{"id":39,"date":"2016-11-14T16:36:58","date_gmt":"2016-11-14T16:36:58","guid":{"rendered":"http:\/\/www.hestben.se\/HestbenTechnical\/?p=39"},"modified":"2016-11-14T16:36:58","modified_gmt":"2016-11-14T16:36:58","slug":"a-noobs-guide-to-installing-gentoo-on-a-core-i5-2500k-cryptsetup","status":"publish","type":"post","link":"https:\/\/www.hestben.se\/HestbenTechnical\/?p=39","title":{"rendered":"A noobs guide to installing Gentoo on a core i5 2500K – cryptsetup"},"content":{"rendered":"

So, I use cryptsetup to encrypt a drive I have, so I would really like to continue using cryptsetup.
\nIt is easy to emerge cryptsetup with emerge --ask sys-fs\/cryptsetup<\/code>.
\nThen, trying to run it, for example cryptsetup benchmark<\/code>, I got the error:
\nRequired kernel crypto interface not available.
\nEnsure you have algif_skcipher kernel module loaded.<\/code>
\nI searched and found this thread<\/a>. I extracted the parts I needed for it to work for me:
\nThe following kernel configuration options needed to be enabled:
\n(If I recall correctly)
\nCONFIG_CRYPTO_XTS
\nCONFIG_CRYPTO_AES_X86_64
\nCONFIG_CRYPTO_AES_NI_INTEL<\/code>
\nThe first two are for my encryption algorithm xts-plain64<\/code>. The Intel option is because I have an Intel CPU.
\nStill no go, I found I had to enable some hashes as well (logically):
\nCONFIG_CRYPTO_SHA1
\nCONFIG_CRYPTO_SHA1_SSSE3
\nCONFIG_CRYPTO_SHA256_SSSE3
\nCONFIG_CRYPTO_SHA512_SSSE3
\nCONFIG_CRYPTO_SHA1_MB
\nCONFIG_CRYPTO_SHA256
\nCONFIG_CRYPTO_SHA512<\/code>
\nStill no go. Later in the thread I found that I needed these options as well (Yes, I am using it as a block device):
\nCONFIG_BLK_DEV_DM
\nCONFIG_DM_CRYPT<\/code>
\nStill no go. I started to get really annoyed, because, I had chosen to include a lot of the options in the kernel, so for each new try, I had to reboot the kernel. So, I searched for ‘algif’ in the thread and found that these options might also be needed:
\nCONFIG_CRYPTO_USER_API
\nCONFIG_CRYPTO_USER_API_HASH
\nCONFIG_CRYPTO_USER_API_SKCIPHER<\/code>.
\nI chose these options to be modules, and could load that module in right away, without a reboot. That did the trick.
\nThere was some debate in the thread, whether you needed to include options in the kernel, or not, to be able to boot if your root is encrypted. I don’t have it setup that way, so it didn’t bother me, but somebody said it should be able to boot with the crypto options as modules, because modules can be loaded during boot.<\/p>\n","protected":false},"excerpt":{"rendered":"

So, I use cryptsetup to encrypt a drive I have, so I would really like to continue using cryptsetup. It is easy to emerge cryptsetup with emerge –ask sys-fs\/cryptsetup. Then, trying to run it, for example cryptsetup benchmark, I got the error: Required kernel crypto interface not available. Ensure you have algif_skcipher kernel module loaded. … Continue reading “A noobs guide to installing Gentoo on a core i5 2500K – cryptsetup”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/posts\/39"}],"collection":[{"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=39"}],"version-history":[{"count":3,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions"}],"predecessor-version":[{"id":42,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions\/42"}],"wp:attachment":[{"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hestben.se\/HestbenTechnical\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}