# ecryptfs-add-passphrase --fnek
Passphrase:
Inserted auth tok with sig [4c0c36bbcda400d6] into the user session keyring
Inserted auth tok with sig [d697d8aafc7fde3d] into the user session keyring
# mount encrypted encrypted -t ecryptfs
Select key type to use for newly created files:
1) passphrase
2) openssl
3) tspi
4) pkcs11-helper
Selection: 1
Passphrase:
Select cipher:
1) aes: blocksize = 16; min keysize = 16; max keysize = 32 (loaded)
2) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24 (not loaded)
3) cast6: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
4) cast5: blocksize = 8; min keysize = 5; max keysize = 16 (not loaded)
There's no "blowfish" option. Passing "-o ecryptfs_cipher=blowfish" in the mount command leads to some bad option error.
With kernel 3.1.9, the only dmesg of mounting the ecryptfs is this line:
[23314.085489] SELinux: initialized (dev ecryptfs, type ecryptfs), uses genfs_contexts
There are no new messages in /var/log/messages from the mounting.
Here's what I did/saw with the 3.2 kernel:
# ecryptfs- add-passphrase --fnek
Passphrase:
Inserted auth tok with sig [4c0c36bbcda400d6] into the user session keyring
Inserted auth tok with sig [d697d8aafc7fde3d] into the user session keyring
# mount encrypted encrypted -t ecryptfs
Select key type to use for newly created files:
1) passphrase
2) openssl
3) tspi
4) pkcs11-helper
Selection: 1
Passphrase:
Select cipher:
1) aes: blocksize = 16; min keysize = 16; max keysize = 32 (loaded)
2) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24 (not loaded)
3) cast6: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
4) cast5: blocksize = 8; min keysize = 5; max keysize = 16 (not loaded)
There's no "blowfish" option. Passing "-o ecryptfs_ cipher= blowfish" in the mount command leads to some bad option error.
With kernel 3.1.9, the only dmesg of mounting the ecryptfs is this line:
[23314.085489] SELinux: initialized (dev ecryptfs, type ecryptfs), uses genfs_contexts
There are no new messages in /var/log/messages from the mounting.
Thanks.