From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ludwig.nussel@suse.de>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 3If-dvSlkb08 for <dm-crypt@saout.de>;
 Tue, 18 Sep 2012 09:34:21 +0200 (CEST)
Received: from mx2.suse.de (cantor2.suse.de [195.135.220.15])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Tue, 18 Sep 2012 09:34:21 +0200 (CEST)
Message-ID: <50581FCC.3090504@suse.de>
Date: Tue, 18 Sep 2012 09:16:28 +0200
From: Ludwig Nussel <ludwig.nussel@suse.de>
MIME-Version: 1.0
References: <k2vpn4$96e$1@ger.gmane.org>
In-Reply-To: <k2vpn4$96e$1@ger.gmane.org>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: Re: [dm-crypt] Migrating from loop AES to dm-crypt
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Nick Battle <nick.battle@gmail.com>
Cc: dm-crypt@saout.de

Nick Battle wrote:
> I've just upgraded from openSUSE 12.1 to 12.2. I find that the latest ver=
sion of
> mount and losetup do not have the file encryption options they used to, s=
ince
> everyone should have migrated to dm-crypt. The trouble is, I now have some
> encrypted backup volumes that I cannot read!
>=20
> I used to mount the archives with:
>=20
> 	mount ... -o loop,phash=3Dsha256,encryption=3Daes128
>=20
> It looks like I should be using the loopaesOpen option to cryptsetup to m=
ount
> these now, but I cannot find a combination of options that works. I'm try=
ing the
> following:
>=20
> cryptsetup loopaesOpen <device> <name> --key-file pp --key-size 128 --hash
> sha256 -c aes-cbc-plain

IIRC loopaesOpen is for the multi key mode of newer loop aes. The crypto
patches we had in openSUSE were based on a loop aes from a decade ago
which didn't do anything fancy yet. So standard 'create' should work
just fine with the parameters you figured out already. See also
http://en.opensuse.org/SDB:Encrypted_filesystems#aes_cryptoloop_image

cu
Ludwig

--=20
 (o_   Ludwig Nussel
 //\
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imend=F6rffe=
r, HRB 16746 (AG N=FCrnberg)=20