Fast howto (mostly a note for personal use) on what’s needed on Debian to use an encrypted loop:<\/p>\n
1. The necessary utilities (patched losetup) \/home\/username\/crypto-loop.img \/mnt\/crypt-loop ext2 defaults,noauto,user,loop=\/dev\/loop7,encryption=AES256,gpgkey=\/path\/to\/keyfile.gpg 0 0<\/p><\/blockquote>\n 10. Try mounting the loopfile as user and use it!<\/p>\n P.S. Secure your keyfile.gpg, if it gets lost you won’t _ever_ be able to decrypt what was inside crypto-loop.img!<\/p>\n","protected":false},"excerpt":{"rendered":" Fast howto (mostly a note for personal use) on what’s needed on Debian to use an encrypted loop: 1. The necessary utilities (patched losetup) # aptitude install loop-aes-utils 2. The necessary kernel-module # aptitude install loop-aes-modules-2.6.30-1-686-bigmem 3. Create the keyfile (keep your computer as busy as possible while doing this to increase entropy) # head […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"footnotes":""},"categories":[6,3],"tags":[189,33,598,82,595,187,188],"class_list":["post-772","post","type-post","status-publish","format-standard","hentry","category-encryption","category-linux","tag-aes","tag-debian","tag-encryption","tag-gpg","tag-linux","tag-loop","tag-loop-aes"],"aioseo_notices":[],"views":24151,"_links":{"self":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/comments?post=772"}],"version-history":[{"count":5,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/772\/revisions"}],"predecessor-version":[{"id":777,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/posts\/772\/revisions\/777"}],"wp:attachment":[{"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/media?parent=772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/categories?post=772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.void.gr\/kargig\/blog\/wp-json\/wp\/v2\/tags?post=772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n# aptitude install loop-aes-utils <\/code>
\n2. The necessary kernel-module
\n# aptitude install loop-aes-modules-2.6.30-1-686-bigmem<\/code>
\n3. Create the keyfile (keep your computer as busy as possible while doing this to increase entropy)
\n# head -c 2925 \/dev\/urandom | uuencode -m - | head -n 66 | tail -n 65| gpg --symmetric -a >\/path\/to\/keyfile.gpg<\/code>
\n4. Loopfile creation (10Mb)
\n# dd if=\/dev\/urandom of=\/my-encrypted-loop.aes bs=1k count=10000<\/code>
\n5. Initialize loopfile
\n# losetup -K \/path\/to\/keyfile.gpg -e AES256 \/dev\/loop5 \/home\/username\/crypto-loop.img<\/code>
\n6. Format loopfile
\n# mke2fs \/dev\/loop5<\/code>
\n7. Delete loop device
\n# losetup -d \/dev\/loop5<\/code>
\n8. Create mount point for loopfile
\n# mkdir \/mnt\/crypto-loop<\/code>
\n9. Add entry to fstab<\/p>\n
\n$ mount \/mnt\/crypto-loop<\/code>
\n11. Check it’s mounted properly
\n$ mount | grep -i aes<\/code><\/p>\n