From eric at christensenplace.us Thu Jun 4 22:16:17 2015 Content-Type: multipart/mixed; boundary="===============1539032288574994119==" MIME-Version: 1.0 From: Eric Christensen To: docs at lists.fedoraproject.org Subject: Assistance Needed: Crypto Guide Date: Thu, 20 Mar 2008 08:45:57 -0400 Message-ID: <20080320124555.GE4408@localhost.localdomain> --===============1539032288574994119== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been working on updating the Crypto Guide (or Encryption and Privacy G= uide) [1] but I've run into a few snags. Karsten "Quaid" and I have been t= alking about the different information that should be included but we've co= me to a point where we need input from the group. Originally the Crypto Guide was written to show how to implement LUKS disk = encryption within Fedora. This has been done and tested. Being that this = is the "Encryption and Privacy Guide" proposed topics to include in the gui= de are: - - LUKS Disk Encryption Solution - - eCryptfs Disk Encryption Solution - - GnuPG (GPG) File Encryption Solution - - GnuPG (GPG) Email Encryption Solution - - SSH - - VPNs - - Other related references. I guess the biggest problem is where do you draw the line between Fedora-sp= ecific implementations and good security practices that have information av= ailable somewhere else? So I'm asking you what should be included in the Guide and what shouldn't. = I'm going to try to go put as much information into the topics that are li= sted above but this has to be out the door for F9 so I don't want to put to= o much information into it. If anyone would like to assist writing on any = of the above topics please let me know. Eric [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFH4lyDL5V8yddJCO0RAolhAJ4vMDQW9Bjmn/MT3FPidtmPxnI/MwCfVsPh nosx5HWtD06EiZCa3Yu/Fow=3D =3DK+dq -----END PGP SIGNATURE----- --===============1539032288574994119==-- From gayathri.swa at gmail.com Thu Jun 4 22:16:17 2015 Content-Type: multipart/mixed; boundary="===============5710107759666261138==" MIME-Version: 1.0 From: Gayathri Swaminathan To: docs at lists.fedoraproject.org Subject: Re: Assistance Needed: Crypto Guide Date: Thu, 20 Mar 2008 08:18:23 -0500 Message-ID: In-Reply-To: 20080320124555.GE4408@localhost.localdomain --===============5710107759666261138== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hey Eric: Not long ago Murray had forwarded this to the list: http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=3Dscg10.3.1.1 While there are lots of reference materials like these as security best practices sources, there is a lack of less daunting simple starters! Instead of by "type of crypt" perhaps a cook book style of: - for - example, "Securing filesystem" - Scenarios - why it is needed? when it is needed? - Standards - mention best practice here - How to do it Count me in for assistance. On Thu, Mar 20, 2008 at 7:45 AM, Eric H Christensen < eric(a)christensenplace.us> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been working on updating the Crypto Guide (or Encryption and Privacy > Guide) [1] but I've run into a few snags. Karsten "Quaid" and I have been > talking about the different information that should be included but we've > come to a point where we need input from the group. > > Originally the Crypto Guide was written to show how to implement LUKS disk > encryption within Fedora. This has been done and tested. Being that this > is the "Encryption and Privacy Guide" proposed topics to include in the > guide are: > > - - LUKS Disk Encryption Solution > - - eCryptfs Disk Encryption Solution > - - GnuPG (GPG) File Encryption Solution > - - GnuPG (GPG) Email Encryption Solution > - - SSH > - - VPNs > - - Other related references. > > I guess the biggest problem is where do you draw the line between > Fedora-specific implementations and good security practices that have > information available somewhere else? > > So I'm asking you what should be included in the Guide and what shouldn't. > I'm going to try to go put as much information into the topics that are > listed above but this has to be out the door for F9 so I don't want to put > too much information into it. If anyone would like to assist writing on = any > of the above topics please let me know. > > Eric > > > [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFH4lyDL5V8yddJCO0RAolhAJ4vMDQW9Bjmn/MT3FPidtmPxnI/MwCfVsPh > nosx5HWtD06EiZCa3Yu/Fow=3D > =3DK+dq > -----END PGP SIGNATURE----- > > -- > fedora-docs-list mailing list > fedora-docs-list(a)redhat.com > To unsubscribe: > https://www.redhat.com/mailman/listinfo/fedora-docs-list > -- = Gayathri Swaminathan gpgkey: 3EFB3D39 Volunteer, FDP --===============5710107759666261138== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" SGV5IEVyaWM6PGJyPjxicj5Ob3QgbG9uZyBhZ28gTXVycmF5IGhhZCBmb3J3YXJkZWQgdGhpcyB0 byB0aGUgbGlzdDogPGEgaHJlZj0iaHR0cDovL3d3dy5uc2EuZ292L3NuYWMvZG93bmxvYWRzX3Jl ZGhhdC5jZm0/TWVudUlEPXNjZzEwLjMuMS4xIj5odHRwOi8vd3d3Lm5zYS5nb3Yvc25hYy9kb3du bG9hZHNfcmVkaGF0LmNmbT9NZW51SUQ9c2NnMTAuMy4xLjE8L2E+PGJyPjxicj5XaGlsZSB0aGVy ZSBhcmUgbG90cyBvZiByZWZlcmVuY2UgbWF0ZXJpYWxzIGxpa2UgdGhlc2UgYXMgc2VjdXJpdHkg YmVzdCBwcmFjdGljZXMgc291cmNlcywgdGhlcmUgaXMgYSBsYWNrIG9mIGxlc3MgZGF1bnRpbmcg c2ltcGxlIHN0YXJ0ZXJzITxicj4KPGJyPkluc3RlYWQgb2YgYnkgJnF1b3Q7dHlwZSBvZiBjcnlw dCZxdW90OyBwZXJoYXBzIGEgY29vayBib29rIHN0eWxlIG9mOjxicj48YnI+LSAmbHQ7U2VjdXJp dHkvcHJpdmFjeSBndWlkZWxpbmUmZ3Q7IGZvciAmbHQ7dGl0bGUmZ3Q7IC0gZXhhbXBsZSwgJnF1 b3Q7U2VjdXJpbmcgZmlsZXN5c3RlbSZxdW90Ozxicj4mbmJzcDsmbmJzcDsgLSBTY2VuYXJpb3Mg LSB3aHkgaXQgaXMgbmVlZGVkPyB3aGVuIGl0IGlzIG5lZWRlZD88YnI+CiZuYnNwOyZuYnNwOyAt IFN0YW5kYXJkcyAtIG1lbnRpb24gYmVzdCBwcmFjdGljZSBoZXJlPGJyPiZuYnNwOyZuYnNwOyAt IEhvdyB0byBkbyBpdDxicj48YnI+Q291bnQgbWUgaW4gZm9yIGFzc2lzdGFuY2UuPGJyPjxicj48 ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gVGh1LCBNYXIgMjAsIDIwMDggYXQgNzo0NSBBTSwg RXJpYyBIIENocmlzdGVuc2VuICZsdDs8YSBocmVmPSJtYWlsdG86ZXJpY0BjaHJpc3RlbnNlbnBs YWNlLnVzIj5lcmljQGNocmlzdGVuc2VucGxhY2UudXM8L2E+Jmd0OyB3cm90ZTo8YnI+CjxibG9j a3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9ImJvcmRlci1sZWZ0OiAxcHggc29saWQg cmdiKDIwNCwgMjA0LCAyMDQpOyBtYXJnaW46IDBwdCAwcHQgMHB0IDAuOGV4OyBwYWRkaW5nLWxl ZnQ6IDFleDsiPi0tLS0tQkVHSU4gUEdQIFNJR05FRCBNRVNTQUdFLS0tLS08YnI+Ckhhc2g6IFNI QTE8YnI+Cjxicj4KSSYjMzk7dmUgYmVlbiB3b3JraW5nIG9uIHVwZGF0aW5nIHRoZSBDcnlwdG8g R3VpZGUgKG9yIEVuY3J5cHRpb24gYW5kIFByaXZhY3kgR3VpZGUpIFsxXSBidXQgSSYjMzk7dmUg cnVuIGludG8gYSBmZXcgc25hZ3MuICZuYnNwO0thcnN0ZW4gJnF1b3Q7UXVhaWQmcXVvdDsgYW5k IEkgaGF2ZSBiZWVuIHRhbGtpbmcgYWJvdXQgdGhlIGRpZmZlcmVudCBpbmZvcm1hdGlvbiB0aGF0 IHNob3VsZCBiZSBpbmNsdWRlZCBidXQgd2UmIzM5O3ZlIGNvbWUgdG8gYSBwb2ludCB3aGVyZSB3 ZSBuZWVkIGlucHV0IGZyb20gdGhlIGdyb3VwLjxicj4KCjxicj4KT3JpZ2luYWxseSB0aGUgQ3J5 cHRvIEd1aWRlIHdhcyB3cml0dGVuIHRvIHNob3cgaG93IHRvIGltcGxlbWVudCBMVUtTIGRpc2sg ZW5jcnlwdGlvbiB3aXRoaW4gRmVkb3JhLiAmbmJzcDtUaGlzIGhhcyBiZWVuIGRvbmUgYW5kIHRl c3RlZC4gJm5ic3A7QmVpbmcgdGhhdCB0aGlzIGlzIHRoZSAmcXVvdDtFbmNyeXB0aW9uIGFuZCBQ cml2YWN5IEd1aWRlJnF1b3Q7IHByb3Bvc2VkIHRvcGljcyB0byBpbmNsdWRlIGluIHRoZSBndWlk ZSBhcmU6PGJyPgoKPGJyPgotIC0gTFVLUyBEaXNrIEVuY3J5cHRpb24gU29sdXRpb248YnI+Ci0g LSBlQ3J5cHRmcyBEaXNrIEVuY3J5cHRpb24gU29sdXRpb248YnI+Ci0gLSBHbnVQRyAoR1BHKSBG aWxlIEVuY3J5cHRpb24gU29sdXRpb248YnI+Ci0gLSBHbnVQRyAoR1BHKSBFbWFpbCBFbmNyeXB0 aW9uIFNvbHV0aW9uPGJyPgotIC0gU1NIPGJyPgotIC0gVlBOczxicj4KLSAtIE90aGVyIHJlbGF0 ZWQgcmVmZXJlbmNlcy48YnI+Cjxicj4KSSBndWVzcyB0aGUgYmlnZ2VzdCBwcm9ibGVtIGlzIHdo ZXJlIGRvIHlvdSBkcmF3IHRoZSBsaW5lIGJldHdlZW4gRmVkb3JhLXNwZWNpZmljIGltcGxlbWVu dGF0aW9ucyBhbmQgZ29vZCBzZWN1cml0eSBwcmFjdGljZXMgdGhhdCBoYXZlIGluZm9ybWF0aW9u IGF2YWlsYWJsZSBzb21ld2hlcmUgZWxzZT88YnI+Cjxicj4KU28gSSYjMzk7bSBhc2tpbmcgeW91 IHdoYXQgc2hvdWxkIGJlIGluY2x1ZGVkIGluIHRoZSBHdWlkZSBhbmQgd2hhdCBzaG91bGRuJiMz OTt0LiAmbmJzcDtJJiMzOTttIGdvaW5nIHRvIHRyeSB0byBnbyBwdXQgYXMgbXVjaCBpbmZvcm1h dGlvbiBpbnRvIHRoZSB0b3BpY3MgdGhhdCBhcmUgbGlzdGVkIGFib3ZlIGJ1dCB0aGlzIGhhcyB0 byBiZSBvdXQgdGhlIGRvb3IgZm9yIEY5IHNvIEkgZG9uJiMzOTt0IHdhbnQgdG8gcHV0IHRvbyBt dWNoIGluZm9ybWF0aW9uIGludG8gaXQuICZuYnNwO0lmIGFueW9uZSB3b3VsZCBsaWtlIHRvIGFz c2lzdCB3cml0aW5nIG9uIGFueSBvZiB0aGUgYWJvdmUgdG9waWNzIHBsZWFzZSBsZXQgbWUga25v dy48YnI+Cgo8YnI+CkVyaWM8YnI+Cjxicj4KPGJyPgpbMV0gPGEgaHJlZj0iaHR0cDovL2ZlZG9y YXByb2plY3Qub3JnL3dpa2kvRG9jcy9EcmFmdHMvQ3J5cHRvR3VpZGUiIHRhcmdldD0iX2JsYW5r Ij5odHRwOi8vZmVkb3JhcHJvamVjdC5vcmcvd2lraS9Eb2NzL0RyYWZ0cy9DcnlwdG9HdWlkZTwv YT48YnI+Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tPGJyPgpWZXJzaW9uOiBHbnVQRyB2 MS40LjcgKEdOVS9MaW51eCk8YnI+Cjxicj4KaUQ4REJRRkg0bHlETDVWOHlkZEpDTzBSQW9saEFK NHZNRFFXOUJqbW4vTVQzRlBpZHRtUHhuSS9Nd0NmVnNQaDxicj4Kbm9zeDVIV3REMDZFaVpDYTNZ dS9Gb3c9PGJyPgo9SytkcTxicj4KLS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0tPGJyPgo8Zm9u dCBjb2xvcj0iIzg4ODg4OCI+PGJyPgotLTxicj4KZmVkb3JhLWRvY3MtbGlzdCBtYWlsaW5nIGxp c3Q8YnI+CjxhIGhyZWY9Im1haWx0bzpmZWRvcmEtZG9jcy1saXN0QHJlZGhhdC5jb20iPmZlZG9y YS1kb2NzLWxpc3RAcmVkaGF0LmNvbTwvYT48YnI+ClRvIHVuc3Vic2NyaWJlOjxicj4KPGEgaHJl Zj0iaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2ZlZG9yYS1kb2NzLWxp c3QiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5yZWRoYXQuY29tL21haWxtYW4vbGlzdGlu Zm8vZmVkb3JhLWRvY3MtbGlzdDwvYT48YnI+CjwvZm9udD48L2Jsb2NrcXVvdGU+PC9kaXY+PGJy PjxiciBjbGVhcj0iYWxsIj48YnI+LS0gPGJyPkdheWF0aHJpIFN3YW1pbmF0aGFuPGJyPmdwZ2tl eTogM0VGQjNEMzk8YnI+Vm9sdW50ZWVyLCBGRFAK --===============5710107759666261138==-- From eric at christensenplace.us Thu Jun 4 22:16:22 2015 Content-Type: multipart/mixed; boundary="===============6835527413314362614==" MIME-Version: 1.0 From: Eric Christensen <eric at christensenplace.us> To: docs at lists.fedoraproject.org Subject: Re: Assistance Needed: Crypto Guide Date: Thu, 27 Mar 2008 20:52:13 -0400 Message-ID: <47EC413D.9050706@christensenplace.us> In-Reply-To: e608f00d0803200618u50703881o7842cebca1fec276@mail.gmail.com --===============6835527413314362614== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yeah, this is kind of where I see this guide going but I think that is very future looking right now. Thanks for the resource, though. I've been looking for that link for a while but I thought it was a NIST document vice a NSA document. Right now we need to get, at least, the information that is specific to Fedora 9 into the document. I think most of it is there but I want to clean it up a bit before letting the editors at it. I'm currently doing updates on my Rawhide box and then I'm going to play to see if I can break a few things. Eric Gayathri Swaminathan wrote: | Hey Eric: | | Not long ago Murray had forwarded this to the list: | http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=3Dscg10.3.1.1 | | While there are lots of reference materials like these as security best | practices sources, there is a lack of less daunting simple starters! | | Instead of by "type of crypt" perhaps a cook book style of: | | - <Security/privacy guideline> for <title> - example, "Securing filesystem" | - Scenarios - why it is needed? when it is needed? | - Standards - mention best practice here | - How to do it | | Count me in for assistance. | | On Thu, Mar 20, 2008 at 7:45 AM, Eric H Christensen | <eric(a)christensenplace.us <mailto:eric(a)christensenplace.us>> wrote: | | I've been working on updating the Crypto Guide (or Encryption and | Privacy Guide) [1] but I've run into a few snags. Karsten "Quaid" | and I have been talking about the different information that should | be included but we've come to a point where we need input from the | group. | | Originally the Crypto Guide was written to show how to implement | LUKS disk encryption within Fedora. This has been done and tested. | Being that this is the "Encryption and Privacy Guide" proposed | topics to include in the guide are: | | - LUKS Disk Encryption Solution | - eCryptfs Disk Encryption Solution | - GnuPG (GPG) File Encryption Solution | - GnuPG (GPG) Email Encryption Solution | - SSH | - VPNs | - Other related references. | | I guess the biggest problem is where do you draw the line between | Fedora-specific implementations and good security practices that | have information available somewhere else? | | So I'm asking you what should be included in the Guide and what | shouldn't. I'm going to try to go put as much information into the | topics that are listed above but this has to be out the door for F9 | so I don't want to put too much information into it. If anyone | would like to assist writing on any of the above topics please let | me know. | | Eric | | | [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide - -- fedora-docs-list mailing list fedora-docs-list(a)redhat.com <mailto:fedora-docs-list(a)redhat.com> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-docs-list | -- | Gayathri Swaminathan | gpgkey: 3EFB3D39 | Volunteer, FDP -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFH7EE7L5V8yddJCO0RAqtuAJ4wr1d6HmOPZCVTakp5MCmeoKRK6gCfc03V pRz+zTpQhFqySVk4z/sGIt4=3D =3DW9OS -----END PGP SIGNATURE----- --===============6835527413314362614==--