On Sunday 07 August 2005 04:39, Christian Hoenig wrote: > Hi, > > > Well, I have dm-crypt configured and running. It encrypts tha swap, a > > loopback for /tmp (with a random key), all this using the > > standard /etc/conf.d/cryptfs. > > Now I'd like to encrypt my home with a key instad of a passphrase, place > > that key on my pen drive after etcrypting it with a key, my questions > > are: - How do I generate the key ? > > I have restricted my key to printable letters. > So an easy way to generate a key without uuencode or stuff is something > like this: > cat /dev/random |sed -e "s/[^a-zA-Z0-9]//g" > > > - How do I en/decrypt it ? > > Encrypt your just generated key? I thought you wanted to get rid of > passphrases. No, I wanted to get rid of having to recreate the whole filesystem to change the passphrase (with an encrypted key I only change the encripting passphrase). Furthermore I'd have stronger encription because a dictionary attack would be harder.
-- Pupeno <[EMAIL PROTECTED]> (http://pupeno.com) Reading ? Science Fiction ? http://sfreaders.com.ar
pgpLzsvnN7USC.pgp
Description: PGP signature