DM CryptFS 0.3.3

Helper tools for setting up swap partitions and filesystems using the device mapper crypt target.
DM CryptFS software provides helper tools for setting up swap partitions and filesystems using the device mapper crypt target of the Linux kernel 2.6.4 and later.

Encrypting filesystems

cryptfs allows you to encrypt some filesystems and offers a simple form of logical volume management.

All information about the encrypted filesystems have to be provided in a xml file. An example with explanations is provided in example/cryptfs.xml or on Debian systems in /usr/share/doc/dmcryptfs/cryptfs.xml.gz. A simple setup with one encrypted filesystem would be:

< ?xml version="1.0" encoding="UTF-8"? >
< dmcryp >
< !-- For the first setup these options can be overriden with
the -m option to be able to create a filesystem on it. -- >
< option name="fsck" value="yes"/ >
< option name="mount" value="yes"/ >

< storage device="/dev/hda6" >
< entry name="home" cipher="aes256-cbc-essiv:sha256"/ >
< /storage >

< action name="boot" >
< key type="passphrase" >
/home filesystem encryption
< /key >
< map name="home"/ >
< /action >
< /dmcrypt >

As you can see this xml file consists of three parts:

- some options,
- the definition of the storage for the encrypted data and
- the definition of actions (i.e. asking for a key, decrypting the data, fscking and mounting the filesystem).

A complete description of these parts is given in example/cryptfs.xml resp. /usr/share/doc/dmcryptfs/cryptfs.xml.gz.

This xml file should be saved as /etc/cryptfs.xml. A call of 'cryptfs boot' will then activate this encrypted filesystem. ("boot" is the name of the action in the xml file.)

There is an init script called cryptfs, which will call 'cryptfs boot' during boot if there is such an action available. (On Debian systems this script will be installed automatically. So don't name your actions "boot" unless they should be started at boot time.)

last updated on:
March 5th, 2009, 9:05 GMT
license type:
GPL (GNU General Public License) 
developed by:
Alexander Motzkau
ROOT \ Security
DM CryptFS
Download Button

In a hurry? Add it to your Download Basket!

user rating 18



Rate it!
What's New in This Release:
  • This release offers access control options to allow cryptfs to be run as setuid root.
  • A --remove option was added to remove all mappings that are associated with the given action.
read full changelog

Add your review!