Milan Broz
872becdbbd
Handle also missing support for tcrypt test in kernel properly.
2014-07-27 19:39:53 +02:00
Milan Broz
c9694437d2
Fix tcrypt test for unsupported combinations.
2014-07-27 18:40:21 +02:00
Milan Broz
64ad90f73c
Ignore wrong parameters fail in LUKS images tests if whirlpool hash is used.
2014-07-27 17:02:51 +02:00
Milan Broz
166d23a813
Fix tests for GNU grep syntax.
2014-07-27 16:31:46 +02:00
Milan Broz
59fdf2a6bb
Properly allow activation of discard even if dm_crypt module is not yet loaded.
...
The dm_flags() call cannot be used if dmcrypt module is not present.
Better try to activate volume with dicard flags and if it is not possible,
try to activate device without the discard flag.
2014-07-24 22:11:58 +02:00
Milan Broz
3640eaa726
Re-check flags after DM device creations.
2014-07-24 11:52:58 +02:00
Milan Broz
2250d5f71f
Move safe table params wipe into function which allocates it.
2014-07-24 11:37:24 +02:00
Milan Broz
d9678325a2
Update LUKS1 test images.
2014-07-12 21:16:19 +02:00
Milan Broz
dc8c47d936
Fallback to old temporary device mapping method if hash is not supported.
2014-07-12 20:30:24 +02:00
Milan Broz
5b7100ff87
Update po files.
2014-07-10 19:06:11 +02:00
Milan Broz
4afa592160
Set devel version.
2014-06-29 14:36:10 +02:00
Milan Broz
54c7a2b0aa
Fix signed/unsigned compiler warnings.
2014-06-29 11:55:11 +02:00
Milan Broz
9cabc9bf05
Bump library version.
...
There are new use case but it is still backwards compatible.
2014-06-29 10:53:59 +02:00
Milan Broz
dfd46df8a5
Properly fail for unsupported IVs.
2014-06-29 10:38:50 +02:00
Milan Broz
25cd4f3a1d
Add debug info for crypto wrapper in LUKS keyslot encryption.
2014-06-28 21:50:05 +02:00
Milan Broz
d5b594dd12
Remove uneeded check in luksFormat to allow operation as normal user.
2014-06-28 15:23:04 +02:00
Milan Broz
803686ea4b
Prepare version 1.6.5.
2014-06-28 13:57:32 +02:00
Milan Broz
3add769b51
Add deprecation warning about internal terminal password query.
2014-06-28 13:49:26 +02:00
Milan Broz
d5a72cd65a
Fix typo in kernel backend.
2014-06-26 15:38:51 +02:00
Milan Broz
d63163e46c
Add notes about Whirlpool hash fail to tests.
2014-06-26 14:47:02 +02:00
Milan Broz
62d690492c
Fix unit in reencrypt man page.
2014-06-26 14:44:15 +02:00
Ondrej Kozina
54d81a6258
fix memory leak on error path
2014-06-25 18:03:42 +02:00
Milan Broz
56679a6e4a
Update es.po.
2014-06-25 17:57:12 +02:00
Milan Broz
e0788d9d61
Update es.po.
2014-06-24 17:56:05 +02:00
wagner
833e066853
sync with wiki, updated to "toned down" item 2.2
2014-06-24 03:06:36 +02:00
Milan Broz
02f860140d
Fix trailing space.
2014-06-23 23:30:11 +02:00
Milan Broz
027cebade3
Update po files.
2014-06-23 21:40:54 +02:00
Milan Broz
bb8dbfdf5b
Update author name.
2014-06-23 21:40:12 +02:00
Milan Broz
8e380183f8
Print minimal device size if LUKS header space is too small.
2014-06-22 17:51:31 +02:00
Ondrej Kozina
4f89028c67
modify FIPS checks
...
- we need a way to notify an user about running misconfigured system which
will turn to be unusable in real FIPS mode. For more details look at:
http://bugzilla.redhat.com/show_bug.cgi?id=1009707#c25
- also fixes invisble verbose log about running in FIPS mode due to its misplacement
2014-06-22 17:24:10 +02:00
Milan Broz
6b4c33d3a5
Enable to specify Python version in configure.
2014-06-18 23:06:04 +02:00
Robert Kuska
7a2e6990ca
Port pycryptsetup-test.py to Python3.
2014-06-18 09:19:03 +02:00
Robert Kuska
98ba2f2333
Port pycryptsetup.c to Python3.
2014-06-18 09:09:40 +02:00
Ondrej Kozina
4e4d933d7b
fix reencryption tests failure with older grep
2014-06-18 08:56:23 +02:00
Milan Broz
91c739958c
Allow ECB mode in cryptsetup benchmark.
2014-06-17 23:09:13 +02:00
Milan Broz
1a6e1ae918
Always remove temporary active device name on load and format.
2014-06-17 22:28:51 +02:00
Milan Broz
aedf39a9ca
Remove unused static declaration.
2014-06-17 22:01:59 +02:00
Milan Broz
a274cd3a74
Update TODO.
2014-06-17 21:55:42 +02:00
Milan Broz
6be21469fb
Use internel PBKDF2 in Nettle library for Nettle crypto backend.
...
This also requires Nettle >= 2.6.
2014-06-17 21:54:14 +02:00
Milan Broz
e0d3ff8aeb
Fix non-header context init for device in use.
2014-06-14 23:04:43 +02:00
Milan Broz
0614ab6b07
Allow simple status of crypt device without providing metadata header.
...
If device is activated, we can provide some information from
active kernel parameters instead of header.
2014-06-14 17:42:57 +02:00
Milan Broz
49e55c0f42
Fix keyfile offset parameter for loopaes.
...
Fixes Issue#216.
2014-06-14 14:35:27 +02:00
Milan Broz
be4edbb460
Update es.po.
2014-06-13 16:51:59 +02:00
Milan Broz
4d30237f7a
Handle error better in storage wrapper.
2014-06-01 22:02:32 +02:00
Milan Broz
a3c0f6784b
Process LUKS keyslots in userspace through kernel crypto wrapper.
...
This allow LUKS handling without requiring root privilege.
The dmcrypt device-mapper is used only for device activation now.
2014-06-01 21:34:21 +02:00
Milan Broz
6d4c2db3b1
Fix mode test for nonexisting table.
2014-06-01 20:57:45 +02:00
Milan Broz
1436f2a0a0
Add wrapper for cipher block size query.
...
There is no better way for now without loading crypto modules.
2014-06-01 20:56:17 +02:00
wagner
e6a46bf827
sync with Wiki version
2014-05-02 08:30:22 +02:00
Milan Broz
9563aa33c8
Fix PBKDF2 for crypto backens which does not support long HMAC keys.
...
(Or it rehases key in every iteration.)
- Kernel backens seems not to support >20480 HMAC key
- NSS is slow (without proper key reset)
Add some test vectors (commented out by default).
2014-04-13 19:34:50 +02:00
Milan Broz
6225c901fe
Use proper images with mentioned hashes in luks test.
2014-04-13 19:34:06 +02:00
