[dm-crypt] What am I missing for aes-cbc-plain

Jan Willies jan at willies.info
Tue May 17 16:21:21 CEST 2011


Hi there,

I have stared at it long enough, and still can't make out what's missing.

I'm trying to mount an aes-cbc-plain encrypted disk with cryptsetup-1.3.0 on
kernel-2.6.37.6:

root at dockstar:~# cryptsetup luksOpen /dev/sda2 storage
Enter passphrase for /dev/sda2:
device-mapper: reload ioctl failed: No such file or directory
Failed to setup dm-crypt key mapping for device /dev/sda2.
Check that kernel supports aes-cbc-plain cipher (check syslog for more
info).
Failed to read from key storage.

May 17 15:34:27 dockstar kern.err kernel: device-mapper: table: 254:0:
crypt: Error allocating crypto tfm
May 17 15:34:27 dockstar kern.warn kernel: device-mapper: ioctl: error
adding target to table


According to /proc/crypto aes-cbc should be working correctly:

root at dockstar:~# cat /proc/crypto
name         : sha1
driver       : sha1-generic
module       : sha1_generic
priority     : 0
refcnt       : 1
selftest     : passed
type         : shash
blocksize    : 64
digestsize   : 20

name         : hmac(sha1)
driver       : mv-hmac-sha1
module       : mv_cesa
priority     : 300
refcnt       : 1
selftest     : passed
type         : ahash
async        : yes
blocksize    : 64
digestsize   : 20

name         : sha1
driver       : mv-sha1
module       : mv_cesa
priority     : 300

refcnt       : 1
selftest     : passed
type         : ahash
async        : yes
blocksize    : 64
digestsize   : 20

name         : cbc(aes)
driver       : mv-cbc-aes
module       : mv_cesa
priority     : 300
refcnt       : 1
selftest     : passed
type         : ablkcipher
async        : yes
blocksize    : 16
min keysize  : 16
max keysize  : 32
ivsize       : 16
geniv        : <default>

name         : ecb(aes)
driver       : mv-ecb-aes
module       : mv_cesa
priority     : 300
refcnt       : 1
selftest     : passed
type         : ablkcipher
async        : yes
blocksize    : 16
min keysize  : 16
max keysize  : 32
ivsize       : 0
geniv        : <default>

name         : aes
driver       : aes-generic
module       : aes_generic
priority     : 100
refcnt       : 1
selftest     : passed
type         : cipher
blocksize    : 16
min keysize  : 16
max keysize  : 32

name         : crc32c
driver       : crc32c-generic
module       : crc32c
priority     : 100
refcnt       : 2
selftest     : passed
type         : shash
blocksize    : 1
digestsize   : 4


root at dockstar:~# lsmod
aead                    3340  1 cryptomgr
aes_generic            33156  1 mv_cesa
cbc                     1656  0
crc32c                  1960  1
crypto_algapi           8412  7
mv_cesa,cbc,aes_generic,crypto_blkcipher,cryptomgr,aead,crypto_hash
crypto_blkcipher        8701  3 dm_crypt,mv_cesa,cbc
crypto_hash             7260  4 sha1_generic,mv_cesa,libcrc32c,crc32c
cryptomgr               1732  0
dm_crypt                9944  0
dm_log                  6676  2 dm_mirror,dm_region_hash
dm_mirror              10520  0
dm_mod                 43952  3 dm_crypt,dm_mirror,dm_log
dm_region_hash          4852  1 dm_mirror
mv_cesa                 7380  0
sha1_generic            1232  0


root at dockstar:~# cryptsetup luksDump /dev/sda2
LUKS header information for /dev/sda2

Version:        1
Cipher name:    aes
Cipher mode:    cbc-plain
Hash spec:      sha1
Payload offset: 2056
MK bits:        256
MK digest:      6a [...]

Key Slot 0: ENABLED
        [...]


Thanks for any pointers,

Jan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.saout.de/pipermail/dm-crypt/attachments/20110517/9616f5ee/attachment.html>


More information about the dm-crypt mailing list