How to user reiser4 and crypt plugin ??

How to user reiser4 and crypt plugin ??

[Keven Murphy]

Hello,

I have read so much about reiser4 and the crypto plugin. What I have not
found is any docs on how to set up a partition using the plugin.

I have the modules installed and I have created a reiser4 filesystem. I am
not sure what I need to do next.

Thanks from a reiser newbie,

Keven Murphy
murphyk@gdls.com

Murphy's Law
((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
U = Urgency    C = Complexity
I = Importance S = Skill
F = Frequency  A = Aggravation


This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.

Re: How to user reiser4 and crypt plugin ??

[Edward Shishkin]

Keven Murphy wrote:

>Hello,
>
>I have read so much about reiser4 and the crypto plugin. What I have not
>found is any docs on how to set up a partition using the plugin.
>  
>

Hello. Crypto transform is unsupported for a while, only compression 
(still not
for product using). The docs are under  construction.
 
Thanks,
Edward.


>I have the modules installed and I have created a reiser4 filesystem. I am
>not sure what I need to do next.
>
>Thanks from a reiser newbie,
>
>Keven Murphy
>murphyk@gdls.com
>
>Murphy's Law
>((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
>U = Urgency    C = Complexity
>I = Importance S = Skill
>F = Frequency  A = Aggravation
>
>
>This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
>
>
>  
>

Re: How to user reiser4 and crypt plugin ??

[Keven Murphy]

Thank you for the reply.

Do you see any issues with using reiser3 or reiser4 file system on a
loop-back encrypted device?

Some of the docs I have found say to stick with ext2 for the filesystem. I
was thinking reiser still would be a better choice.

Thank you for your help,

Keven Murphy
murphyk@gdls.com

Murphy's Law
((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
U = Urgency    C = Complexity
I = Importance S = Skill
F = Frequency  A = Aggravation

On Tue, 28 Jun 2005, Edward Shishkin wrote:

> Keven Murphy wrote:
>
> >Hello,
> >
> >I have read so much about reiser4 and the crypto plugin. What I have not
> >found is any docs on how to set up a partition using the plugin.
> >
> >
>
> Hello. Crypto transform is unsupported for a while, only compression
> (still not
> for product using). The docs are under  construction.
>
> Thanks,
> Edward.
>
>
> >I have the modules installed and I have created a reiser4 filesystem. I am
> >not sure what I need to do next.
> >
> >Thanks from a reiser newbie,
> >
> >Keven Murphy
> >murphyk@gdls.com
> >
> >Murphy's Law
> >((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
> >U = Urgency    C = Complexity
> >I = Importance S = Skill
> >F = Frequency  A = Aggravation
> >
> >
> >This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
> >
> >
> >
> >
>
>


This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.

Re: How to user reiser4 and crypt plugin ??

[Edward Shishkin]

Keven Murphy wrote:

>Thank you for the reply.
>
>Do you see any issues with using reiser3 or reiser4 file system on a
>loop-back encrypted device?
>  
>

No, it works for both ones.
Use the last patchsets for reiser4, report if something is wrong.

Thanks,
Edward.

>Some of the docs I have found say to stick with ext2 for the filesystem. I
>was thinking reiser still would be a better choice.
>
>Thank you for your help,
>
>Keven Murphy
>murphyk@gdls.com
>
>Murphy's Law
>((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
>U = Urgency    C = Complexity
>I = Importance S = Skill
>F = Frequency  A = Aggravation
>
>On Tue, 28 Jun 2005, Edward Shishkin wrote:
>
>  
>
>>Keven Murphy wrote:
>>
>>    
>>
>>>Hello,
>>>
>>>I have read so much about reiser4 and the crypto plugin. What I have not
>>>found is any docs on how to set up a partition using the plugin.
>>>
>>>
>>>      
>>>
>>Hello. Crypto transform is unsupported for a while, only compression
>>(still not
>>for product using). The docs are under  construction.
>>
>>Thanks,
>>Edward.
>>
>>
>>    
>>
>>>I have the modules installed and I have created a reiser4 filesystem. I am
>>>not sure what I need to do next.
>>>
>>>Thanks from a reiser newbie,
>>>
>>>Keven Murphy
>>>murphyk@gdls.com
>>>
>>>Murphy's Law
>>>((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
>>>U = Urgency    C = Complexity
>>>I = Importance S = Skill
>>>F = Frequency  A = Aggravation
>>>
>>>
>>>This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
>>>
>>>
>>>
>>>
>>>      
>>>
>>    
>>
>
>
>This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
>
>
>  
>

Re: How to user reiser4 and crypt plugin ??

[Hubert Chan]

On Tue, 28 Jun 2005 11:38:30 -0400 (EDT), Keven Murphy <murphyk@gdls.com> said:

> Thank you for the reply.  Do you see any issues with using reiser3 or
> reiser4 file system on a loop-back encrypted device?

I'm using reiser4 on a loopback encrypted device without problems.
(But then, I haven't had any hardware problems or powerlosses.)

> Some of the docs I have found say to stick with ext2 for the
> filesystem. I was thinking reiser still would be a better choice.

From what I hear, you should avoid using journaled filesystems on a
file-based loopback that is stored on a journaled filesystem.  I believe
that the reason for that is that a file-based loopback that is stored on
a journaled filesystem does not guarantee certain write ordering or that
journaled filesystems depend on.

But using a journaled filesystem on a device-based loopback should be
fine.

-- 
Hubert Chan <hubert@uhoreg.ca> - http://www.uhoreg.ca/
PGP/GnuPG key: 1024D/124B61FA
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA
Key available at wwwkeys.pgp.net.   Encrypted e-mail preferred.

Re: How to user reiser4 and crypt plugin ??

[David Masover]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hubert Chan wrote:
> On Tue, 28 Jun 2005 11:38:30 -0400 (EDT), Keven Murphy <murphyk@gdls.com> said:
> 
> 
>>Thank you for the reply.  Do you see any issues with using reiser3 or
>>reiser4 file system on a loop-back encrypted device?
> 
> 
> I'm using reiser4 on a loopback encrypted device without problems.
> (But then, I haven't had any hardware problems or powerlosses.)
> 
> 
>>Some of the docs I have found say to stick with ext2 for the
>>filesystem. I was thinking reiser still would be a better choice.
> 
> 
> From what I hear, you should avoid using journaled filesystems on a
> file-based loopback that is stored on a journaled filesystem.  I believe
> that the reason for that is that a file-based loopback that is stored on
> a journaled filesystem does not guarantee certain write ordering or that
> journaled filesystems depend on.
> 
> But using a journaled filesystem on a device-based loopback should be
> fine.

Isn't dm-crypt the new way of doing this?  Doesn't that actually prevent
you from using a file as the backend?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
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=QH/o
-----END PGP SIGNATURE-----

Re: How to user reiser4 and crypt plugin ??

[Hubert Chan]

On Tue, 28 Jun 2005 14:24:45 -0500, David Masover <ninja@slaphack.com> said:

> Hubert Chan wrote:
>> But using a journaled filesystem on a device-based loopback should be
>> fine.

> Isn't dm-crypt the new way of doing this?

Yes and no.  dm-crypt is recommended over cryptoloop.  But there is also
loop-AES, which is more secure (in some modes) than dm-crypt (currently).

> Doesn't that actually prevent you from using a file as the backend?

Yes, I think so.

-- 
Hubert Chan <hubert@uhoreg.ca> - http://www.uhoreg.ca/
PGP/GnuPG key: 1024D/124B61FA
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA
Key available at wwwkeys.pgp.net.   Encrypted e-mail preferred.

Re: How to user reiser4 and crypt plugin ??

[Gregory Maxwell]

On 6/28/05, Hubert Chan <hubert@uhoreg.ca> wrote:
> > Isn't dm-crypt the new way of doing this?
> Yes and no.  dm-crypt is recommended over cryptoloop.  But there is also
> loop-AES, which is more secure (in some modes) than dm-crypt (currently).

There is now support for both LRW-AES and ESSIV in the mainstream kernel.
With ESSIV the security should be the same as loop-aes and with
LRW-AES potentially better.

For the highest security you should also use the LUKS cryptosetup
because it provides hardening for passwords.

Re: How to user reiser4 and crypt plugin ??

[Hubert Chan]

On Tue, 28 Jun 2005 16:15:38 -0400, Gregory Maxwell <gmaxwell@gmail.com> said:

> On 6/28/05, Hubert Chan <hubert@uhoreg.ca> wrote:
>> > Isn't dm-crypt the new way of doing this?  Yes and no.  dm-crypt is
>> recommended over cryptoloop.  But there is also loop-AES, which is
>> more secure (in some modes) than dm-crypt (currently).

> There is now support for both LRW-AES and ESSIV in the mainstream
> kernel.  With ESSIV the security should be the same as loop-aes and
> with LRW-AES potentially better.

Thanks for the info.  I haven't look into the kernel for a little
while -- I'm still using a slightly older version.

> For the highest security you should also use the LUKS cryptosetup
> because it provides hardening for passwords.

-- 
Hubert Chan <hubert@uhoreg.ca> - http://www.uhoreg.ca/
PGP/GnuPG key: 1024D/124B61FA
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA
Key available at wwwkeys.pgp.net.   Encrypted e-mail preferred.

Re: How to user reiser4 and crypt plugin ??

[Xuân Baldauf]

Edward Shishkin wrote:

> Keven Murphy wrote:
>
>> Hello,
>>
>> I have read so much about reiser4 and the crypto plugin. What I have not
>> found is any docs on how to set up a partition using the plugin.
>>  
>>
>
> Hello. Crypto transform is unsupported for a while,

That's too bad. Because if you do not use the latest machines (e.g. only 
1 GHz CPU), you get, with cheap hard disks, 42 MB/s without encryption 
but only 12 MB/s with aes-cbc-essiv:sha256 (using dm-crypt). Thus, 
encryption seriously sacrifies performance. If you could limit 
performance-sacrificing to data which is really important (say: /home or 
/etc, but not /usr or /bin), performance would suffer less. Encryption 
should be orthogonal to the volume|partition the data is stored on. So 
I'm looking forward to (transparent) file level encryption becoming 
usable. :-)

> only compression (still not
> for product using). The docs are under  construction.
>
> Thanks,
> Edward.

ciao,
Xuân.

>
>
>> I have the modules installed and I have created a reiser4 filesystem. 
>> I am
>> not sure what I need to do next.
>>
>> Thanks from a reiser newbie,
>>
>> Keven Murphy
>> murphyk@gdls.com
>>
>> Murphy's Law
>> ((U+C+I)x(10-S))/20xAx1/(1-sin(F/10))
>> U = Urgency    C = Complexity
>> I = Importance S = Skill
>> F = Frequency  A = Aggravation
>>
>>
>> This is an e-mail from General Dynamics Land Systems. It is for the 
>> intended recipient only and may contain confidential and privileged 
>> information.  No one else may read, print, store, copy, forward or 
>> act in reliance on it or its attachments.  If you are not the 
>> intended recipient, please return this message to the sender and 
>> delete the message and any attachments from your computer. Your 
>> cooperation is appreciated.
>>
>>
>>  
>>
>
>
>