Re: Loop Encryption

Jason Burrell (jburrell@crl5.crl.com)
Sat, 03 May 1997 15:59:43 -0500


> I've been looking over the code for loop encryption (always a wise
> idea if you are paranoid). So far everything looks fine - the
> implementation is pretty simple.
>
> I seem to remember there were some comments made that it was
> "completely broken", and that it is no longer maintained.
> Could somebody fill me in on the details please? I hope I'm
> completely wrong about this.

I don't know what exactly was meant by "completely broken," but I can hazard a decent guess.

The last time I was working with the loop encryption I managed to really screw up my system. The kernel got into an internal loop, causing the process to go into an uninterruptable sleep. This then caused all kinds of problems and made me unable to unmount the filesystem. I don't remember, but I don't think it would sync either.

I managed to do that by creating a file, pointing a loop device at it, mounting it encrypted, making a filesystem, then mounting another encrypted filesystem under that.

"Don't do that." :)