translate encrypt partition

1 files changed, 49 insertions, 42 deletions

diff --git a/po/zh_CN/using-d-i.po b/po/zh_CN/using-d-i.po
index d7c2419c4..5df641869 100644
--- a/po/zh_CN/using-d-i.po
+++ b/po/zh_CN/using-d-i.po
@@ -4,7 +4,7 @@ msgstr ""
 "Project-Id-Version: d-i-manual\n"
 "Report-Msgid-Bugs-To: http://bugs.kde.org\n"
 "POT-Creation-Date: 2006-07-09 14:07+0000\n"
-"PO-Revision-Date: 2006-07-10 11:40+0800\n"
+"PO-Revision-Date: 2006-07-18 11:05+0800\n"
 "Last-Translator: Ji YongGang<jungle@soforge.com>\n"
 "Language-Team: debian-chinese-gb <debian-chinese-gb@lists.debian.org>\n"
 "MIME-Version: 1.0\n"
@@ -1109,7 +1109,7 @@ msgid ""
 "partitions inside one big partition; the advantage of this method is that "
 "partitions inside this big partition can be resized relatively easily later. "
 "Note: the option to use LVM may not be available on all architectures."
-msgstr ""
+msgstr "如果您选择向导式分区，可以有两种选择：直接在硬盘上创建分区(经典方式)或使用逻辑卷管理(LVM)。第二种方式下，安装程序将在一个大分区上创建很多分区，这种方式的优点在于该大分区内的分区以后改变尺寸相对比较容易。注意：使用 LVM 的选项并不是在所有体系下都可用。"
 
 #. Tag: para
 #: using-d-i.xml:790
@@ -1182,7 +1182,7 @@ msgstr "<filename>/</filename>, <filename>/home</filename>, swap"
 #: using-d-i.xml:825
 #, no-c-format
 msgid "Separate /home, /usr, /var and /tmp partitions"
-msgstr ""
+msgstr "分别建立 /home，/usr，/var 和 /tmp 分区"
 
 #. Tag: entry
 #: using-d-i.xml:826
@@ -1207,7 +1207,7 @@ msgid ""
 "If you choose guided partitioning using LVM, the installer will also create "
 "a separate /boot partition. The other partitions, except for the swap "
 "partition, will be created inside the LVM partition."
-msgstr ""
+msgstr "如果您选择使用 LVM 的向导式分区，安装程序还会创建一个单独的 /boot 分区。其他的分区，除了交换分区，都会建在 LVM 分区之内。"
 
 #. Tag: para
 #: using-d-i.xml:842
@@ -1856,7 +1856,7 @@ msgid ""
 "your laptop or hard drive gets stolen. The thief might get physical access "
 "to the hard drive, but without knowing the right passphrase, the data on the "
 "hard drive will look like random characters."
-msgstr ""
+msgstr "&d-i; 允许您建立加密分区。写入该分区的每个文件都立即存为加密形式。只有在输入 <firstterm>passphrase</firstterm> 通过认证之后才能访问加密后的数据，口令是在加密分区创建时设置的。该特性用于保护您被盗的便携机或硬盘上的敏感数据。盗贼或许可以访问硬盘，但是没有正确的口令，硬盘上的数据看起来就像是随机的字符。"
 
 #. Tag: para
 #: using-d-i.xml:1289
@@ -1873,7 +1873,7 @@ msgid ""
 "the <filename>/boot</filename> partition which must remain unencrypted, "
 "because currently there is no way to load the kernel from an encrypted "
 "partition."
-msgstr ""
+msgstr "有两个需要加密的重要分区：home 分区，驻留您的私人数据，以及交换分区，敏感的数据在操作时会临时保存在这里。当然，这不影响您加密任何其他的分区。例如，数据库服务器、邮件服务器或打印服务器上用来保存数据的 <filename>/var</filename>。或者 /tmp，很多程序用来保存临时文件。有些人或许需要加密整个系统。有一个例外，<filename>/boot</filename> 分区必须保持未加密，这是因为当前没有办法从加密分区加载内核。"
 
 #. Tag: para
 #: using-d-i.xml:1304
@@ -1883,7 +1883,7 @@ msgid ""
 "that of unencrypted ones because the data needs to be decrypted or encrypted "
 "for every read or write. The performance impact depends on your CPU speed, "
 "chosen cipher and a key length."
-msgstr ""
+msgstr "请注意，加密分区的性能将低于未加密的状态，这是由于数据在每次读写时都要进行加密和解密。性能将与您的 CPU 速度、选择的加密算法和密钥长度紧密相关。"
 
 #. Tag: para
 #: using-d-i.xml:1311
@@ -1896,7 +1896,7 @@ msgid ""
 "select <guimenuitem>physical volume for encryption</guimenuitem> at the "
 "<menuchoice> <guimenu>Use as:</guimenu> </menuchoice> option. The menu will "
 "then change to include several cryptographic options for the partition."
-msgstr ""
+msgstr "为了使用加密，您必须在主分区菜单选择空闲的空间创建一个新分区。另一种是使用现有的分区(例如，普通的分区，一个 LVM 逻辑卷或者 RAID 卷)。在 <guimenu>Partition setting</guimenu> 菜单，您需要选择 <guimenuitem>physical volume for encryption</guimenuitem>，其位于 <menuchoice> <guimenu>Use as:</guimenu> </menuchoice> 选项。菜单将包含分区的加密选项。"
 
 #. Tag: para
 #: using-d-i.xml:1322
@@ -1907,7 +1907,7 @@ msgid ""
 "host LVM physical volumes), the other is <firstterm>loop-AES</firstterm> "
 "(older, maintained separately from the Linux kernel tree). Unless you have "
 "compelling reasons to do otherwise, it is recommended to use the default."
-msgstr ""
+msgstr "&d-i; 支持多种加密方法。默认的方法为 <firstterm>dm-crypt</firstterm> (已经包含在新的 Linux 内核中，用于 LVM 物理卷)，另外一种是 <firstterm>loop-AES</firstterm> (旧方法，在 Linux 内核树之外单独维护)。除非您另有特别的原因，推荐使用默认的方法。"
 
 #. Tag: para
 #: using-d-i.xml:1334
@@ -1917,13 +1917,13 @@ msgid ""
 "<userinput>Device-mapper (dm-crypt)</userinput> as the encryption method. As "
 "always: when in doubt, use the defaults, because they have been carefully "
 "chosen with security in mind."
-msgstr ""
+msgstr "首先，让我模来看看选择 <userinput>Device-mapper (dm-crypt)</userinput> 作为加密方法后可用的选项。一般规律：如果犹豫不决，就使用默认项，这是因为它们是审慎的安全考虑的选择。"
 
 #. Tag: term
 #: using-d-i.xml:1344
 #, no-c-format
 msgid "Encryption: <userinput>aes</userinput>"
-msgstr ""
+msgstr "Encryption: <userinput>aes</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1346
@@ -1939,13 +1939,13 @@ msgid ""
 "the American National Institute of Standards and Technology as the standard "
 "encryption algorithm for protecting sensitive information in the 21st "
 "century."
-msgstr ""
+msgstr "该选项让您选择加密算法(<firstterm>cipher</firstterm>)，它用来加密分区上的数据。&d-i; 当前支持以下 block ciphers：<firstterm>aes</firstterm>、<firstterm>blowfish</firstterm>、<firstterm>serpent</firstterm> 和 <firstterm>twofish</firstterm>。讨论这些算法的质量超出了本文的范畴，但是，您应该知道，在 2000，<emphasis>AES</emphasis> 被 American National Institute of Standards and Technology 选择作为标准的加密算法，用于保护 21 世纪的敏感信息。"
 
 #. Tag: term
 #: using-d-i.xml:1364
 #, no-c-format
 msgid "Key size: <userinput>256</userinput>"
-msgstr ""
+msgstr "Key size: <userinput>256</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1366
@@ -1955,13 +1955,13 @@ msgid ""
 "size, the strength of the encryption is generally improved. On the other "
 "hand, increasing the length of the key usually has a negative impact on "
 "performance. Available key sizes vary depending on the cipher."
-msgstr ""
+msgstr "这里您可以指定密钥长度。使用较长的密钥，加密的能力自然得到提升。另一方面，增加长度自然会降低性能。cipher 决定可用的密钥长度。"
 
 #. Tag: term
 #: using-d-i.xml:1378
 #, no-c-format
 msgid "IV algorithm: <userinput>cbc-essiv:sha256</userinput>"
-msgstr ""
+msgstr "IV algorithm: <userinput>cbc-essiv:sha256</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1380
@@ -1973,7 +1973,7 @@ msgid ""
 "always produces a unique <firstterm>cipher text</firstterm>. The idea is to "
 "prevent the attacker from deducing information from repeated patterns in the "
 "encrypted data."
-msgstr ""
+msgstr "<firstterm>Initialization Vector</firstterm> 或 <firstterm>IV</firstterm> 算法是确保加密过程中用同一个密钥对于同一 <firstterm>clear text</firstterm> 将产生惟一的 <firstterm>cipher text</firstterm>。用于防止攻击者根据加密数据中的重复模板推断信息。"
 
 #. Tag: para
 #: using-d-i.xml:1390
@@ -1983,25 +1983,25 @@ msgid ""
 "userinput> is currently the least vulnerable to known attacks. Use the other "
 "alternatives only when you need to ensure compatibility with some previously "
 "installed system that is not able to use newer algorithms."
-msgstr ""
+msgstr "与其替代者比较，默认的 <userinput>cbc-essiv:sha256</userinput> 当前已知是最少的攻击漏洞。您只有在需要要保持与以前安装的系统兼容，它们无法使用新的算法时，才使用其他的算法。"
 
 #. Tag: term
 #: using-d-i.xml:1402
 #, no-c-format
 msgid "Encryption key: <userinput>Passphrase</userinput>"
-msgstr ""
+msgstr "Encryption key: <userinput>Passphrase</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1404
 #, no-c-format
 msgid "Here you can choose the type of the encryption key for this partition."
-msgstr ""
+msgstr "这里您可以为分区选择所使用的加密密钥类型。"
 
 #. Tag: term
 #: using-d-i.xml:1410
 #, no-c-format
 msgid "Passphrase"
-msgstr ""
+msgstr "Passphrase"
 
 #. Tag: para
 #: using-d-i.xml:1411
@@ -2011,13 +2011,13 @@ msgid ""
 "the key currently means that the partition will be set up using <ulink url="
 "\"&url-luks;\">LUKS</ulink>. </para></footnote> on the basis of a passphrase "
 "which you will be able to enter later in the process."
-msgstr ""
+msgstr "加密密钥将基于 passphrase 计算<footnote> <para> 使用 passphrase 作为密钥意味着建立分区是使用 <ulink url=\"&url-luks;\">LUKS</ulink>。</para></footnote>，使用时要求输入。"
 
 #. Tag: term
 #: using-d-i.xml:1426 using-d-i.xml:1519
 #, no-c-format
 msgid "Random key"
-msgstr ""
+msgstr "Random key"
 
 #. Tag: para
 #: using-d-i.xml:1427
@@ -2029,7 +2029,7 @@ msgid ""
 "course, you could try to guess the key with a brute force attack, but unless "
 "there is an unknown weakness in the cipher algorithm, it is not achievable "
 "in our lifetime.)"
-msgstr ""
+msgstr "当您每次使用加密分区的时候，会从随机数据中生成一个新的加密密钥。欢句话说：每次关机驻留在内存里面的密钥删除以后分区上的内容将丢失。(当然，您会猜想该密钥将面临暴力破解，但是除非加密算法中有未知的弱点，这辈子也不会被攻破。)"
 
 #. Tag: para
 #: using-d-i.xml:1436
@@ -2042,13 +2042,13 @@ msgid ""
 "<quote>suspend-to-disk</quote> functionality offered by newer Linux kernels "
 "as it will be impossible (during a subsequent boot) to recover the suspended "
 "data written to the swap partition."
-msgstr ""
+msgstr "随机密钥用于交换分区，这样您就不必为记住 passphrase 或关机前清除交换分区上的敏感信息而费神。然而，这也意味着您将 <emphasis>无法</emphasis> 使用新 Linux 内核提供的 <quote>suspend-to-disk</quote> 功能，因为它将无法(在下次启动时)恢复写入到交换分区的数据。"
 
 #. Tag: term
 #: using-d-i.xml:1455 using-d-i.xml:1532
 #, no-c-format
 msgid "Erase data: <userinput>yes</userinput>"
-msgstr ""
+msgstr "Erase data: <userinput>yes</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1457
@@ -2062,7 +2062,7 @@ msgid ""
 "installations<footnote><para> It is believed that the guys from three-letter "
 "agencies can restore the data even after several rewrites of the "
 "magnetooptical media, though. </para></footnote>."
-msgstr ""
+msgstr "决定在建立加密前是否使用随机数据覆盖分区内容。推荐这种方式，否则攻击者将会发现分区的哪些部分使用而哪些没有使用。另外，这将使安装前的内容很难恢复<footnote><para>据信那些三个缩写字母部门的家伙可以恢复经过多次覆盖的磁记录设备上的数据。</para></footnote>。"
 
 #. Tag: para
 #: using-d-i.xml:1477
@@ -2071,13 +2071,13 @@ msgid ""
 "If you select <menuchoice> <guimenu>Encryption method:</guimenu> "
 "<guimenuitem>Loopback (loop-AES)</guimenuitem> </menuchoice>, the menu "
 "changes to provide the following options:"
-msgstr ""
+msgstr "如果您选择了 <menuchoice> <guimenu>Encryption method:</guimenu> <guimenuitem>Loopback (loop-AES)</guimenuitem> </menuchoice>，菜单选项将变成下面内容："
 
 #. Tag: term
 #: using-d-i.xml:1486
 #, no-c-format
 msgid "Encryption: <userinput>AES256</userinput>"
-msgstr ""
+msgstr "Encryption: <userinput>AES256</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1488
@@ -2086,25 +2086,25 @@ msgid ""
 "For loop-AES, unlike dm-crypt, the options for cipher and key size are "
 "combined, so you can select both at the same time. Please see the above "
 "sections on ciphers and key sizes for further information."
-msgstr ""
+msgstr "不像 dm-crypt，loop-AES 选项的 cipher 和密钥长度是组合在一起的，这样您可以同时选取。请查阅前面关于 cipher 和密钥长度的章节了解更多信息。"
 
 #. Tag: term
 #: using-d-i.xml:1498
 #, no-c-format
 msgid "Encryption key: <userinput>Keyfile (GnuPG)</userinput>"
-msgstr ""
+msgstr "Encryption key: <userinput>Keyfile (GnuPG)</userinput>"
 
 #. Tag: para
 #: using-d-i.xml:1500
 #, no-c-format
 msgid "Here you can select the type of the encryption key for this partition."
-msgstr ""
+msgstr "这里您可以为分区选择加密密钥的类型。"
 
 #. Tag: term
 #: using-d-i.xml:1506
 #, no-c-format
 msgid "Keyfile (GnuPG)"
-msgstr ""
+msgstr "Keyfile (GnuPG)"
 
 #. Tag: para
 #: using-d-i.xml:1507
@@ -2114,19 +2114,19 @@ msgid ""
 "installation. Moreover this key will be encrypted with <application>GnuPG</"
 "application>, so to use it, you will need to enter the proper passphrase "
 "(you will be asked to provide one later in the process)."
-msgstr ""
+msgstr "加密密钥会在安装过程中使用随机数据生成。并且该密钥使用 <application>GnuPG</application> 加密。要使用它，您需要输入正确的 passphrase (在以后会要求提供)。"
 
 #. Tag: para
 #: using-d-i.xml:1520
 #, no-c-format
 msgid "Please see the the section on random keys above."
-msgstr ""
+msgstr "请查阅前面有关随机密钥的章节。"
 
 #. Tag: para
 #: using-d-i.xml:1534
 #, no-c-format
 msgid "Please see the the section on erasing data above."
-msgstr ""
+msgstr "请查阅前面有关删除数据的章节。"
 
 #. Tag: para
 #: using-d-i.xml:1543
@@ -2136,7 +2136,7 @@ msgid ""
 "still has some limitations when compared to the textual one. For "
 "cryptography it means you can set up only volumes using "
 "<emphasis>passphrases</emphasis> as the encryption keys."
-msgstr ""
+msgstr "请注意，<emphasis>图形界面</emphasis> 安装程序与文本界面的相比将有一些限制。对于加密，您将只能使用 <emphasis>passphrases</emphasis> 作为加密密钥建立卷。"
 
 #. Tag: para
 #: using-d-i.xml:1550
@@ -2148,7 +2148,7 @@ msgid ""
 "you select it, you will be asked to confirm the deletion of data on "
 "partitions marked to be erased and possibly other actions such as writing a "
 "new partition table. For large partitions this might take some time."
-msgstr ""
+msgstr "当您选择好加密分区参数之后，返回分区主菜单。现在会有一个新的菜单项 <guimenu>Configure encrypted volumes</guimenu>。选择它，您会被要求确认删除所标记分区上的数据，以及写新分区表等动作。对于大的分区，这会花一些时间。"
 
 #. Tag: para
 #: using-d-i.xml:1561
@@ -2159,7 +2159,7 @@ msgid ""
 "mixture of letters, numbers and other characters and should not contain "
 "common dictionary words or information easily associable with you (such as "
 "birthdates, hobbies, pet names, names of family members or relatives, etc.)."
-msgstr ""
+msgstr "接下来，您会被要求输入 passphrase 用于配置的分区。好的口令应该长于 8 个字符，并混合字母、数字和其他字符，不该是普通词典中的单词或者容易与您相关的信息(比如生日、爱好、宠物的名字、以及家里其他成员的名字，等等)。"
 
 #. Tag: para
 #: using-d-i.xml:1570
@@ -2174,7 +2174,7 @@ msgid ""
 "causes. Maybe you switched to another keyboard layout during the "
 "installation, or the selected keyboard layout might not have been set up yet "
 "when entering the passphrase for the root file system."
-msgstr ""
+msgstr "在输入任何 passphrase 之前，您应该确定键盘配置正确可以输入所需要的字符。如果您不能肯定，可以切换到第二虚拟控制台，在提示符下敲一些文字。这能保证您以后不必惊慌失措，例如，想要使用 qwerty 键盘输入的 passphrase，而在安装时却使用的是 azerty 布局。造成的原因有多种。也许是您在安装过程中改变了键盘布局，或者是所选择的键盘布局未能正确建立，而且是在为根文件系统输入 passphrase 的时候。"
 
 #. Tag: para
 #: using-d-i.xml:1583
@@ -2188,7 +2188,7 @@ msgid ""
 "shell on the second virtual console and generating some network and disk "
 "traffic (downloading some files, feeding big files into <filename>/dev/null</"
 "filename>, etc.). This will be repeated for each partition to be encrypted."
-msgstr ""
+msgstr "如果您选择 passphrase 之外的方法创建加密密钥，它们现在就会生成。因为内核在安装的早期阶段还没有足够的熵，过程会长一些。您可以产生一些熵以加快速度：例如，随机的按下一些键，或者切换到第二虚拟控制台的 shell 产生一些网络或磁盘的动作(下载一些文件，将一些大文件送到 <filename>/dev/null</filename> 等等)。这个过程在每个要加密的分区重复进行。"
 
 #. Tag: para
 #: using-d-i.xml:1599
@@ -2209,6 +2209,13 @@ msgid ""
 "volumes and optionally change the file system types if the defaults do not "
 "suit you."
 msgstr ""
+"返回主分区菜单后，您将看到所有的加密卷作为额外的分区，它们可以像其他的普通分区一样配置。下面显示两种不同的卷。第一个是使用 dm-crypt 加密的，第二个采用 loop-AES。<informalexample><screen>\n"
+"Encrypted volume (<replaceable>crypt0</replaceable>) - 115.1 GB Linux device-mapper\n"
+"     #1 115.1 GB  F ext3\n"
+"\n"
+"Loopback (<replaceable>loop0</replaceable>) - 515.2 MB AES256 keyfile\n"
+"     #1 515.2 MB  F ext3\n"
+"</screen></informalexample> 现在可以给卷设置挂载点，如果默认的文件系统类型不合适，可以进行修改。"
 
 #. Tag: para
 #: using-d-i.xml:1612
@@ -2221,7 +2228,7 @@ msgid ""
 "differences between ordinary boot process and boot process with encryption "
 "involved will be covered later in <xref linkend=\"mount-encrypted-volumes\"/"
 ">."
-msgstr ""
+msgstr "这里有一点要注意，即 parentheses 里的标识(本例中 <replaceable>crypt0</replaceable> 和 <replaceable>loop0</replaceable>) 以及您为每个加密卷所设置的加载点。当启动新系统的时候您会需要此信息。有关普通引导过程和使用加密后引导过程的差异，将在后面的 <xref linkend=\"mount-encrypted-volumes\"/> 说明。"
 
 #. Tag: para
 #: using-d-i.xml:1622
@@ -2229,7 +2236,7 @@ msgstr ""
 msgid ""
 "Once you are satisfied with the partitioning scheme, continue with the "
 "installation."
-msgstr ""
+msgstr "当您满意分区之后，可以继续安装过程。"
 
 #. Tag: title
 #: using-d-i.xml:1633