XTS mode support in cryptsetup/LUKS
I'm brand new to Linode, and I've set mine up using Arch Linux i686 with kernel "Latest 2.6 Paravirt (2.6.32.16-linode28)"
I want to encrypt a disk with cryptsetup/LUKS, using the command:
cryptsetup --debug luksFormat /dev/xvdc -c aes-xts-plain -h sha512 -s 512
but it fails with:
Check that kernel supports aes-xts-plain cipher
It doesn't fail if I use CBC mode: aes-cbc-plain, and XTS can't be found in /proc/crypto. The stock Arch kernel (on my laptop) supports XTS. How can I get it to work on my Linode?
4 Replies
Start with:
Might be easier to just revert to your distribution's kernel, but I seem to recall issues with Arch's domU kernel. Can't provide any evidence, but Arch is sticking out in my brain.
CONFIG_CRYPTO_XTS=m
then:````
make modules
make modules_install
BUT:
modprobe xts
FATAL: Module xts not found.
insmod /lib/modules/2.6.32.16-linode28/kernel/crypto/xts.ko
insmod: error inserting '/lib/modules/2.6.32.16-linode28/kernel/crypto/xts.ko': -1 Invalid module format
dmesg
xts: no symbol version for module_layout
````
I'd appreciate any help. Thanks all.
Would be nice if XTS mode was enabled in the stock Linode kernels.
-m=nokernelcrypto