Re: [dm-crypt] LuksResume with key on partition

[Milan Broz <mbroz@redhat.com>]

On 05/06/2010 03:26 PM, Warren Crossing wrote:
> Milan Broz wrote:
>> On 05/06/2010 11:54 AM, Warren Crossing wrote:
>>
>>> I am using cryptsetup 2:1.1.0-2.1 from debian
>>> I tried to get the cvs but cant dig cvs.saout.de (not even from saout.de ns)?????
>>
>> http://code.google.com/p/cryptsetup/
>> (where do you get that old cvs address?)
> 
>  From www.saout.de. - is this an old dead site?

No, but svn and project page is now on Google code site. There is lot of old information
on wiki seems (But IIRC link to cryptsetup page was updated. Strange.)

>> try 1.1.1-rc2 please and if it doesn't work, I need some reproducer
>> (I tried simple passphrase and it works here, I think I even used 1.1.0 for test)
> 
> I don't have a spare disk handy (perhaps tonight I can try) - so I tried with loops, but it fails with
> 
> "Device /dev/loop4 is not a valid LUKS device."

luksSuspend/Resume is supported on LUKS devices only, it will be never supported
for plain devices (there is no way how to verify the passphrase is correct,
it can lead to data corruption.)

Instead of
> cryptsetup -c aes-plain -h sha512 -b 2048 create test /dev/loop4 -d key

you have to use 
cryptsetup luksFormat /dev/loop4 key

then
cryptsetup luksOpen /dev/loop4 -d key

Keep default cipher better, not sure why are you using known-IV vulnerable mode here...

Milan