Mounting multiple directories using ecryptfs

Mounting multiple directories using ecryptfs

[Raj [mail list]]

Hi List,

I am using ecryptyfs to store some sensitive data in my PC (Debian
wheezy). The data is in a partition and the partition is mounted
automatically on bootup using /etc/fstab I have setup
/root/.ecryptfsrc with correct parameters. Contents of my .ecryptfsrc
are as follows:

    key=passphrase:passphrase_passwd_file=/mnt/usb/password.txt
    ecryptfs_sig=deadbeefdeadbeef
    ecryptfs_cipher=aes
    ecryptfs_key_bytes=16
    ecryptfs_passthrough=n
    ecryptfs_enable_filename_crypto=n

This partition is correctly getting mounted after a system reboot. So far fine.

I also need to transport this sensitive data to a remote place in a
USB drive securely. So I want to format a usb drive with ext2 fs and
mount it using ecryptfs. I also do not want to reuse the password and
want to give an one time password to each USB drive when the ecryptfs
is mounted.

Formatting and mounting of ext2 partition works as expected. The
command I used for mounting the new usb device using ecryptfs is as
follows. the password is stored (temporarily) in /root/usbpasswd.txt :

    mount  -t ecryptfs  \
    -o "rw,key=passphrase:passphrase_passwd_file=/root/usbpasswd.txt,\
    ecryptfs_unlink_sigs,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,\
    ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=y" \
    /mnt/usb2/ /mnt/usb2/

Instead of mounting the freshly formatted /mnt/usb2 using password in
file, I am prompted for `Passphrase File` as follows:

    Passphrase File: /root/usbpasswd.txt
    Passphrase File: /mnt/usb/password.txt
    Passphrase File: /root/usbpasswd.txt
    Passphrase File: ^C

What could be wrong here?

Thanks and regards,

Raj

Fwd: Mounting multiple directories using ecryptfs

[Raj [mail list]]

A gentle reminder to see if some one can help me with this.

I have posted this to StackOverflow too, but with no results. Link to
the SO question:

http://stackoverflow.com/questions/20248427/

Thanks and regards,

Raj

---------- Forwarded message ----------
From: Raj [mail list] <rajlistuser@gmail.com>
Date: Thu, Nov 28, 2013 at 11:27 AM
Subject: Mounting multiple directories using ecryptfs
To: ecryptfs@vger.kernel.org


Hi List,

I am using ecryptyfs to store some sensitive data in my PC (Debian
wheezy). The data is in a partition and the partition is mounted
automatically on bootup using /etc/fstab I have setup
/root/.ecryptfsrc with correct parameters. Contents of my .ecryptfsrc
are as follows:

    key=passphrase:passphrase_passwd_file=/mnt/usb/password.txt
    ecryptfs_sig=deadbeefdeadbeef
    ecryptfs_cipher=aes
    ecryptfs_key_bytes=16
    ecryptfs_passthrough=n
    ecryptfs_enable_filename_crypto=n

This partition is correctly getting mounted after a system reboot. So far fine.

I also need to transport this sensitive data to a remote place in a
USB drive securely. So I want to format a usb drive with ext2 fs and
mount it using ecryptfs. I also do not want to reuse the password and
want to give an one time password to each USB drive when the ecryptfs
is mounted.

Formatting and mounting of ext2 partition works as expected. The
command I used for mounting the new usb device using ecryptfs is as
follows. the password is stored (temporarily) in /root/usbpasswd.txt :

    mount  -t ecryptfs  \
    -o "rw,key=passphrase:passphrase_passwd_file=/root/usbpasswd.txt,\
    ecryptfs_unlink_sigs,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,\
    ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=y" \
    /mnt/usb2/ /mnt/usb2/

Instead of mounting the freshly formatted /mnt/usb2 using password in
file, I am prompted for `Passphrase File` as follows:

    Passphrase File: /root/usbpasswd.txt
    Passphrase File: /mnt/usb/password.txt
    Passphrase File: /root/usbpasswd.txt
    Passphrase File: ^C

What could be wrong here?

Thanks and regards,

Raj

Re: Fwd: Mounting multiple directories using ecryptfs

[James Muir]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/06/2013 06:03 AM, Raj [mail list] wrote:

> Formatting and mounting of ext2 partition works as expected. The 
> command I used for mounting the new usb device using ecryptfs is
> as follows. the password is stored (temporarily) in
> /root/usbpasswd.txt :
> 
> mount  -t ecryptfs  \ -o
> "rw,key=passphrase:passphrase_passwd_file=/root/usbpasswd.txt,\ 
> ecryptfs_unlink_sigs,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,\ 
> ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=y" \ 
> /mnt/usb2/ /mnt/usb2/
> 

have you tried dropping the quotes on the options-string?

- -James M

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlKh8c4ACgkQ4Arkm0Hw/FJWxACeL1DjlzWWuTJqKnBwdHuJaEk9
Nt4AmwYcUtwoAZWeUxGgrqjuIL90w+GW
=lDxx
-----END PGP SIGNATURE-----

Re: Fwd: Mounting multiple directories using ecryptfs

[Raj [mail list]]

On Fri, Dec 6, 2013 at 9:18 PM, James Muir <muir.james.a@gmail.com> wrote:
>> mount  -t ecryptfs  \ -o
>> "rw,key=passphrase:passphrase_passwd_file=/root/usbpasswd.txt,\
>> ecryptfs_unlink_sigs,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,\
>> ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=y" \
>> /mnt/usb2/ /mnt/usb2/
>>
>
> have you tried dropping the quotes on the options-string?

Tried now, No change in result.

# mount  -t ecryptfs -o
rw,key=passphrase:passphrase_passwd_file=/root/usbpasswd.txt,ecryptfs_unlink_sigs,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=y
/mnt/usb2/ /mnt/usb2/
Passphrase File: /root/usbpasswd.txt
Passphrase File: ^C
#

Its again asking for Passphrase File

Thanks and Regards,

Raj