Milan Broz
ae9c9cf369
Disallow explicit small payload offset for detached header.
...
LUKS detached header has some limitations, one of them
is that you cannot run some explicit check for data offsets
without providing also data device.
Because luksDump and all key handle commands takes only
metadata device (LUKS heaer device), it not easy to properly
support data payload offset validation.
So if detached header is present for luksFormat, code now
allows data payload 0 (IOW whole data device is used)
and explicit offset larger than header+keyslots
(the same as the header is on data device - so some space is wasted).
N.B. with detached header the option --align-payload is used
directly without any round up caculations.
Fixes Issue#155.
2013-05-11 10:59:02 +02:00
Milan Broz
6127b6959f
Update copyright year on changed files.
2013-03-24 09:05:33 +01:00
Milan Broz
f2521889c2
Deactivate whole device TCRYPT tree if context is NULL
...
API (unfortunately) supports NULL argument for crypt_deactivate,
with new chained TCRYPT devices it must deactivate all
chained devices as well.
Fixes issue#147.
2013-03-17 19:20:42 +01:00
Milan Broz
2780ccdd62
Properly cleanup on interrupt in api-test.
2013-01-16 15:28:12 +01:00
Milan Broz
fdcabdfd28
Support test run in kernel FIPS mode.
2013-01-15 14:53:19 +01:00
Milan Broz
6a1f49c244
Fix tcrypt test header.
2013-01-13 23:53:35 +01:00
Milan Broz
8613651f18
Use tabs in script.
2013-01-13 20:45:55 +01:00
Milan Broz
20149281a4
Fix tests to work with pwquality compiled in.
2013-01-10 15:34:11 +01:00
Milan Broz
36eb33bc86
Skip test for kernel wihtout autoclear flag.
2013-01-08 18:44:02 +01:00
Milan Broz
df8fb84723
Workaround api-test compilation on some very old systems.
2013-01-08 17:41:06 +01:00
Milan Broz
4de648a77a
Properly specify cipher in tests.
2013-01-08 14:45:39 +01:00
Milan Broz
929dc47be4
Fix displaying of error messages for mising kernel features.
2013-01-08 14:19:31 +01:00
Milan Broz
37d52bf01b
Require lsblk for tcrypt test.
2012-12-30 12:35:35 +01:00
Milan Broz
0946c704bf
Fix status of device if path argument is used. Fix double path prefix for non-existent device path.
2012-12-30 11:48:30 +01:00
Milan Broz
05da2ed2c2
Skip TCRYPT KDF if hash is not available.
2012-12-29 20:23:52 +01:00
Milan Broz
29f21208a0
Change License from GPLv2 only to GPLv2+ ("or any later").
...
Agreed by all copyright authors.
2012-12-29 11:33:54 +01:00
Milan Broz
e4c4049741
Add basic support for system TCRYPT device.
...
Rename option hidden to tcrypt-hidden.
2012-12-22 22:34:09 +01:00
Milan Broz
83f02e6682
Add copyright line for files I have written or modified.
2012-12-21 16:40:33 +01:00
Milan Broz
069ba220d2
Add crypt_keyslot_change_by_passphrase() api test.
2012-12-21 16:27:55 +01:00
Milan Broz
9ae7b7d1be
Fix regression in header backup (1.5.1).
...
Access to backup file must handle write to regular files too.
2012-12-19 13:19:05 +01:00
Milan Broz
d05f020d5a
Add keyfiles tcrypt test.
2012-12-01 13:43:59 +01:00
Milan Broz
dde57477fc
And skip tcrypt api test if there is no af_alf kernel interface.
2012-11-30 18:53:32 +01:00
Milan Broz
ffb6ecc488
Add TCRYPT api test, fix some minor problems found.
2012-11-30 18:41:10 +01:00
Milan Broz
0461d9e822
Better tcrypt test options.
2012-11-30 15:03:01 +01:00
Milan Broz
f35f34b909
Fix po files.
2012-11-27 19:18:05 +01:00
Milan Broz
34a2176689
TCRYPT: add simple test and image archive.
2012-11-27 19:08:10 +01:00
Milan Broz
1b191e14d0
Remove test dir during cleanup.
2012-11-25 23:43:14 +01:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
Milan Broz
c2e12440d2
Add some offset/keyslot offset checks.
2012-08-30 14:08:34 +02:00
Milan Broz
15442c1747
Modprobe kernel modules early in api-test.
2012-08-14 15:54:31 +02:00
Milan Broz
49b018c765
Create hash image if doesn't exist in veritysetup format.
2012-08-12 23:42:41 +02:00
Milan Broz
99643a82ae
Be sure verity module is loaded in test.
2012-07-23 15:00:28 +02:00
Milan Broz
8b8e206c07
Skip multikey if not supported (e.g. FIPS mode - md5 for IV not available).
2012-07-12 12:53:26 +02:00
Milan Broz
a47ebccf9a
Add module load to test.
2012-07-10 10:15:40 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
b684fffdaf
Switch to use unit suffix for --reduce-device-size option.
2012-06-25 16:06:43 +02:00
Milan Broz
be5473f242
Fix verity test.
...
(Writing just one byte from urandom means, that there is still
high probability the byte will be the same and it will cause
no data corruption :-)
2012-06-19 18:40:38 +02:00
Milan Broz
527c0fe4f9
Rename without_activation to test_passphrase.
2012-06-19 17:37:31 +02:00
Milan Broz
0ec4d4c9cf
Add directio to reenc test.
2012-06-19 16:04:20 +02:00
Milan Broz
a38fcafcff
Add --without-activation option for luksOpen (check passphrase only).
2012-06-19 15:36:19 +02:00
Milan Broz
a9d9a2ad44
Fix hex_to_bytes and add it to common utils.
2012-06-18 17:09:48 +02:00
Milan Broz
b773823a1b
Add ability to encrypt plain device.
2012-06-18 14:29:22 +02:00
Milan Broz
0894814148
Add some simple reenc test.
2012-06-17 21:59:29 +02:00
Milan Broz
0de4b65ba6
Rename hash-start to hash-offset and switch to use bytes units.
2012-06-11 12:35:18 +02:00
Milan Broz
5c7954a0c7
Require only up to last keyslot area for header device (ignore data offset).
...
Fix header backup and restore to work on files with large data offset.
2012-06-11 12:20:19 +02:00
Milan Broz
ade21e6c60
Support empty salt for verity, support no superblock.
2012-06-09 13:12:04 +02:00
Milan Broz
92d1bebdac
Fix missing lines.
2012-06-08 22:47:45 +02:00
Milan Broz
39a5408e98
Add man page.
2012-06-08 22:40:57 +02:00
Milan Broz
f4101d0f8b
Use action names in veritysetup (similar to cryptsetup).
2012-06-08 21:51:58 +02:00
Milan Broz
4b0b82adc5
Rewrite veritysetup to use libcryptsetup.
2012-06-07 00:18:49 +02:00
