansi.org> References: <549E2C3C.7040709@gmx.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <549E2C3C.7040709@gmx.net> Subject: Re: [dm-crypt] Asustor NAS and cryptsetup 1.6.1 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de Please do not send HTML Email to this list.... On Sat, Dec 27, 2014 at 04:49:16 CET, msalists@gmx.net wrote: > > >=20 > > > > Hello,
>
> I am new to cryptsetup and trying to figure out some things.
> The background: I purchased an Asustore AS-304T NAS device that > uses cryptsetup to set up encrypted shared folders.
> I am trying to make sure that I will be able to access all my data > on the disks outside of the NAS device using a regular PC with > linux installed, in case the NAS device itself fails and I need to > get to my data.
> I will probably post some questions about this later.
>
> For now, I have a question about the version of cryptsetup used by > the device.
> I have set up a test system with a RAID1 volume and an encrypted > folder on it using the regular Asustor maintenance interface.
> Logging in to the device as root, "cryptsetup --version" shows "cry= ptsetup > 1.6.1" as installed version.
>
> Thus my first question: I saw that the current version seems to be > 1.6.6
> What is the status of 1.6.1? Is it a stable production release > that can be used without problems? Or are there critical issues > that would require using a newer version than 1.6.1 ? I went > through the release notes of the versions above 1.6.1, but it is > not clear how critical the fixes/changes since version 1.6.1 are
> Also, what other sub-components or libraries besides cryptsetup > should I check?
>
> Furthermore, using "cryptsetup status EncTest.1" to show some > basics about the created test container shows this:
> /dev/mapper/EncTest.1 is active and is in use.
> =A0 type:=A0=A0=A0 PLAIN
> =A0 cipher:=A0 aes-cbc-plain
> =A0 keysize: 256 bits
> =A0 device:=A0 /dev/loop0
> =A0 loop:=A0=A0=A0 /volume1/.@loopfiles/EncTest
> =A0 offset:=A0 0 sectors
> =A0 size:=A0=A0=A0 11619787984 sectors
> =A0 mode:=A0=A0=A0 read/write
>
> Is this a plausible setup that makes sense, or is there something > wrong with this default?
> I have found out a few things that are making me a bit nervous:
> 1. The initially created empty container is "huge":=A0 face=3D"Arial">it uses up 4.5GB without= me > storing any data inside!
> 2. The management interface does not seem to offer any way to > create or download backups of the encryption headers for backup > purposes as suggested in > https://c= ode.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions#6._Backup_and_Dat= a_Recovery.
> 3. There is an "auto-mount"option for encrypted folders that allow > shutting down and rebooting the device without having to re-enter > the encryption pass-phrase in order to access the encrypted folder > - it is just there and mounted automatically. Not sure if this is > still "secure"" or if this means that my pass-phrase is stored > somewhere on the device in clear unencrypted form (I suspect the > latter).
>
> So I am wondering if there are things in their setup that are > fundamentally flawed.
>
> Thank you in advance!
>
> > > > _______________________________________________ > dm-crypt mailing list > dm-crypt@saout.de > http://www.saout.de/mailman/listinfo/dm-crypt --=20 Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of=20 "news" is "something that hardly ever happens." -- Bruce Schneier