cryptmount is a utility for creating and managing secure filing systems on GNU/Linux systems. After initial setup, it allows any user to mount or unmount filesystems on demand, solely by providing the decryption password, with any system devices needed to access the filing system being configured automatically. A wide variety of encryption schemes (provided by the kernel dm-crypt system and the libgcrypt library) can be used to protect both the filesystem and the access key. The protected filing systems can reside in either ordinary files or disk partitions. The package also supports encrypted swap partitions, and automatic configuration on system boot-up.
| Tags | Security Cryptography Systems Administration Filesystems |
|---|---|
| Operating Systems | POSIX Linux |
| Implementation | C |
| Translations | French English German |
Recent releases


Changes: Support for encrypted filesystems without separate key files or partition headers was added. The security of the built-in SHA1/Blowfish key manager was improved through more extensive password hashing. Facilities for creating LUKS encrypted partitions were improved. Robustness to possible race conditions in handling udev events was improved. Many areas of legacy code were tidied.


Changes: Facilities for managing encrypted filesystems without needing separate key files were added. Support for creating LUKS encrypted filesystems compatible with cryptsetup was improved. The security of built-in key-file encryption was improved with a stronger password-based key-derivation function (PBKDF). Many areas of the source code were tidied.


Changes: Support for mounting encrypted filesystems created by cryptsetup-luks was added. Mechanisms for changing passwords on LUKS partitions were added. Methods for creating basic new LUKS partitions were added.


Changes: Support for mounting encrypted filesystems created by cryptsetup-luks was added. Mechanisms for changing passwords on LUKS partitions were added. Methods for creating basic new LUKS partitions were added.


Changes: German translations for the main application were added. The interactive setup script was internationalized. French translations for the setup script were added. Support for default filesystem parameters within the master configuration file was added. Support for multiple password attempts was added. Dependence on the OpenSSL library was removed.
A script that lets you handle form validation without writing JavaScript code.