[COLUG] Encrypted Filesystems

[Greg Sidelinger]

I was doing a little bit of research last night for two different  
encrypted file systems I would like to setup. First I  would like to  
encrypt /home and swap on a centos 4/5 server. I'm currently running  
centos 4 on the server but would be willing to finally upgrade it to  
centos 5 if the solution I go with requires a newer kernel, libs and  
userland tools. I would like the software to be included in centos by  
default since it is a pain to upgrade kernel modules and other things  
after a yum update (yes I am that lazy). I saw things like Aes-loop,  
dm-crypt and various filesystems that encrypt the data. It looks like  
dm-crypt with support for LUKS is supported in centos 5,  
http://wiki.centos.org/TipsAndTricks/EncryptedFilesystem.

And second I would like to encrypt a usb memory stick so that I can  
access the file system from linux, windows and osx. It would be nice  
if this could be done with userland tools so that every system I need  
to access the usb memory stick from does not need to have stuff loaded  
as an admin user.

So what solutions have others used and what is more likely to become  
the linux standard. I will most likely end up going with the dm-crypt  
solution unless someone has a better solution or a good reason not  
too. As for my USB memory stick solution, I have no idea what to use  
since I want it to be cross platform and free.

Greg