OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: ECD (Encrypted CDrom) 0.1 for linux 2.2.14 released
From: Id Est (id-esthome.com)
Date: Thu Apr 06 2000 - 01:38:23 CDT

ECD stands for Encrypted CDrom, and it allows a linux user to make and
read strongly-encrypted CDROMs. ECD consists of patches to the mount/
umount/mkisofs utilities, and to the linux 2.2.14 kernel. ECD uses the
Blowfish algorithm to encrypt/decrypt.

Note! You should be very comfortable with patching/compiling/installing
      kernels, as well as patching/compiling/installing important system
      utilities.

To install ECD, you patch/compile/install the kernel, reboot, and patch/
compile/install the mount/umount/mkisofs utilities (the mkisofs patch is
based on mkisofs-1.12b5, the mount/umount patches are based on util-linux-2.9w,
and the kernel patch is based on linux-2.2.14).

Next, you'd use "mkisofs" to build an image containing files that you want
to put on CDROM.

eg.

        mkisofs -E -o /tmp/test.img /home/*

The '-E' argument to "mkisofs" is new, and specifies that you want the
files on the image to be encrypted. "mkisofs" will ask you for a password
(twice), and use the password to generate a key to be used to encrypt each
file in the image.

If you wish, after "mkisofs" has created the image, you can test the
"fidelity" of the image by mounting it via the loopback interface:

eg.

        # mount -t iso9660 -o ro,loop=/dev/loop0 /tmp/test.img /mnt
        This filesystem appears to be encrypted
        Password?
        #

You should then be able to read unencrypted files from /mnt.

Next, you'd use "cdrecord" or something similar to burn the image onto
CDROM.

After the CDROM has been burned, you use "mount" to mount the CDROM
on your linux system.

eg.

        # mount -t iso9660 -o ro /dev/cdrom /cdrom
        This filesystem appears to be encrypted
        Password?
        #

Lastly, you'd use "umount" to un-mount the CDROM as you normally would.

eg.

        # umount /cdrom
        #

Caveats:

Only tested on RedHat 6.1 (kernel 2.2.14) so far.

Only uses Blowfish right now (other algorithms coming RSN).

Doesn't encrypt the names of directories or files (coming RSN).

For some reason, can't play MP3 files directly from the CDROM. Once you
copy them to the HD they work fine though, no idea what the hell is wrong
there, file contents/sizes are the same, so perhaps it's a timing problem?

Simultaneous reads of two or more files will confuse the decrypting method.
The solution is just to copy or decrypt one file at a time.

ECD is free code. You can do with it what you will, except that you
cannot say you wrote it and/or that I didn't.

You can get ECD from http://members.home.net/id-est.

Send bug reports and recommendations to id-esthome.com.
Flames and spam -> /dev/null.

Id Est (id-esthome.com)
Apr 6, 2000

  • application/pgp-signature attachment: stored