LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-11-2013, 11:06 PM   #1
junior-s
Member
 
Registered: Apr 2013
Location: Brazil
Distribution: Arch Linux
Posts: 137

Rep: Reputation: Disabled
Change default crypto loaded algorithm


I figured out there is a possibility that I can change the algorithm in the built-in cryptor, in the openSUSE install. The default algo loaded is AES and I want to change it to Twofish. I saw a post in gentoo's forums where it seems to be possible, although I don't know if I can do the graphic install after it nor how to procceed.

The command would be similar to:

Code:
cryptsetup -y --cipher twofish-cbc-essiv:sha512 --key-size 256 luksFormat /dev/sda3
What should I do? How to install the system afterwards? (with graphical install). Also, is there a way to check the encryption description after the system install?

I want to install openSUSE 12.3
 
Old 08-13-2013, 05:34 AM   #2
displace
Member
 
Registered: Jan 2013
Location: EU
Distribution: Debian
Posts: 268

Rep: Reputation: 25
Having dome something similar myself I can tell you that I had to manually change the encryption algorithm during the setup of a debian-based system. Basically when you reach the screen that asks you to partition the hard disk you should switch to a console and manually partition the disks + setup crypto and LVM. Then switch back to the graphical interface, refresh the disk layout and assign the mountpoints. Finally I had to update fstab and crypttab before updating initramfs.

Here's what I used to encrypt:
cryptsetup -c aes-xts-plain64 -h sha512 -s 512 -y --use-random -i 5000 luksFormat /dev/sdXY

I am not sure how it works on openSUSE, but on debian the decryption was automatic. All you need to make sure is that the appropriate modules are loaded (depending on what crypto you use)... aes, sha512, serpent, twofish, etc.
 
Old 03-26-2015, 01:51 AM   #3
Amarildo
Member
 
Registered: Jun 2014
Posts: 176

Rep: Reputation: Disabled
Quote:
Originally Posted by displace View Post
HAll you need to make sure is that the appropriate modules are loaded (depending on what crypto you use)... aes, sha512, serpent, twofish, etc.
How do I do that in openSUSE?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Change which buffers loaded by default when Emacs is launched ekinakoglu Linux - General 1 02-22-2012 07:12 PM
Change priority of crypto modules? Possible? MeatPuppet Linux - Kernel 2 03-27-2009 10:37 PM
Can I change the default algorithm for password encryption dv502 Linux - Security 5 01-12-2009 06:54 PM
Change the default hashing algorithm used in SSH kskkumar SUSE / openSUSE 2 06-06-2007 03:58 AM
open source crypto algorithm john m_a_s Programming 3 03-12-2006 04:16 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 12:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration