FORUMS

[NATIVE][ARM]Linux binaries for Android (EncFS, Cryptsetup, PhotoRec, SMBNetFS..)

2,031 posts
Thanks Meter: 918
 
By DualJoe, Senior Member on 24th November 2017, 12:29 AM
Post Reply Email Thread
21st May 2020, 11:33 PM |#221  
afridi.shahriar's Avatar
Senior Member
Thanks Meter: 94
 
More
Quote:
Originally Posted by mirfatif

They don't depend on fscrypt but lag in development. Even some very basic features are missing. Actually fscrypt was originally based on e4crypt but now the former has come far ahead. At the moment the most stable implementation is AOSP's built-in filesystem encryption.

---------- Post added at 01:32 PM ---------- Previous post was at 01:28 PM ----------



dm-verity and dm-integrity are to prevent accidental or malicious data corruption. So is fs-verity. E.g. veritysetup is used to setup what Android's Verified Boot does to /system, /vendor etc. to prevent any modifications.

sir, any ways to use the AOSP's built-in filesystem encryption for encrypt/decrypt dirs on ext4/f2fs filesystem manually for a directory??


can dm-verity or dm-integrity be used with luks to prevent accidental or malicious data corruption? (i.e. luks header corruption)

---------- Post added at 04:03 AM ---------- Previous post was at 03:49 AM ----------

Quote:
Originally Posted by DualJoe

I've just put them in for completeness. Probably useless for end-users.

strace binaries are in the first post.

If 'fscrypt --verbose' doesn't provide any information about the keyring i can post a 'keyctl' binary for debugging. It will show if the key was properly assigned to your user/session if i reckon correctly.

Edit: Added 'keyctl' to the fscrypt archive here.

strace outpur for fscrypt unlock /oem/1
and,
mkdir /oem/1/test

https://pastebin.com/GbzhEjYX

------
i dont understand how to use "keyctl". keyctl show shows 1key always, whether i lock/unlock that dir (/oem/1)

-------
can u plz make f2fs-tools latest (1.13.0) ?
21st May 2020, 11:46 PM |#222  
DualJoe's Avatar
OP Senior Member
de
Thanks Meter: 918
 
More
Is /oem ext4 and properly set up? Did you check with tune2fs that 'encrypted' feature is enabled?
I'm not sure why you want to go the hard way but Android supports fscrypt functionality out of the box. Just search the net for Android encryption.
22nd May 2020, 04:21 AM |#223  
afridi.shahriar's Avatar
Senior Member
Thanks Meter: 94
 
More
Quote:
Originally Posted by DualJoe

Is /oem ext4 and properly set up? Did you check with tune2fs that 'encrypted' feature is enabled?
I'm not sure why you want to go the hard way but Android supports fscrypt functionality out of the box. Just search the net for Android encryption.

yea, properly setup, in deed!
i did:
su
mke2fs -t ext4 -O encrypt /dev/block/by-name/cust
mount -t ext4 /dev/block/by-name/cust /oem

----
what do u mean? are u talking about FBE (File based encryption)?
android encryption will encrypt all the files inside /data .
actually i don't wanna encrypt my all data, as i flash new ROMs nearly everyday. and, i don't have microsd slot.
so, i only wanna encrypt a few dirs inside my phone.

gocryptfs is too slow for me.
while luks is very good (used in a otg-memory card).

so, i wanna use fscrypt on either ext4 or f2fs
22nd May 2020, 04:33 PM |#224  
DualJoe's Avatar
OP Senior Member
de
Thanks Meter: 918
 
More
Quote:
Originally Posted by afridi.shahriar

yea, properly setup, in deed!
i did:
su
mke2fs -t ext4 -O encrypt /dev/block/by-name/cust
mount -t ext4 /dev/block/by-name/cust /oem

I would try the commands below. I've also added fscryptctl to the post for debugging purpose.
If it doesn't work try EncFS. It should be much easier.
Quote:

mke2fs -t ext4 -O encrypt /dev/block/by-name/cust
mount -t ext4 /dev/block/by-name/cust /oem
fscrypt setup /oem --user=root
fscrypt encrypt /oem --user=root
fscrypt unlock --user=root

The Following 2 Users Say Thank You to DualJoe For This Useful Post: [ View ] Gift DualJoe Ad-Free
22nd May 2020, 11:01 PM |#225  
Member
Thanks Meter: 16
 
More
Quote:
Originally Posted by afridi.shahriar

gocryptfs is too slow for me.

If your kernel supports ecryptfs then try it. It's fast.
24th May 2020, 10:41 PM |#226  
Member
Thanks Meter: 16
 
More
@DualJoe, Could you help to build p7zip (7z binary) for armv7.

Thanks.
24th May 2020, 11:34 PM |#227  
Ultramanoid's Avatar
Senior Member
日本
Thanks Meter: 4,507
 
More
Quote:
Originally Posted by buengeut

@DualJoe, Could you help to build p7zip (7z binary) for armv7.

Thanks.

In case it helps, that's already available through Termux.
 
Yesterday, 12:53 AM |#228  
Senior Member
Thanks Meter: 241
 
More
or here with HugeFiles=on [Q] 7zip for Android?
Yesterday, 02:18 AM |#229  
DualJoe's Avatar
OP Senior Member
de
Thanks Meter: 918
 
More
Seems to be a fork (v17.01) whereas Termux is v16.02. It supports some more formats (ZSTD, LZ4).
The '7z' binary just has additional rar support but its externally linked that is a problem for static linking (so this is '7za').
The Following 4 Users Say Thank You to DualJoe For This Useful Post: [ View ] Gift DualJoe Ad-Free
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes