KEY MODULE OPTIONS
Parameters that apply to individual key modules have the alias
for the key module in the prefix of the parameter name. Key
modules are pluggable, and which key modules are available on
any given system is dependent upon whatever happens to be
installed in /usr/lib*/ecryptfs/. By default, this includes, at
a minimum, "passphrase" and "openssl."
passphrase_passwd=(passphrase)
The actual password is password. Since the password is visible
to utilities (like ps under Unix) this form should only be used
where security is not important.
passphrase_passwd_file=(filename)
The password should be specified in a file with
passwd=(passphrase). It is highly reccomended that the file be
stored on a secure medium such as a personal usb key.
passphrase_passwd_fd=(file descriptor)
The password is specified through the specified file descriptor.
passphrase_salt=(hex value)
The salt should be specified as a 16 digit hex value.
openssl_keyfile=(filename)
The filename should be the filename of a file containing an RSA
SSL key.
openssl_passwd_file=(filename)
The password should be specified in a file with
openssl_passwd=(openssl-password). It is highly reccomended that
the file be stored on a secure medium such as a personal usb
key.
openssl_passwd_fd=(file descriptor)
The password is specified through the specified file descriptor.
openssl_passwd=(password)
The password can be specified on the command line. Since the
password is visible in the process list, it is highly
recommended to use this option only for testing purposes.
