Milan Broz
1e3ba81613
Fix time of check/use Coverity report (and ignore another) in loop/wipe utils.
2012-12-17 15:35:33 +01:00
Milan Broz
a83cc1dbf4
Fix time of check/use Coverity report (and ignore another) in device utils.
2012-12-17 15:19:57 +01:00
Milan Broz
94d732b411
Do not use stat for backup commands.
2012-12-17 14:05:45 +01:00
Milan Broz
d742e01a32
Remove signal handling from LUKS keyencryption and simplify code.
2012-12-11 15:39:47 +01:00
Milan Broz
50d5cfa8bc
Get page size should never fail (in the works case it fails later with wrong alignment).
2012-12-10 17:47:06 +01:00
Milan Broz
80d21c039e
Fix some problems found by Coverity scan.
2012-12-10 17:28:52 +01:00
Milan Broz
549ab64358
TCRYPT: properly wipe all buffers; use prefix for all functions.
2012-12-10 16:36:22 +01:00
Milan Broz
e8d09733d4
Require params for crypt_load & TCRYPT type.
2012-12-08 01:31:38 +01:00
Milan Broz
5dc654433c
Disallow header restore if context is nonLUKS device.
2012-12-07 15:55:56 +01:00
Milan Broz
05af3a3383
Move change key into library (add crypt_keyslot_change_by_passphrase).
...
This change is useful mainly in FIPS mode, where we cannot
extract volume key directly from libcryptsetup.
2012-12-07 15:33:47 +01:00
Milan Broz
bd494d23c5
Add PBKDF2 benchmark.
2012-12-05 20:35:42 +01:00
Milan Broz
95daec798b
Use union instead of replicated attributes.
2012-12-03 16:17:43 +01:00
Milan Broz
a4585423fd
Remove some gcc extra warnings (signed/unsigned problems etc).
2012-12-02 23:13:59 +01:00
Milan Broz
5aef0809d4
Add TCRYPT documentation,
2012-12-02 21:32:49 +01:00
Milan Broz
72c111bac4
Fix (stupid) crc32 keyfile endianess bug.
2012-12-01 14:32:01 +01:00
Milan Broz
ffb6ecc488
Add TCRYPT api test, fix some minor problems found.
2012-11-30 18:41:10 +01:00
Milan Broz
6123541d80
Add missing pbkdf check file.
2012-11-30 17:05:03 +01:00
Milan Broz
e510dd9c60
Add sys/types.h for loop wrapper (required on new systems).
2012-11-30 15:08:39 +01:00
Milan Broz
0461d9e822
Better tcrypt test options.
2012-11-30 15:03:01 +01:00
Milan Broz
4f7262aa96
And fix previous comment once more... :)
2012-11-30 13:52:03 +01:00
Milan Broz
eac953c6e4
Fix skcipher failure handling.
2012-11-30 13:37:14 +01:00
Milan Broz
d7fc953fa2
Handle kernel crypto api init failure better.
2012-11-29 18:01:02 +01:00
Milan Broz
21756a1969
TCRYPT: fix activation and hidden device offsets.
2012-11-27 17:13:53 +01:00
Milan Broz
17a8e85cb8
TCRYPT: add backup header option.
2012-11-26 13:15:08 +01:00
Milan Broz
98db3bc0bf
Fix blockwise read/write for end writes near end of device.
...
Ignore setpriority failure (will be remoced later anyway).
2012-11-25 22:57:32 +01:00
Milan Broz
46cf1c6ce0
TCRYPT: simplify code, support blowfish chains for header
2012-11-25 22:52:47 +01:00
Milan Broz
c81260b3c3
TCRYPT: add dump command
2012-11-23 17:10:57 +01:00
Milan Broz
8d69e19ac1
TCRYPT: support crypt_volume_key_get
2012-11-23 15:20:46 +01:00
Milan Broz
6ab93841e9
TCRYPT: show proper device in status for chained mode
2012-11-23 13:46:23 +01:00
Milan Broz
52cbbdaf38
TCRYPT: move all header handling into library.
...
Add warning about unsupported modes.
2012-11-23 13:01:43 +01:00
Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
7199662fbb
Add kernel skcipher backend.
2012-11-19 21:21:40 +01:00
Milan Broz
a14a2137e7
Add CRC32 implementation.
2012-11-19 21:18:18 +01:00
Milan Broz
16ac703008
Move PBKDF2 into crypto backend wrapper.
...
Implement new KDF bechmark check.
Use internal openssl kdf (and prepare gcrypt one).
2012-11-19 21:17:55 +01:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
Milan Broz
1685aa5978
Proper handle error in device block get.
2012-08-28 13:30:17 +02:00
Milan Broz
6874f564c1
Remove unused includes.
2012-08-28 13:16:03 +02:00
Milan Broz
4882f70040
Replace round_up macro with function.
2012-08-28 13:11:02 +02:00
Milan Broz
1aca317c77
Move LUKS AF data sector alignment to AF helper function.
2012-08-27 16:52:19 +02:00
Milan Broz
af2730fe2a
Always zero memory in crypt_safe_alloc.
2012-08-27 16:28:00 +02:00
Milan Broz
a6d64d1d44
Use AF_split_size() to calculate split data size.
2012-08-27 15:26:22 +02:00
Milan Broz
d15dd89bb7
Get rid of confusing LUKS_PHDR_SIZE macro.
2012-08-27 14:45:21 +02:00
Dave Reisner
961682aa6b
lib/utils_crypt: optimize seek to keyfile-offset
...
Avoid using unbuffered reads when "seeking" to a keyfile offset. This is
abysmally slow when the key is hidden at the end of a large device.
Instead, try to actually call lseek, falling back on reading in chunks
of BUFSIZ bytes until the desired offset is reached.
Command line:
cryptsetup luksOpen /dev/vdc1 home \
--keyfile /dev/vdd --keyfile-size 4096 --keyfile-offset 123456789
Before:
real 0m25.589s
user 0m7.030s
sys 0m18.479s
After:
real 0m4.464s
user 0m4.253s
sys 0m0.157s
2012-08-27 13:10:00 +02:00
