LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Change default crypto loaded algorithm (https://www.linuxquestions.org/questions/linux-newbie-8/change-default-crypto-loaded-algorithm-4175473042/)

junior-s 08-11-2013 11:06 PM

Change default crypto loaded algorithm
 
I figured out there is a possibility that I can change the algorithm in the built-in cryptor, in the openSUSE install. The default algo loaded is AES and I want to change it to Twofish. I saw a post in gentoo's forums where it seems to be possible, although I don't know if I can do the graphic install after it nor how to procceed.

The command would be similar to:

Code:

cryptsetup -y --cipher twofish-cbc-essiv:sha512 --key-size 256 luksFormat /dev/sda3
What should I do? How to install the system afterwards? (with graphical install). Also, is there a way to check the encryption description after the system install?

I want to install openSUSE 12.3

displace 08-13-2013 05:34 AM

Having dome something similar myself I can tell you that I had to manually change the encryption algorithm during the setup of a debian-based system. Basically when you reach the screen that asks you to partition the hard disk you should switch to a console and manually partition the disks + setup crypto and LVM. Then switch back to the graphical interface, refresh the disk layout and assign the mountpoints. Finally I had to update fstab and crypttab before updating initramfs.

Here's what I used to encrypt:
cryptsetup -c aes-xts-plain64 -h sha512 -s 512 -y --use-random -i 5000 luksFormat /dev/sdXY

I am not sure how it works on openSUSE, but on debian the decryption was automatic. All you need to make sure is that the appropriate modules are loaded (depending on what crypto you use)... aes, sha512, serpent, twofish, etc.

Amarildo 03-26-2015 01:51 AM

Quote:

Originally Posted by displace (Post 5008437)
HAll you need to make sure is that the appropriate modules are loaded (depending on what crypto you use)... aes, sha512, serpent, twofish, etc.

How do I do that in openSUSE?


All times are GMT -5. The time now is 06:06 AM.