eessppeelllloo/cryptsetup
1
0
Fork 0
mirror of https://gitlab.com/cryptsetup/cryptsetup.git synced 2025-12-12 11:20:10 +01:00
Code Issues Packages Projects Releases Wiki Activity
2,919 Commits 16 Branches 78 Tags
702f9b1cf42a19a53c2cef14efa547ea77470ea2
Commit Graph

172 Commits

Author SHA1 Message Date
Bernhard Kirchen
181f621a90 urlencode brackets in URL to VeraCrypt PIM docs 2018-04-24 21:54:26 +02:00
Ondrej Kozina
38d83c27b4 Add --unbound keyslot option to cryptsetup. 
An unbound keyslot is slot not assigned to a segment;
such a keyslot cannot be used to activate LUKS device, but
can be used for an arbitrary key store.

This patch adds --unboud option for luksAddKey cryptsetup command.
 2018-04-19 18:25:35 +02:00
Ondrej Kozina
0c6129c54e Allow volume key store in a file with cryptsetup. 
The --dump-master-key together with --master-key-file allows cryptsetup
to store the volume key to a file instead of standard output.
 2018-04-19 18:08:37 +02:00
Matthew Garrett
610c7858d6 Add explicit key conversion command 
Add support for converting a keyslot from one pbkdf to another without
opening the device.
 2018-03-23 09:53:06 +01:00
Milan Broz
1fe014dbae Update copyright year. 2018-01-20 17:55:21 +01:00
Yuri Chornoivan
982da4d20c Fix minor typos 2018-01-04 09:13:58 +01:00
Milan Broz
fa1f8c0d87 Limit KDF memory by available physical memory. 
On some systems the requested amount of memory causes OOM killer
to kill the process (instead of returning ENOMEM).

For now, we never try to use more than half of available
physical memory.
 2017-12-07 10:43:52 +01:00
Andrea Gelmini
a97de38b6b Fix typos. 2017-11-08 10:22:49 +01:00
Ondrej Kozina
1d9d248456 man: fix two typos in integrity parameters 
--integrity-no-wipe
--integrity-no-journal options
 2017-10-16 16:43:19 +02:00
Milan Broz
b42d183b08 Create LUKS header file in luksFormat if it does not exist. 2017-10-10 13:52:50 +02:00
Milan Broz
7e53c87f5c Add parameter for progress update without in separate lines. 
Useful for reencryption or integrity format.
 2017-10-04 15:22:32 +02:00
Milan Broz
c1c541642e Add a note about locking to man page. 2017-09-27 08:12:09 +02:00
Milan Broz
19a1852e4b Support sector size option even for plain devices. 2017-09-24 19:50:28 +02:00
Milan Broz
9f2727bb77 Add libLUKS2. 2017-09-24 19:50:12 +02:00
Ingo Franzki
96f1cdf687 Typo in man page 
I guess this should be 'existing' not 'exiting'.

Signed-off-by: Ingo Franzki <ifranzki@linux.vnet.ibm.com>
 2017-07-20 09:42:41 +02:00
Milan Broz
32d5e59ab6 Implement deferred removal of device. 
This can be used in some automated systems and allows device
to be removed after the last user mapping closes it.
 2017-06-23 14:41:54 +02:00
Milan Broz
98368c4770 Update copyright years. 2017-03-12 13:17:15 +01:00
Daniel Reichelt
9a798a766e support PIM parameter for VeraCrypt compatible devices 
This patch adds the --veracrypt-pim=INT and --veracrypt-query-pim command-
line parameters to support specification of or being queried for a custom
Personal Iteration Multiplier respectively. This affects the number of
iterations for key derivation from the entered password. The manpage is
also updated accordingly.

Fixes Issue #307.
 2017-03-02 09:11:23 +01:00
Milan Broz
9da67b701d Clarify use of --size parameter. 2017-02-15 20:26:02 +01:00
Milan Broz
e129b13402 Fix TrueCrypt URL in man page. 2017-01-04 08:04:10 +01:00
Jonas Meurer
b2a6e338b5 Fix several minor spelling errors found by Lintian 
* lib/setup.c: miliseconds -> milliseconds
* lib/utils_wipe.c: Unsuported -> Unsupported
* man/crypsetup.8: implicitely -> implicitly
* man/veritysetup.8: verion -> version
* python/pycryptsetup.c: miliseconds -> milliseconds
 2016-10-21 21:54:08 +02:00
Loui Chang
5e8d92146b Man page typo 
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
 2015-12-13 00:17:01 -05:00
Milan Broz
34ddae154e Fix luksKillSlot to not suppress provided password in batch mode. 
Batch mode should enable no-query keyslot wipe but only if user
did not provided password or keyfile explicitely.

Fixes issue #265.

Signed-off-by: Milan Broz <gmazyland@gmail.com>
 2015-11-22 12:50:34 +01:00
Gleb Fotengauer-Malinovskiy
5e9c27118e Add optional libpasswdqc support for new LUKS passwords 
If password is entered through terminal (no keyfile specified) and
cryptsetup is compiled with --enable-passwdqc[=/etc/passwdqc.conf],
default system passwdqc settings are used to check password quality.
 2015-10-08 17:30:26 +00:00
Milan Broz
d7d76e72f7 Update URLs (->gitlab.com). 
The code.google is going to be abandoned.
Thank you you for all the fish.
 2015-03-19 11:23:16 +01:00
Milan Broz
1f2d8de95f Support VeraCrypt devices (TrueCrypt extension). 
Add CRYPT_TCRYPT_VERA_MODES libcryptswtup flag and
--veracrypt option.

Fixes issue#245.
 2015-02-24 22:04:15 +01:00
Milan Broz
dced269426 Update kernel version in man page. 2015-02-23 10:19:02 +01:00
Milan Broz
b834a59eaf Fix typo in man page. 
Fixes issue#244.
 2015-02-20 16:57:20 +01:00
Milan Broz
4f7b413638 Add low-level performance options for dmcrypt tuning. 
The patch adds the two options
  --perf-same_cpu_crypt
  --perf-submit_from_crypt_cpus
that set the same named options inside dmcrypt
(available in Linux kernel 3.20 and later).
 2015-02-20 16:46:34 +01:00
Milan Broz
31a4d552a2 Support keyfile offset and keyfile size option even for plain volumes. 
For historic reasons, in the plain mode the hashing is not used
if keyfile is used (with exception of --key-file=-).

Print warning if the parameters are ignored.

For other cases, uses keyfile offset, keyfile size and hash
as psecified on commandline.

Partially fixes issue#243
 2015-02-20 12:55:21 +01:00
Milan Broz
62b0138dad Allow to use --header option in all LUKS commands. 
The --header always takes precedence over positional device argument.

Also allow specify UUID= for luksSuspend and luksResume if used with
detached header.
 2015-01-26 13:31:37 +01:00
Milan Broz
c13a8003fa Mention that loop-AES extension cannot use real terminal for key file input. 
Based on issue#242.
 2015-01-15 16:03:54 +01:00
Milan Broz
2c70c057d6 Fix typo in man page. 2014-11-02 18:18:36 +01:00
Milan Broz
b8beedb621 Fix typo in man page. 2014-08-30 10:37:49 +02:00
Milan Broz
bb8dbfdf5b Update author name. 2014-06-23 21:40:12 +02:00
Milan Broz
779c80c581 Fix some spelling error found by lintian. 
Thanks to Jonas Meurer.
 2014-03-04 20:27:15 +01:00
Milan Broz
2e97d8f8e8 Prepare version 1.6.4. 2014-02-27 14:36:13 +01:00
Milan Broz
a5fa6f1015 Remove trailing spaces from man pages. 2014-02-16 10:05:39 +01:00
wagner
9bdd5bf4fe clarified hash use for -h and -c in the man-page. 2014-02-13 06:54:58 +01:00
Milan Broz
cf534f3759 Implement erase command. 2014-02-05 17:17:12 +01:00
Milan Broz
bec86e3d5a Support discard option even for TCRYPT devices. 2014-01-11 22:13:37 +01:00
Milan Broz
3bf40bb8dd Add 1.6.3 ChangeLog. 2013-12-13 21:33:53 +01:00
Milan Broz
79956a4d47 Fix skip/offset option description in man page. 2013-12-11 23:22:03 +01:00
Milan Broz
c57071a43a Fix TCRYPT system encryption mapping for multiple partitions. 
Since this commit, one can use partition directly as device parameter.

Should fix Issue#183 and Issue#188.
 2013-12-07 23:58:56 +01:00
Milan Broz
da93a3320b Add commandline option --tcrypt-backup to access TCRYPT backup header. 2013-10-29 20:35:07 +01:00
Milan Broz
154731306b Add 1.6.2 release notes. 
Remove some TCRYPT comments from man page (FAQ is better for this).
 2013-07-27 22:59:40 +02:00
wagner
45931a890d fixed all items in issue 164 
Escaped dashes in options, e.g. \-\-iter-time => \-\-iter\-time
to prevent word-breaks at inner dashes.
 2013-07-04 01:03:07 +02:00
wagner
1a5c169c06 Expanded more on protection of hidden TrueCrypt volumes and 
its problems.
 2013-07-02 03:23:49 +02:00
wagner
d8fbf43022 Added comment that a hidden volume is unprotected against changes 
in its outer volume and hence the outer volume should not be mounted.
 2013-07-02 03:00:02 +02:00
Milan Broz
8b162ca258 Fix default modes in man page. 2013-06-28 20:39:54 +02:00