Re: rijndael loopback encryption was [Re: Corrupted/unreadable journal: reiser vs. ext3]

[eazgwmir@umail.furryterror.org (Zygo Blaxell)]

In article <20030213113003.7ee7af6e.philippe.gramoulle@mmania.com>,
Philippe =?ISO-8859-15?Q?Gramoull=E9?=  <philippe.gramoulle@mmania.com> wrote:
>Hi Zygo,
>
>This is a little bit OT from the thread on ReiserFS ML, but could you tell =
>me more
>about your laptop setup with rijndael loopback encryption and how you insta=
>lled it
>, what kernel version/patches ( link to a guide or FAQ or tutorial about ho=
>w to set this up)
>
>I had once a NOC latop full of critical infos stolen in the tube in Paris,F=
>rance
>and it had been a mess to change all the passwords, etc...
>
>Having every FS encrypted would make my paranoid ego feel much better ;o)

Linux 2.4.20, loop-AES 1.7b (replaces the standard loop.o module).
See http://loop-aes.sourceforge.net for loop-AES.  The package tarball
contains a crypto-ramdisk-boot script and some information on how to
set things up.

Note that you should probably encrypt swap as well, and watch out for
features like suspend-to-disk (aka "hibernate") that save the contents
of RAM without encryption.

-- 
Zygo Blaxell (Laptop) <zblaxell@feedme.hungrycats.org>
GPG = D13D 6651 F446 9787 600B AD1E CCF3 6F93 2823 44AD