开发Linux系统下的磁盘加密方法详解

wget http://www.saout.de/misc/dm-crypt/cryptsetup-0.1.tar.bz2
cd cryptsetup-0.1
./configure;make;make install
编译内核（已经支持则跳过此步）
make menuconfig
Device Drivers > Multi-device support (RAID and LVM)
CONFIG_BLK_DEV_DM
CONFIG_DM_CRYPT
加载模块
modprobe dm-crypt
(以及加密模块)
 创建loop设备
dd if=/dev/zero of=~/dm-crypt.image bs=1M count=10
losetup /dev/loop0 ~/dm-crypt.image
建立device-mapper
cryptsetup -y create dm-crypt /dev/loop0
(提示输入密码)
创建文件系统并加载
mkfs.ext3 /dev/mapper/dm-crypt
mount /dev/mapper/dm-crypt /mnt/crypto
卸载
umount /mnt/crypto/
cryptsetup remove dm-crypt
losetup -d /dev/loop0
重新加载
cryptsetup -y create dm-crypt /dev/loop0
mount /dev/mapper/dm-crypt /mnt/crypto

下载并编译
http://people.redhat.com/~dhowells/keyutils/keyutils-1.2.tar.bz2
tar jxf keyutils-1.2.tar.bz2
cd keyutils-1.2
make;make install
tar jxf ecryptfs-20070306.tar.bz2
cd ecryptfs-20070306/ecryptfs-util
./configure;make;make install
编译内核
make menuconfig
File systems>Miscellaneous filesystems
CONFIG_ECRYPT_FS
加载模块
modprobe ecryptfs
(以及加密模块)
加载
mkdir /root/crypt
mkdir /mnt/crypt
mount -t ecryptfs /root/crypt /mnt/crypt
(提示输入密码和算法)
 卸载
umount /mnt/crypt
重新加载
mount -t ecryptfs /root/crypt /mnt/crypt
 (提示输入密码和算法)