Milan Broz
05da2ed2c2
Skip TCRYPT KDF if hash is not available.
2012-12-29 20:23:52 +01:00
Milan Broz
6190ad928d
Support device/file images if O_DIRECT cannot be used (1.5.1).
...
On some filesystems (like tmpfs) O_DIRECT cannot be used.
So just try to open device without O_DIRECT in the second try.
2012-12-29 15:33:20 +01:00
Milan Broz
7eccb7ff50
Change License for sub-libraries from GPLv2 only to LGPLv2.1+ ("or any later")
...
This includes crypto, loopaes, tcrypt handling code I have written myself
and verity code written originally by Mikulas Patocka and modified by me,
copyright by Red Hat.
Other part of library have to stay GPLv2+ only for now
(no agreement from all authors).
2012-12-29 11:47:28 +01:00
Milan Broz
29f21208a0
Change License from GPLv2 only to GPLv2+ ("or any later").
...
Agreed by all copyright authors.
2012-12-29 11:33:54 +01:00
Milan Broz
3b4424226f
Fix non-translated messages.
2012-12-29 11:11:23 +01:00
Milan Broz
e4c4049741
Add basic support for system TCRYPT device.
...
Rename option hidden to tcrypt-hidden.
2012-12-22 22:34:09 +01:00
Milan Broz
83f02e6682
Add copyright line for files I have written or modified.
2012-12-21 16:40:33 +01:00
Milan Broz
9ae7b7d1be
Fix regression in header backup (1.5.1).
...
Access to backup file must handle write to regular files too.
2012-12-19 13:19:05 +01:00
Milan Broz
1e3ba81613
Fix time of check/use Coverity report (and ignore another) in loop/wipe utils.
2012-12-17 15:35:33 +01:00
Milan Broz
a83cc1dbf4
Fix time of check/use Coverity report (and ignore another) in device utils.
2012-12-17 15:19:57 +01:00
Milan Broz
94d732b411
Do not use stat for backup commands.
2012-12-17 14:05:45 +01:00
Milan Broz
d742e01a32
Remove signal handling from LUKS keyencryption and simplify code.
2012-12-11 15:39:47 +01:00
Milan Broz
50d5cfa8bc
Get page size should never fail (in the works case it fails later with wrong alignment).
2012-12-10 17:47:06 +01:00
Milan Broz
80d21c039e
Fix some problems found by Coverity scan.
2012-12-10 17:28:52 +01:00
Milan Broz
549ab64358
TCRYPT: properly wipe all buffers; use prefix for all functions.
2012-12-10 16:36:22 +01:00
Milan Broz
e8d09733d4
Require params for crypt_load & TCRYPT type.
2012-12-08 01:31:38 +01:00
Milan Broz
5dc654433c
Disallow header restore if context is nonLUKS device.
2012-12-07 15:55:56 +01:00
Milan Broz
05af3a3383
Move change key into library (add crypt_keyslot_change_by_passphrase).
...
This change is useful mainly in FIPS mode, where we cannot
extract volume key directly from libcryptsetup.
2012-12-07 15:33:47 +01:00
Milan Broz
bd494d23c5
Add PBKDF2 benchmark.
2012-12-05 20:35:42 +01:00
Milan Broz
95daec798b
Use union instead of replicated attributes.
2012-12-03 16:17:43 +01:00
Milan Broz
a4585423fd
Remove some gcc extra warnings (signed/unsigned problems etc).
2012-12-02 23:13:59 +01:00
Milan Broz
5aef0809d4
Add TCRYPT documentation,
2012-12-02 21:32:49 +01:00
Milan Broz
72c111bac4
Fix (stupid) crc32 keyfile endianess bug.
2012-12-01 14:32:01 +01:00
Milan Broz
ffb6ecc488
Add TCRYPT api test, fix some minor problems found.
2012-11-30 18:41:10 +01:00
Milan Broz
6123541d80
Add missing pbkdf check file.
2012-11-30 17:05:03 +01:00
Milan Broz
e510dd9c60
Add sys/types.h for loop wrapper (required on new systems).
2012-11-30 15:08:39 +01:00
Milan Broz
0461d9e822
Better tcrypt test options.
2012-11-30 15:03:01 +01:00
Milan Broz
4f7262aa96
And fix previous comment once more... :)
2012-11-30 13:52:03 +01:00
Milan Broz
eac953c6e4
Fix skcipher failure handling.
2012-11-30 13:37:14 +01:00
Milan Broz
d7fc953fa2
Handle kernel crypto api init failure better.
2012-11-29 18:01:02 +01:00
Milan Broz
21756a1969
TCRYPT: fix activation and hidden device offsets.
2012-11-27 17:13:53 +01:00
Milan Broz
17a8e85cb8
TCRYPT: add backup header option.
2012-11-26 13:15:08 +01:00
Milan Broz
98db3bc0bf
Fix blockwise read/write for end writes near end of device.
...
Ignore setpriority failure (will be remoced later anyway).
2012-11-25 22:57:32 +01:00
Milan Broz
46cf1c6ce0
TCRYPT: simplify code, support blowfish chains for header
2012-11-25 22:52:47 +01:00
Milan Broz
c81260b3c3
TCRYPT: add dump command
2012-11-23 17:10:57 +01:00
Milan Broz
8d69e19ac1
TCRYPT: support crypt_volume_key_get
2012-11-23 15:20:46 +01:00
Milan Broz
6ab93841e9
TCRYPT: show proper device in status for chained mode
2012-11-23 13:46:23 +01:00
Milan Broz
52cbbdaf38
TCRYPT: move all header handling into library.
...
Add warning about unsupported modes.
2012-11-23 13:01:43 +01:00
Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
7199662fbb
Add kernel skcipher backend.
2012-11-19 21:21:40 +01:00
Milan Broz
a14a2137e7
Add CRC32 implementation.
2012-11-19 21:18:18 +01:00
Milan Broz
16ac703008
Move PBKDF2 into crypto backend wrapper.
...
Implement new KDF bechmark check.
Use internal openssl kdf (and prepare gcrypt one).
2012-11-19 21:17:55 +01:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
