Re: [dev] Disk encryption

2022-06-29 Thread T Taylor Gurney
On Wed, Jun 22, 2022 at 06:59:01AM +, Antenore Gatta wrote: > WARNING: These are not meant to give you a solution, but to be used as > a learning exercise, their goals are completely different (often). > > - luks2flt [1] Mainly for win32 (Please don't be sick!) > It's quite interesting. > -

Re: [dev] Disk encryption

2022-06-22 Thread Antenore Gatta
Dear all, On Thu, 2022-06-16 at 11:54 -0500, T Taylor Gurney wrote: > > I'm also weary of "rolling your own crypto". Unless you are a > > cryptographer, I have never heard that go well. > > I have heard of it going well (though admittedly not without major > difficulties): > > https://loup-vaill

Re: [dev] Disk encryption

2022-06-16 Thread Markus Wichmann
On Thu, Jun 16, 2022 at 08:18:16PM +0300, an2qzavok wrote: > >do not roll your own crypto > I believe this refers only to inventing your own algorithm, just > writing your own implementation of existing and tested algorithms is > fine. > As I tried to point out with the MAC example, cryptography i

Re: [dev] Disk encryption

2022-06-16 Thread Michael Partridge
On Thu, Jun 16, 2022 at 11:20 AM an2qzavok wrote: > >do not roll your own crypto > I believe this refers only to inventing your own algorithm, just > writing your own implementation of existing and tested algorithms is > fine. I've heard it in both contexts. The more popular context I've heard it

Re: [dev] Disk encryption

2022-06-16 Thread an2qzavok
>do not roll your own crypto I believe this refers only to inventing your own algorithm, just writing your own implementation of existing and tested algorithms is fine. Though, is encrypted root partition even desirable? Since it only keeps your data safe when your machine is powered off, I always

Re: [dev] Disk encryption

2022-06-16 Thread Michael Partridge
On Thu, Jun 16, 2022 at 9:54 AM T Taylor Gurney wrote: > https://loup-vaillant.fr/articles/implemented-my-own-crypto > > This person studied cryptography on his own for a while and then decided > to roll his own crypto library. The result is a single .c file, about 3000 > lines, which received a f

Re: [dev] Disk encryption

2022-06-16 Thread T Taylor Gurney
On Thu, Jun 16, 2022 at 08:55:04AM +0200, Markus Wichmann wrote: > In any case, you can write your own losetup; it is not the most > complicated program in the world. I do intend to. I noticed that ubase doesn't have one. > I'm also weary of "rolling your own crypto". Unless you are a > cryptogra

Re: [dev] Disk encryption

2022-06-16 Thread Markus Wichmann
On Wed, Jun 15, 2022 at 07:59:34PM -0500, T Taylor Gurney wrote: > Are you familiar with loop-AES? Not specifically, but I had heard of loop-device based encryption before. The manpage for losetup states that support for such was removed in favor of dm-crypt. > My understanding is that the projec

Re: [dev] Disk encryption

2022-06-15 Thread T Taylor Gurney
On Wed, Jun 15, 2022, at 2:46 PM, Rasmus Liland wrote: > Hi! I like OpenBSD and FreeBSD disk > encryption setup :) R Thanks, I'll have a look. More and more I'm finding I like what I hear about the BSD way of doing things, as compared to Linux. Taylor

Re: [dev] Disk encryption

2022-06-15 Thread T Taylor Gurney
On Wed, Jun 15, 2022, at 2:47 PM, Markus Wichmann wrote: > libgcrypt can be used instead of OpenSSL. I don't know if that > helps any. Thanks for your reply. This does help, actually; while I'm making an effort to avoid OpenSSL (and even LibreSSL), I can't imagine I'll be able to avoid GnuPG si

Re: [dev] Disk encryption

2022-06-15 Thread Markus Wichmann
On Wed, Jun 15, 2022 at 12:49:07PM -0500, T Taylor Gurney wrote: > All, > > Working on another statically-linked Linux distro. > > Getting an encrypted root partition is a problem. The kernel has built-in > support for this and I am plenty familiar with it. But the supporting > userspace tool, cr

Re: [dev] Disk encryption

2022-06-15 Thread Rasmus Liland
Hi! I like OpenBSD and FreeBSD disk encryption setup :) R

[dev] Disk encryption

2022-06-15 Thread T Taylor Gurney
All, Working on another statically-linked Linux distro. Getting an encrypted root partition is a problem. The kernel has built-in support for this and I am plenty familiar with it. But the supporting userspace tool, cryptsetup, is way too bloated and has too many dependencies, including OpenSS