error mounting encrypted files

[Paulo Antonio]

Up to Fedora 1, I could mount encrypted files but I
can't do it on Fedora 2.

I used to do:

# mount -o loop,encryption=xor encrypted_file /mnt/dir
Password: <my password here>
#

Now I get:

# mount -o loop,encryption=xor encrypted_file /mnt/dir
Password: <my password here>
ioctl: LOOP_SET_STATUS: Invalid argument
#

I've seen similiar complaints on the net, but people
complain about des or some other stronger encryption,
while they say xor works. I can't even get xor
working!

I've tried loading modules such as cryptoloop, xor,
des, etc. They all load, but I can't never mount the
file. What's the matter with losetup? Please help.

______________________________________________________________________

Yahoo! Messenger - Fale com seus amigos online. Instale agora! 
http://br.download.yahoo.com/messenger/

[Paulo Antonio]

--- Back on June 22, I wrote:
> Up to Fedora 1, I could mount encrypted files but I
> can't do it on Fedora 2.
>
> I used to do:
>
> # mount -o loop,encryption=xor encrypted_file /mnt/dir
> Password: <my password here>
> #
>
> Now I get:
>
> # mount -o loop,encryption=xor encrypted_file /mnt/dir
> Password: <my password here>
> ioctl: LOOP_SET_STATUS: Invalid argument
> #
>
> I've seen similiar complaints on the net, but people
> complain about des or some other stronger encryption,
> while they say xor works. I can't even get xor
> working!
>
> I've tried loading modules such as cryptoloop, xor,
> des, etc. They all load, but I can't never mount the
> file. What's the matter with losetup? Please help.

I got no replies and still can't find usefull information on the net.
Come on, guys, is there no one using mount/losetup with encryption?
What has changed from FC1 to FC2 about this? I know that probably no
one uses xor, but anyone using des could give some clues on how to
get xor working... Is there a better place to ask this?

______________________________________________________________________

Yahoo! Messenger - Fale com seus amigos online. Instale agora! 
http://br.download.yahoo.com/messenger/

[Robert P. J. Day]

On Fri, 25 Jun 2004, Paulo Antonio wrote:
> I got no replies and still can't find usefull information on the net.
> Come on, guys, is there no one using mount/losetup with encryption?
> What has changed from FC1 to FC2 about this? I know that probably no
> one uses xor, but anyone using des could give some clues on how to
> get xor working... Is there a better place to ask this?

not that this will help you if you're already committed to cryptoloop, 
but if you're starting from scratch on FC2 and you want to start 
mounting encrypted files and filesystems, you should look at dm-crypt:

http://www.saout.de/misc/dm-crypt/

i just went through this, and it seemed to go fairly smoothly.  i have
no idea what you'd do if you're stuck with cryptoloop, though.

rday

[»Steven Ringwald«]

Paulo Antonio wrote:
> Up to Fedora 1, I could mount encrypted files but I
> can't do it on Fedora 2.
>
> I used to do:
>
> # mount -o loop,encryption=xor encrypted_file /mnt/dir
> Password: <my password here>
> #
>
> Now I get:
>
> # mount -o loop,encryption=xor encrypted_file /mnt/dir
> Password: <my password here>
> ioctl: LOOP_SET_STATUS: Invalid argument
> #
>
> I've seen similiar complaints on the net, but people
> complain about des or some other stronger encryption,
> while they say xor works. I can't even get xor
> working!
>
> I've tried loading modules such as cryptoloop, xor,
> des, etc. They all load, but I can't never mount the
> file. What's the matter with losetup? Please help.

I got the same thing, using AES encryption, instead of xor. What I 
needed to do was this:

modprobe loop
modprobe cryptoloop
modprobe aes

losetup -e aes /dev/loop0 /dev/md4
<give a password>
mke2fs /dev/loop0
losetup -d /dev/loop0

In my case, I have the filesystem, /dev/md4, in my fstab.

/dev/md4                /secure                 ext2 
noauto,encryption=aes 0 0

then, assuming that the modprobe above has been done, I can type:

mount /secure

and it asks me for a password and mounts the filesystem.

Now to get this to work for a filesystem that needs to be mounted at 
bootup, there is one more step:

mkinitrd --with=aes --with=cryptoloop --with=loop /boot/initrd 
<kernel-version>

Hopefully this helps. I have not used the XOR encryption, so I can only 
give the AES example, and say that it is working for me in this fashion.

Steve