Welcome to the dm-crypt wiki

Here you will find (and contribute!) information about dm-crypt, a new cryptographic device-mapper target for Linux kernel 2.6 which enables filesystem encryption.

Please see the dm-crypt page: http://www.saout.de/misc/dm-crypt/

Feel free to edit this page... (or any other page for that matter)

LUKS
Please notice that all LUKS-specific items have been moved off to LUKS.

HOWTO's and other info essay

• Information about the userspace cryptsetup application
• Information about the userspace dmsetup? application
• Step by step instructions to make an EncryptedDevice i.e. encrypt one whole hard disk (or partition) from scratch, using 'cryptsetup' (old method, luks method above preferred).
• How to ChangePassword on an encrypted device (unless you use LUKS).
• HOWTO for Debian, (sid, sarge and etch). Also check this link.
• .. or add to the LoopMappings page, where you'll find some sample "before - after" mount commands.
• here is a RootCryptoraid fs example.
• a French micro-howto on setting an encrypted /home partition on Debian Sarge: DebianCryptoHome-FR
• how to use LVM2 over dm-crypt: LVM2 over dmcrypt?
• a German HOWTO for Debian, using cryptsetup or cryptsetup-Luks. Please follow external link.
• Here is a guide to setting up EncryptedSwap
• How to encrypt an existing block device: EncryptExistingDevice
• How to encrypt a filesystem in a loopback file via dm_crypt: looptutorial
• A simple benchmark, comparing the performance of various ciphers.
• Encrypted CD / DVD minihowto
• How to migrate from older encryption APIs MigrationToDm-crypt
• Script to mount loop-AES volumes with dm-setup http://glarson.org/files/loopaes/
• Instructions to use cryptsetup in order to mount loop-AES encrypted partitions/DVDs/etc http://bugs.archlinux.org/task/18619
• Howto install Debian GNU/Linux onto USBFlashMedia with everything but /boot encrypted (Updated version at External Link).
• How to install debian-netinstall with encrypted root on LVM2 and encrypted swap from scratch. EncryptedLVM2Root
• How to encrypt /var and keep your key in a USB flash stick EncryptedVarWithUSBKey.
• How to disable autorun.inf http://www.tirasoft.com

Utilities and patches

• Here is a scripts and instructions about implementing a dmcrypt filesystem type for mount which makes user mounting of encrypted RW media (packet-writing) possible.
• TimeoutPatch - it is not good if you cannot access your server because it waits for a password...
• a script for mounting crypted filesystems: cmount
• a script for creating and formating crypted filesystems: mkcfs
• a Perl script for storing a password-encrypted disk-key in the first sector of an encrypted device, which enables changing of the password without re-encrypting the whole disk: crypt.pl
• cryptoconf, a perl script to map & mount a cryptodevice with configfiles (also possible as a normal user)
• Using an RSA Key stored in first sectors of device to encrypt data RSAFirstSectorsMiniHOWTO
• gentoo-init-script taken from gentoo forums
• boot.cryptmap? init.d-script to map/unmap encrypted devices during boot/shutdown (e.g. SuSE)
• Script that unmounts an encrypted fs
• cmount-0.1b.tar.bz2 These are scripts that can be used to mount, umount and mkfs on files over the loop-device using dm-crypt for encryption. The passphrase will be asked either on the console or, if installed, via pinentry-gtk or pinentry-gtk-2. The package also contains a readme that explains how to configure for use by non-root users.
• cryptmount is a utility (written in C) which allows ordinary users to mount/unmount dm-crypt filesystems on demand (like the old "cryptoloop" device). Loopback devices are setup automatically for encrypted filesystems stored within ordinary files, and fsck is run before mounting.
• The CryptoBox is webfrontend for cryptsetup-luks.It is available as Live-CD or Debian server-package.
• On UbuntuWiki: you can download 'luksConvert' for encrypting an existing partition. (The download link is near the page bottom.)

Links

• FreeOTFE allows dm-crypt and LUKS volumes to be mounted and used under MS Windows
• Secure Deletion of Data from Magnetic and Solid-State Memory in
• Tools for secure wiping of data: wipe - bcWipe
• Some cipher speed benchmarks
• Fedora development stuff, cryptsetup RPMs by James Ralston
• Cryptsetup RPMs are in Fedora Core 2.
• tractari auto
• Medela symphony
• Simple Steganographic Store (scubed) is a simple and experimental program that can be used with cryptsetup to create so called 'hidden volumes'.

Ideas needing discussion

• Encrypted logical volume on top of RAID

News
19-04-07 - Restored wiki index page (archive.org copy 22-08-2007) after spammer attack (anonymous)
15-06-06 - Added link to Ubuntu encryption tutorial (virgo977virgo)
01-05-06 - Added link to cryptmount (rwp)
18-11-05 - Added a link to FreeOTFE (Sarah)
23-08-05 - Added new script luksopen (Matthias)
21-08-05 - Added a link to scubed; Simple Steganographic Store (Rik Snel)
15-07-05 - Added how to encrypt a single device (William Owen Smith)
15-05-05 - Added Howto install Debian GNU/Linux on USB Media (Dave Vehrs)
20-11-04 - Added howto change password (Alex)
19-11-04 - New links, to "Secure Deletion" and to two wipe tools (Alex)
16-11-04 - New page about cryptsetup (Alex)
14-11-04 - New link, cipher speed benchmarks and a debian link (Alex)
13-11-04 - Overhauled this page razz (Alex)
13-11-04 - Added MigrationToDm-crypt page (Alex)
12-11-04 - Major overhaul of the EncryptedSwap page (Alex)