From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <jmpoure@gooze.eu>
Received: from 27.mail-out.ovh.net (3.27.mail-out.ovh.net [46.105.56.209])
 by mail.saout.de (Postfix) with SMTP
 for <dm-crypt@saout.de>; Mon,  4 Apr 2011 12:10:09 +0200 (CEST)
From: Jean-Michel =?ISO-8859-1?Q?Pour=E9?= - GOOZE <jmpoure@gooze.eu>
Content-Type: text/plain; charset="utf-8"
Date: Mon, 04 Apr 2011 11:10:01 +0200
Message-ID: <1301908201.19306.6.camel@acer>
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Subject: [dm-crypt] Using cryptsetup / lvm with OpenSC smartcard
Reply-To: jmpoure@gooze.eu
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

Dear all,

I would like to write a tutorial about lvm encrypted partitions and
OpenSC smartcards. I Googled but could not find examples of lvm
partitions encrypted with an OpenSC smartcard.

First, it seems that we cannot use the PKCS#11 cryto engine of the
OpenSC smartcard. So we have to use the smartcard to store the
key/passphrase. 

Do you confirm?

Second, storing objects and retrieving them on smartcard is described
here (Feitian PKI sold on GOOZE website):
http://www.gooze.eu/howto/smartcard-quickstarter-guide/storing-objects-on-smartcard

Any idea/help appreciated.

Kind regards,
-- 
                  Jean-Michel Pouré - Gooze - http://www.gooze.eu