Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Milan Broz
1d5788f779
Set context for DM log for all DM backend entries.
...
Try to handle error if run as non-root user better.
2012-08-14 19:17:13 +02:00
Milan Broz
97224b072a
Add context to DM helpers.
...
(To be used later.)
2012-08-14 16:25:21 +02:00
Milan Broz
07815c24cd
Print better error message if device is read-only etc.
2012-08-13 16:54:41 +02:00
Milan Broz
65f975655c
New device access backend.
...
Allocate loop device late (only when real block device needed).
Rework underlying device/file access functions.
Move all device (and ioctl) access to utils_device.c.
Allows using file where appropriate without allocation loop device.
2012-08-12 22:00:17 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
5c7954a0c7
Require only up to last keyslot area for header device (ignore data offset).
...
Fix header backup and restore to work on files with large data offset.
2012-06-11 12:20:19 +02:00
Milan Broz
62f334cfa5
Check various number limits.
2012-06-11 00:09:15 +02:00
Milan Broz
4b8f91d0d9
Remove some compilation warnings.
2012-06-10 18:56:04 +02:00
Milan Broz
a14aab5df7
Loop is automatically allocated in crypt_set_data_device().
2012-06-10 17:59:14 +02:00
Milan Broz
1cbc53e8ee
Get rid of backing_file in struct.
2012-06-10 17:19:08 +02:00
Milan Broz
db51a343de
Move defines from header.
2012-06-09 23:26:45 +02:00
Milan Broz
e2375c8368
Add verity uuid specification.
2012-06-09 23:20:43 +02:00
Milan Broz
697c6c9324
Prepare new superblock format.
2012-06-09 22:02:06 +02:00
Milan Broz
6d07be898d
Enhance status of active device.
2012-06-09 18:28:00 +02:00
Milan Broz
ade21e6c60
Support empty salt for verity, support no superblock.
2012-06-09 13:12:04 +02:00
Milan Broz
fcf5b414d6
Remove redundant flags.
2012-06-09 11:54:10 +02:00
Milan Broz
ce2218ed65
Support init_by_name for verity.
2012-06-08 16:38:26 +02:00
Milan Broz
c4b16923bb
Unify dm backend for crypt/verity.
2012-06-08 10:12:12 +02:00
Milan Broz
b016e65daa
Use union in dm (crypt/verity) query structure.
2012-06-08 08:58:35 +02:00
Milan Broz
4b0b82adc5
Rewrite veritysetup to use libcryptsetup.
2012-06-07 00:18:49 +02:00
Milan Broz
20eea64334
Add version string to crypto backend.
...
Move fips check to libcryptsetup.
Clean up internal.h use.
2012-05-27 00:48:10 +02:00
Milan Broz
ed1ab3e498
Fix clang compile warnings (error path).
2012-05-22 14:54:52 +02:00
Milan Broz
45e0942755
Add --enable-fips for linking with fipscheck library.
...
Initialize binary and library selfcheck if running in FIPS mode.
(Actually available only on Fedora/Red Hat distros.)
2012-05-21 14:09:57 +02:00
Milan Broz
adaf6d3eb4
Try to remove device even if it is busy (libdevmapper now handle retry).
2012-05-02 15:44:45 +02:00
Milan Broz
f720affe8c
Relax --shared test, allow mapping even for overlapping segments.
...
Support shared flag for LUKS devices (dangerous).
2012-05-02 00:58:54 +02:00
Milan Broz
ee8425b836
Version 1.4.2.
...
Add header and copyright for header files.
2012-04-02 22:03:05 +02:00
Milan Broz
bd047d03ef
Add repair command and API for repairing known LUKS header problems.
2012-04-02 21:18:22 +02:00
Milan Broz
9511c91a79
Add --keyfile-offset and --new-keyfile-offset to cryptsetup.
...
Add resume_by_keyfile_offset, add_kesylot_by_keyfile_offset and
activate_by_keyfile_offset to API.
Thanks to Matthew Monaco <matthew.monaco@0x01b.net >
2012-03-29 18:35:07 +02:00
Milan Broz
78cac9a97c
Fix retry if entered passphrases (with verify option) do not match.
2012-03-16 16:31:15 +01:00
Milan Broz
203f2e082d
Fix error message for luksClose and detached LUKS header.
...
Allow --header for status command to get full info with detached header.
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@689 36d66b0a-2a48-0410-832c-cd162a569da5
2011-11-13 22:12:51 +00:00
Milan Broz
1b982af46f
Fix typo in iteration time api call.
...
(To not break API keep old set_iterarion_time alias...)
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@675 36d66b0a-2a48-0410-832c-cd162a569da5
2011-11-06 22:44:52 +00:00
Milan Broz
7835b365a7
Fix FSF address in license text according to
...
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@671 36d66b0a-2a48-0410-832c-cd162a569da5
2011-11-02 22:35:21 +00:00
Milan Broz
6e119ab6cc
Fix crypt_get_volume_key_size() for plain device.
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@665 36d66b0a-2a48-0410-832c-cd162a569da5
2011-10-27 20:40:16 +00:00
Milan Broz
dac000e1df
Move setting of error text to crypt_log to catch all errors.
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@626 36d66b0a-2a48-0410-832c-cd162a569da5
2011-10-09 13:46:24 +00:00
Milan Broz
8c54d938ac
Add crypt_last_error() API call (using crypt context).
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@623 36d66b0a-2a48-0410-832c-cd162a569da5
2011-10-09 13:45:53 +00:00
Milan Broz
d7960b9307
Simplify global error call.
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@622 36d66b0a-2a48-0410-832c-cd162a569da5
2011-10-09 13:45:38 +00:00
Milan Broz
d2fbc963ca
If device is not rotational, do not use Gutmann wipe method.
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@615 36d66b0a-2a48-0410-832c-cd162a569da5
2011-10-08 16:17:08 +00:00
Milan Broz
d20e2ff02d
Do not allow format of already formatted context.
...
(Thanks to okozina@redhat.com )
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@608 36d66b0a-2a48-0410-832c-cd162a569da5
2011-08-26 19:46:29 +00:00
Milan Broz
b8a7125225
crypt_check_data_device_size() needs to compare values in bytes
...
(Thanks to okozina@redhat.com )
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@602 36d66b0a-2a48-0410-832c-cd162a569da5
2011-08-22 21:53:59 +00:00
Milan Broz
6cede067a2
Fix two mem leaks in crypt_init_by_name_and_header().
...
(Thanks to okozina@redhat.com )
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@601 36d66b0a-2a48-0410-832c-cd162a569da5
2011-08-22 21:53:48 +00:00
Milan Broz
906c7897e1
LUKS header and Type needs to be set in context before crypt_check_data_device_size() is called.
...
(Thanks to okozina@redhat.com )
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@600 36d66b0a-2a48-0410-832c-cd162a569da5
2011-08-22 21:53:38 +00:00
Milan Broz
4a295781d1
Silent gcc warnings with -Wconst-qual switch.
...
git-svn-id: https://cryptsetup.googlecode.com/svn/trunk@598 36d66b0a-2a48-0410-832c-cd162a569da5
2011-08-15 16:32:52 +00:00