[Ssc-dev] Fwd: Re: [guardian-dev] cryptsetup.static for LUKS now builds

Thu Feb 3 14:43:35 EST 2011

I wonder if cryptsetup or one of these other tools has a way to
read/write from the encrypted image itself.

Otherwise, yes, this is definitely a "root" feature. Supporting public
key encryption via AGP does not require root.

I am not one for waiting to see what 3.0 provides, as I feel like the
way the solution is being touted is as an enterprise feature, and not
along the lines of what we need.

On 02/03/2011 12:39 PM, Hans-Christoph Steiner wrote:
> 
> Definitely.  No way around that since mounting/umounting requires root.
> The built-in encryption in Android 3.0 could be nice since I assume it
> would already have the root access issues solved.  Unless they are
> leaving it as a root-only feature.
> 
> .hc
> 
> On Thu, 2011-02-03 at 11:24 -0500, Andrew Senior wrote:
>> Does it require root?
>>
>> On Feb 2, 2011 5:55 PM, "Hans-Christoph Steiner" <hans at at.or.at>
>> wrote:
>>>
>>> If you want to play, we're looking for testers. Its all command
>> line 
>>> at the moment:
>>>
>>> https://github.com/guardianproject/LUKS/wiki
>>>
>>> .hc
>>>
>>> On Feb 2, 2011, at 1:54 PM, Nathan of Guardian wrote:
>>>
>>>> For those of you not on guardian-dev... _hc (hans) pulled a one
>> day 
>>>> epic
>>>> sprint and got LUKS encryption work. I am now attempting to make it
>>>> "easy" to setup an encrypted partition.
>>>>
>>>> -------- Original Message --------
>>>> Subject: Re: [guardian-dev] cryptsetup.static for LUKS now builds
>>>> Date: Wed, 02 Feb 2011 13:50:01 -0500
>>>> From: Nathan of Guardian <nathan at guardianproject.info>
>>>> Organization: The Guardian Project
>>>> To: guardian-dev at lists.mayfirst.org
>>>>
>>>>
>>>> (for those of you not on #guardianproject irc) It's working, at 
>>>> least on
>>>> NexusOne/CM6.1 as root:
>>>>
>>>>> mknod /dev/loop0 b 7 0
>>>>> losetup /dev/loop0 /mnt/sdcard/test.img
>>>>> cryptsetup luksFormat -c aes-plain /dev/loop0
>>>>> ./cryptsetup luksOpen /dev/loop0 crypttest
>>>> ./cryptsetup status crypttest
>>>> /dev/mapper/crypttest is active.
>>>> type: LUKS1
>>>> cipher: aes-cbc-plain
>>>> keysize: 256 bits
>>>> device: /dev/loop0
>>>> offset: 4096 sectors
>>>> size: 2093056 sectors
>>>> mode: read/write
>>>>> mke2fs -O uninit_bg,resize_inode,extent,dir_index -L DroidCrypt0
>> -FF
>>>> /dev/mapper/crypttest
>>>>> mount /dev/mapper/crypttest /data/foo
>>>>
>>>>
>>>> On 02/02/2011 11:19 AM, Nathan Freitas wrote:
>>>>> Fantastic. Will make it on my system today!
>>>>>
>>>>> On 02/02/2011 10:40 AM, Hans-Christoph Steiner wrote:
>>>>>> On Wed, 2011-02-02 at 10:32 -0500, Hans-Christoph Steiner wrote:
>>>>>>> Hey all,
>>>>>>>
>>>>>>> Just finished up the thing I was working on until late last
>> night.
>>>>>>> cryptsetup.static now builds for Android. Its in the LUKS git, 
>>>>>>> just:
>>>>>>>
>>>>>>> cd LUKS/external
>>>>>>> make
>>>>>>>
>>>>>>> And hopefully, you'll end up with a LUKS/external/bin/ 
>>>>>>> cryptsetup.static.
>>>>>>> Try it out and let me know. This is probably most interesting to
>>>>>>> Nathan, since he's started working on a GUI for this.
>>>>>>>
>>>>>>> .hc
>>>>>>
>>>>>> oops, that's LUKS/external/sbin/cryptsetup.static. You can 
>>>>>> actually see
>>>>>> a little UNIX hierarchy:
>>>>>>
>>>>>> LUKS/external/bin/
>>>>>> LUKS/external/include
>>>>>> LUKS/external/lib
>>>>>> LUKS/external/sbin
>>>>>> LUKS/external/share
>>>>>>
>>>>>> .hc
>>>>>>
>>>>>> _______________________________________________
>>>>>> Guardian-dev mailing list
>>>>>>
>>>>>> Post: Guardian-dev at lists.mayfirst.org
>>>>>> List info:
>> https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>>>>>
>>>>>> To Unsubscribe
>>>>>> Send email to: Guardian-dev-unsubscribe at lists.mayfirst.org
>>>>>> Or visit:
>> https://lists.mayfirst.org/mailman/options/guardian-dev/nathan%
>> 40guardianproject.info
>>>>>>
>>>>>> You are subscribed as: nathan at guardianproject.info
>>>>>
>>>>> _______________________________________________
>>>>> Guardian-dev mailing list
>>>>>
>>>>> Post: Guardian-dev at lists.mayfirst.org
>>>>> List info:
>> https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>>>>
>>>>> To Unsubscribe
>>>>> Send email to: Guardian-dev-unsubscribe at lists.mayfirst.org
>>>>> Or visit:
>> https://lists.mayfirst.org/mailman/options/guardian-dev/nathan%
>> 40guardianproject.info
>>>>>
>>>>> You are subscribed as: nathan at guardianproject.info
>>>>
>>>> _______________________________________________
>>>> Guardian-dev mailing list
>>>>
>>>> Post: Guardian-dev at lists.mayfirst.org
>>>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>>>
>>>> To Unsubscribe
>>>> Send email to: Guardian-dev-unsubscribe at lists.mayfirst.org
>>>> Or visit:
>>>> https://lists.mayfirst.org/mailman/options/guardian-dev/nathan%
>> 40guardianproject.info
>>>>
>>>> You are subscribed as: nathan at guardianproject.info
>>>> _______________________________________________
>>>> Ssc-dev mailing list
>>>>
>>>> Post: Ssc-dev at lists.mayfirst.org
>>>> List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>>>>
>>>> To Unsubscribe
>>>> Send email to: Ssc-dev-unsubscribe at lists.mayfirst.org
>>>> Or visit: https://lists.mayfirst.org/mailman/options/ssc-dev/hans%
>> 40at.or.at
>>>>
>>>> You are subscribed as: hans at at.or.at
>>>
>>>
>>>
>>>
>> ----------------------------------------------------------------------------
>>>
>>> As we enjoy great advantages from inventions of others, we should
>> be 
>>> glad of an opportunity to serve others by any invention of ours;
>> and 
>>> this we should do freely and generously. - Benjamin Franklin
>>>
>>>
>>> _______________________________________________
>>> Ssc-dev mailing list
>>>
>>> Post: Ssc-dev at lists.mayfirst.org
>>> List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
>>>
>>> To Unsubscribe
>>> Send email to: Ssc-dev-unsubscribe at lists.mayfirst.org
>>> Or visit: https://lists.mayfirst.org/mailman/options/ssc-dev/aws%
>> 40andrewsenior.com
>>>
>>> You are subscribed as: aws at andrewsenior.com
>>
> 
> 
> _______________________________________________
> Ssc-dev mailing list
> 
> Post: Ssc-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/ssc-dev
> 
> To Unsubscribe
>         Send email to:  Ssc-dev-unsubscribe at lists.mayfirst.org
>         Or visit: https://lists.mayfirst.org/mailman/options/ssc-dev/nathan%40freitas.net
> 
> You are subscribed as: nathan at freitas.net