Milan Broz
eac953c6e4
Fix skcipher failure handling.
2012-11-30 13:37:14 +01:00
Milan Broz
d7fc953fa2
Handle kernel crypto api init failure better.
2012-11-29 18:01:02 +01:00
Milan Broz
f35f34b909
Fix po files.
2012-11-27 19:18:05 +01:00
Milan Broz
34a2176689
TCRYPT: add simple test and image archive.
2012-11-27 19:08:10 +01:00
Milan Broz
21756a1969
TCRYPT: fix activation and hidden device offsets.
2012-11-27 17:13:53 +01:00
Milan Broz
17a8e85cb8
TCRYPT: add backup header option.
2012-11-26 13:15:08 +01:00
Milan Broz
1b191e14d0
Remove test dir during cleanup.
2012-11-25 23:43:14 +01:00
Milan Broz
98db3bc0bf
Fix blockwise read/write for end writes near end of device.
...
Ignore setpriority failure (will be remoced later anyway).
2012-11-25 22:57:32 +01:00
Milan Broz
46cf1c6ce0
TCRYPT: simplify code, support blowfish chains for header
2012-11-25 22:52:47 +01:00
Milan Broz
fbf4c5daf3
Remove trailing spaces from manpage, add usage and help option.
2012-11-23 17:31:41 +01:00
Milan Broz
c81260b3c3
TCRYPT: add dump command
2012-11-23 17:10:57 +01:00
Milan Broz
8d69e19ac1
TCRYPT: support crypt_volume_key_get
2012-11-23 15:20:46 +01:00
Milan Broz
6ab93841e9
TCRYPT: show proper device in status for chained mode
2012-11-23 13:46:23 +01:00
Milan Broz
52cbbdaf38
TCRYPT: move all header handling into library.
...
Add warning about unsupported modes.
2012-11-23 13:01:43 +01:00
Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Daniel Kahn Gillmor
c26bb0f38a
make default LUKS PBKDF2 iteration time configurable
2012-11-20 21:23:05 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
7199662fbb
Add kernel skcipher backend.
2012-11-19 21:21:40 +01:00
Milan Broz
a14a2137e7
Add CRC32 implementation.
2012-11-19 21:18:18 +01:00
Milan Broz
16ac703008
Move PBKDF2 into crypto backend wrapper.
...
Implement new KDF bechmark check.
Use internal openssl kdf (and prepare gcrypt one).
2012-11-19 21:17:55 +01:00
Milan Broz
24e2ee5812
Add devel version.
2012-10-16 22:35:14 +02:00
Milan Broz
b0d8815dab
Relnote addition.
v1_5_1
2012-10-16 22:00:19 +02:00
Milan Broz
831a0af508
Update some po files.
2012-10-14 21:11:20 +02:00
Milan Broz
488202feee
Version 1.5.1.
2012-10-12 14:18:56 +02:00
Milan Broz
193402ad41
Check read & seek return codes, use uint64 offset.
...
Signed-off-by: Arno Wagner <wagner.arno@gmail.com >
Signed-off-by: Milan Broz <gmazyland@gmail.com >
2012-10-12 13:18:22 +02:00
Arno Wagner
1b86b7cb4b
added keyslot checker Redesigned to only use public definitions
...
Signed-off-by: Arno Wagner <wagner.arno@gmail.com >
2012-10-11 18:07:35 +02:00
Milan Broz
e5dc991ffd
Increase library and package version.
2012-09-19 15:57:56 +02:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Arno Wagner
bec7fcb14a
synced with wiki
2012-09-18 23:30:38 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Arno Wagner
64558a57e3
fixed typeo 94 -> 95 printable ASCII chars
2012-09-09 02:51:58 +02:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
Milan Broz
c2e12440d2
Add some offset/keyslot offset checks.
2012-08-30 14:08:34 +02:00
Milan Broz
1685aa5978
Proper handle error in device block get.
2012-08-28 13:30:17 +02:00
Milan Broz
6874f564c1
Remove unused includes.
2012-08-28 13:16:03 +02:00
Milan Broz
4882f70040
Replace round_up macro with function.
2012-08-28 13:11:02 +02:00
Milan Broz
1aca317c77
Move LUKS AF data sector alignment to AF helper function.
2012-08-27 16:52:19 +02:00
Milan Broz
af2730fe2a
Always zero memory in crypt_safe_alloc.
2012-08-27 16:28:00 +02:00
Milan Broz
a6d64d1d44
Use AF_split_size() to calculate split data size.
2012-08-27 15:26:22 +02:00
Milan Broz
d15dd89bb7
Get rid of confusing LUKS_PHDR_SIZE macro.
2012-08-27 14:45:21 +02:00
Dave Reisner
961682aa6b
lib/utils_crypt: optimize seek to keyfile-offset
...
Avoid using unbuffered reads when "seeking" to a keyfile offset. This is
abysmally slow when the key is hidden at the end of a large device.
Instead, try to actually call lseek, falling back on reading in chunks
of BUFSIZ bytes until the desired offset is reached.
Command line:
cryptsetup luksOpen /dev/vdc1 home \
--keyfile /dev/vdd --keyfile-size 4096 --keyfile-offset 123456789
Before:
real 0m25.589s
user 0m7.030s
sys 0m18.479s
After:
real 0m4.464s
user 0m4.253s
sys 0m0.157s
2012-08-27 13:10:00 +02:00
Milan Broz
2f37cfe569
Do not scan rotational flag for non-block devices / file images.
2012-08-27 12:42:15 +02:00
Arno Wagner
5b5c6dccc0
added prominent note to use LUKS (not plain dm-crypt) unless
...
understanding the crypto well.
2012-08-24 19:00:47 +02:00
Arno Wagner
d58a5c8cae
synced with wiki
2012-08-24 17:02:59 +02:00
Milan Broz
1d5788f779
Set context for DM log for all DM backend entries.
...
Try to handle error if run as non-root user better.
2012-08-14 19:17:13 +02:00
Milan Broz
97224b072a
Add context to DM helpers.
...
(To be used later.)
2012-08-14 16:25:21 +02:00