Wednesday, January 26, 2011

Development of the Linux system disk encryption method in Visual FoxPro

As smart mobile computing power and storage capabilities, the phone will hold more and more private data, these data leaks can result in serious consequences.

Mobile phone information security has always been our priorities, for some important functions we require authentication before it can be used, but this can only get in the primary prevention of hacking, only a man cannot prevent the villain, so we hope that the important data is encrypted and saved. To this end, it took a little time today to learn about Linux disk encryption method. Method 1: download and compile cryptoloop util-linux http://www.paranoiacs.org/~sluskyb/hacks/util-linux/losetup-combined.patc http://ftp.cwi.nl/aeb/util-linux/util-linux-2.12.tar.gz http://hydra.azilian.net/util-linux-2.12-kernel-2.6.patch tarzxvfutil-linux-2.12.tar.gz cdutil-linux-2.12 patch-p1 <..> /losetup-combined.patc  patch-p1 <..> /Util-linux-2.12-kernel-2.6.patc (if there are any compilation errors, such as _syscall5 will it replace it with new called syscall) make; makeinstall compile kernel (already supports cryptoloop skip this step) makemenucong DeviceDrivers > BlockDevices > Loopbackdevicesupport BLK_DEV_CRYPTOLOOP loaded module modprobecryptoloop (and encryption module) to create a loop device ddif =/dev/zeroof = ~/cryptoloop.imagebs = 1Mcount = 10 losetup-eaes-256/dev/loop0 ~/cryptoloop.image (prompting for a password) to create a file system and load the mkfs.ext3/dev/loop0 mkdir/mnt/crypto mount-text3 ~/cryptoloop.image/mnt/crypto/-oencryption = aes-256 (prompt for password) uninstall umount/mnt/crypto losetup-d/dev/loop0 reloads losetup-eaes-256/dev/loop0 ~/cryptoloop.image mount-text3 ~/cryptoloop.image/mnt/crypto/-oencryption = aes-256 cryptoloop for relatively simple, you can look at the drivers/block/cryptoloop.c code. Loop device in read-write method is called before lo_do_transfer function, which then calls the transfer plug-in installed. Cryptoloop is an implementation of a transfer. As regards the use of transfer and transfer of parameters (such as a password), this can be done by the system call ioctrl LOOP_SET_STATUS64 to complete (mount command is implemented). The drawback is that only cryptoloop for loop device, but also to the log-file system is not valid.

No comments:

Post a Comment