Retourner au contenu. Retourner à la navigation

 

The Linux File System Encryption API

by Zhibin @
Introduction to the encryption API of Linux system and how to use it.

System Preparation

For the users whose Linux system using the original Linux kernel before the version 2.4.22, it is not possible to encrypt a file on the local file system, or the local file system, or a hard disk, or even the Swap of the Linux system. So, it needs to make a patch to their Linux kernel to add this encryption function to the Linux kernel. For the Linux kernel version 2.4, it is need to do the following work:

  • The Linux kernel source 2.4.22
  • The "Cryptoloop" patch to the Linux system (two options: patch-cryptoloop-jari-2.4.22.0, or patch-cryptoloop-hvr-2.4.22.0)

Notes: the first patch "patch-cryptoloop-jari-2.4.22.0" has a lot of important improvements but it does not support to encrypt the Swap. For the second patch "patch-cryptoloop-hvr-2.4.22.0" can offer the ability of the minimum changes between the encryption and the de-encryption. Here we recommend using the second patch because it can calculate the right size of the disk volume.


For the Linux kernel version 2.6, it is stable and it originally supports the Cryptographic API, the Cryptoloop device and the IPSec, so, no need to patch any more.


But in the mean time, we have to make sure that the required components are in the right versions to be able to work together with the Cryptoloop and Cryptoapi version: check if your Linux system is installed the util-linux2.12 (to check: #mount -V).


If your Linux system does not have the util-linux2.12, you need to download the source code of util-linux2.12 and install it to the system. (This is the version offering minimum support to CryptoAPI and in the same time supports the new version of the loop device in the Linux kernel version 2.6.)

Par XI ZHIBIN Dernière modification 03/09/2007 15:50
Navigation
Actualités
23/06/2008 Opération du libre à Nantes !
23/06/2008 OpenSuse 11
18/06/2008 Firefox 3 !
09/06/2008 Linux Pratique Essentiel
08/06/2008 Ordinateurs vendus avec gNewSense
Plus d'actualités...
Articles
22/05/2008 Première approche de Qmail
19/05/2008 Test de la distribution Elive 1.0 Gem
14/05/2008 GNUPG introduction à la cryptographie et utilisation de GnuPG
21/02/2008 GNU / Screen
03/09/2007 The Linux File System Encryption API
More articles
Tips
28/04/2008 Mozilla Firefox : Google Talk et Facebook Chat
22/04/2008 Sed : Rechercher du texte entre deux chaines de caractères
04/04/2008 Gérer son(ses) écran(s) avec xrandr
26/03/2008 Tips sur l'historique de vos commandes
13/02/2008 Linux-Unix Cheat Sheets
More tips
Codes
09/04/2008 Chapitre 13 - Administration DNS et DHCP
09/04/2008 Chapitre 06 - Service web avec Apache
04/04/2008 Chapitre 09 - PureFTPd
04/04/2008 Chapitre 06 - Scripting Bash
01/04/2008 Chapitre 20 - Haute Disponibilité
More codes
Courses
13/09/2006 Module 3
23/02/2006 Module 2
23/02/2006 Module 1
More courses
Formation Linux

Supinfo Training Center has the first Linux Certification. The training is 13 days and allow you to pass the LPI 101 and 102.

more info
 
 
Vous êtes ici :
Articles The Linux File System Encryption API System Preparation