From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <dgbaley27@0x01b.net>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 6RfDh41WVSzO for <dm-crypt@saout.de>;
 Tue, 25 Sep 2012 08:31:29 +0200 (CEST)
Received: from mail-oa0-f50.google.com (mail-oa0-f50.google.com
 [209.85.219.50])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Tue, 25 Sep 2012 08:31:28 +0200 (CEST)
Received: by oagi10 with SMTP id i10so7961752oag.37
 for <dm-crypt@saout.de>; Mon, 24 Sep 2012 23:31:27 -0700 (PDT)
Sender: Matthew Monaco <matt@0x01b.net>
Message-ID: <50614FBC.80709@0x01b.net>
Date: Tue, 25 Sep 2012 00:31:24 -0600
From: Matthew Monaco <dgbaley27@0x01b.net>
MIME-Version: 1.0
References: <CAK5fS_EtiBTgj7inr875UJ2N2s-1qY8qA4hHRxE5+0VhFXgaUA@mail.gmail.com>
 <20120907190453.GA27798@tansi.org>
 <CAK5fS_GxUKj=RgUpYA6tdKEsa-XKq6_a_=dns+L5o89h1N1V6w@mail.gmail.com>
 <504AED40.2010102@gmail.com>
 <CAK5fS_FQMWe04TG1AN30fkwLd5nVts-6ZADLk+E1TXeFJjZntQ@mail.gmail.com>
 <CAK5fS_FEvCn6vorxdFqu72J-h8F9eeu+PNY=6xA1gHOGvF1hnw@mail.gmail.com>
 <5053D531.1000508@0x01b.net>
 <CAK5fS_HqO8vHrikfbAwvxY0ZvpwXQDVJwoF3-M0eWzXEwQkxJw@mail.gmail.com>
 <CAD98N_F3D59d9R4+mc3nypgHxbL-yz=jr2anAFRpkvyf_hpGMg@mail.gmail.com>
 <CAK5fS_G=tnaCHQiYafAE1SJOE0MAaeBSVKUZTY-iNC8noMNDjg@mail.gmail.com>
 <20120921100101.GA11357@tansi.org>
 <CAK5fS_Fc54S_1TwkXzbFaZC8fVfo5s6m3BEUj3Au=y-Ev98NQA@mail.gmail.com>
 <CAK5fS_GOEwQOkZAiTFqvmM9ZC3MOSrck4z-Ld+f1Bkh-j7L3iQ@mail.gmail.com>
 <CAK5fS_FmO91CX+b6E_OWemNf=_miohiFyD_HD80mZ=Xgw75=cw@mail.gmail.com>
In-Reply-To: <CAK5fS_FmO91CX+b6E_OWemNf=_miohiFyD_HD80mZ=Xgw75=cw@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] Encrypt all partitions with dm-crypt
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 09/24/2012 09:12 PM, Stayvoid wrote:
> Hi,
> 
> Let's forget about Lemote specific issues.
> 
> For some reason I can't mount my partition when I'm using a USB stick.
> 
> Here is what I did:
> 
> 1. Booted from a USB stick;
> 
> 2. Created a mapping:
> 
>    # cryptsetup -c aes-xts-plain -s 512 -y create main /dev/sda3
> 
> 3. Created a filesystem:
> 
>    # mkfs.ext3 /dev/mapper/main
> 
> 4. Mounted it:
> 
>    # mount -t ext3 /dev/mapper/main /media/parabola
> 
>    It worked fine.
> 
> 5. Unmounted it:
> 
>    # umount /media/parabola
> 
> 6. Detached the partition:
> 
>    # cryptsetup remove main
> 
> Then I tried to use the same partition:
> 
> # cryptsetup create main /dev/sda3

This is your problem. You need

cryptsetup -c aes-xts-plain -s 512 ...

every time you map this device. You can sort of avoid it by using the defaults,
which are listed at the end of

cryptsetup --help

However, if the defaults change, you need to remember those parameters.

This is a big advantage to LUKS, there is a header that remembers everything but
the password.

> # mount -t ext3 /dev/mapper/main /media/parabola
> 
> mount failed.
> 
> "If the password is not correct, the mount command will fail. In this
> case simply remove the map sdc1 (cryptsetup remove sdc1) and create it
> again." [1]
> 
> I'm sure that I was using the right password.
> 
> What is the problem?
> 
> [1] http://sleepyhead.de/howto/?href=cryptpart
> 
> Thanks
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
>