Re: [dm-crypt] cryptsetup, LUKS, plausible deniability

[Milan Broz <mbroz@redhat.com>]

Arno Wagner wrote:
>> Do you think that I should try to somehow integrate Truecrypt containers
>> compatibility (for open)? Would it be useful?
> 
> I don't think so. Maybe write a wrapper about their own utilities
> that has a LUKS-compatible commandline and can either call LUKS
> or the Truecrypt stuff, depending on a small format detector.
> That would probably be sufficient for most uses and far less effort
> that to support a foreign format.

Well, so when the mail is in list, I'll add more thoughts here :-)
- support some foreign format should not be such problem, the
stacking of several dmcrypt devices is more complicated problem here
- truecrypt is not in all distros (because of licence), it is not meant
as replacement for its tools but just simple utility to allow mount such device
- TC uses dm-crypt anyway through dmsetup wrapper and such wrapper
is not possible for libcryptsetup use

But the license is showstopper here anyway.

Milan