cryptsetup is used to set up transparent encryption of block devices using the kernel crypto API.
This package is known to build and work properly using an LFS-8.1 platform.
Download (HTTP): https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-1.7.5.tar.xz
Download MD5 sum: d2d668223e795dcf750da44dc3e7076b
Download size: 1.2 MB
Estimated disk space required: 12 MB
Estimated build time: 0.1 SBU (add 7.4 SBU for tests)
libgcrypt-1.8.0, Nettle-3.3, LVM2-2.02.171, NSS-3.32, OpenSSL-1.1.0f, popt-1.16
libpwquality-1.4.0, LVM2-2.02.171, Python-2.7.13, and passwdqc
User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cryptsetup
Encrypted block devies require kernel support. To use it, the appropriate kernel configuration parameters need to be set:
Device Drivers --->
[*] Multiple devices driver support (RAID and LVM) ---> [CONFIG_MD]
<*/M> Device mapper support [CONFIG_BLK_DEV_DM]
<*/M> Crypt target support [CONFIG_DM_CRYPT]
Cryptographic API --->
<*/M> XTS support [CONFIG_CRYPTO_XTS]
<*/M> SHA224 and SHA256 digest algorithm [CONFIG_CRYPTO_SHA256]
<*/M> AES cipher algorithms [CONFIG_CRYPTO_AES]
<*/M> AES cipher algorithms (x86_64) [CONFIG_CRYPTO_AES_X86_64]
<*/M> User-space interface for symmetric key cipher algorithms
[CONFIG_CRYPTO_USER_API_SKCIPHER]
For tests:
<*/M> Twofish cipher algorithm [CONFIG_CRYPTO_TWOFISH]
Install cryptsetup by running the following commands:
./configure --prefix=/usr && make
To test the result, issue as the root user: make
check
Now, as the root user:
make install
Because of the number of possible configurations, setup of encrypted volumes is beyond the scope of the BLFS book. Please see the configuration guide in the cryptsetup FAQ.
Last updated on 2017-08-31 20:56:24 -0700