From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) by mail.saout.de (Postfix) with ESMTP for ; Sat, 26 Jun 2010 17:29:14 +0200 (CEST) Message-ID: <4C261CC4.7080308@redhat.com> Date: Sat, 26 Jun 2010 17:29:08 +0200 From: Milan Broz MIME-Version: 1.0 References: <1954592487.20100612200634@core.com.pl> In-Reply-To: <1954592487.20100612200634@core.com.pl> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [dm-crypt] cryptsetup with des or des3 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "booger@post.pl" Cc: dm-crypt@saout.de On 06/12/2010 08:06 PM, booger@post.pl wrote: > Hello, > > I own the QNAP TS419 PRO NAS device which is basically: > > Linux NAS 2.6.30.6 #1 Tue Apr 27 02:06:10 CST 2010 armv5tel unknown > > It has dm-crypt support and I am trying to encrypt my external disk, > connected by esata interface. It is visible as /dev/sdy, it has one > partition, /dev/sdy1. > > Unfortunatelly when I do cryptsetup luksFormat I get following error message: The command fails, because you are trying to use AES, not DES or triple DES. If there is no aes module (try modprobe aes) and you really want to force use 3DES, you can - just you have to specify key size also. (But you cannot use ESSIV here, just plain or benbi type IV mode.) For DES: cryptsetup -c des-cbc-plain -s 64 luksFormat FOR 3DES: cryptsetup -c des3_ede-cbc-plain -s 192 luksFormat Milan